Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
File: saSmAco1xsg3a4mq9EO2PqQ5zbg.mft (raw, json)
Hash identifier: u6B/kKovMGHmpYmTeltH4oyEeDgLSpgOrQStzDMW2NA=
Subject key identifier: F0:8B:50:70:F1:18:76:5F:E1:9F:CE:4E:EB:15:64:19:CA:E2:A2:B0
Authority key identifier: B1:A4:A6:01:CA:35:C6:C8:37:6B:89:AA:F4:43:B6:3E:A4:39:CD:B8
Certificate issuer: /CN=b1a4a601ca35c6c8376b89aaf443b63ea439cdb8
Certificate serial: 019A22C0D04DCBA0ED2AEBD293D0A4B3C363
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
Manifest number: 1703
Signing time: Sun 26 Oct 2025 23:00:52 +0000
Manifest this update: Sun 26 Oct 2025 23:00:52 +0000
Manifest next update: Mon 27 Oct 2025 23:00:52 +0000
Files and hashes: 1: 9PRjxeCqIjFBKjj9ZCsSUjWebm8.roa (hash: RUbumQikWEUJw86fkVBXkNxglUvMLn5BU1sBdU5SK10=)
2: Bjn95uhuPOZfmvC5Hlwb47V9emA.roa (hash: eI7zCms4yUIVsMumVhbxjLkGPCR2Oes6ouNTkj3JCYQ=)
3: fMf7eyqEUG6wDxNfLym83Kyd4aQ.roa (hash: 1Tc3rrxlFqoaEb/zNF3iOU0XDowc7uiSsGwcEKpC398=)
4: saSmAco1xsg3a4mq9EO2PqQ5zbg.crl (hash: z+vTjAPrt1NgSqglzJysydwgNubxzp5eyR8cfMAWWfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:c0:d0:4d:cb:a0:ed:2a:eb:d2:93:d0:a4:b3:c3:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a4a601ca35c6c8376b89aaf443b63ea439cdb8
Validity
Not Before: Oct 26 23:00:52 2025 GMT
Not After : Oct 27 23:00:52 2025 GMT
Subject: CN=f08b5070f118765fe19fce4eeb156419cae2a2b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cf:6b:2a:83:ed:c9:a9:5e:31:41:1b:34:32:
77:b1:75:2d:da:6c:ae:9f:59:11:3c:aa:47:35:e4:
9b:0e:2a:1a:7c:76:76:7e:23:09:0b:0f:bd:7c:ee:
0c:c2:ae:d3:df:8d:15:d0:70:3f:59:9a:e9:4c:63:
a9:c2:a9:09:cd:49:f9:43:68:a7:af:dc:7b:dd:05:
7d:f0:88:d8:b3:3b:77:5b:c2:1c:4c:58:29:1f:74:
49:5b:6b:a2:e9:15:29:43:b9:be:d5:2d:f5:7f:15:
e3:df:42:fa:9a:75:67:cf:6d:f0:f6:49:85:58:78:
c3:25:8f:9c:81:dd:bd:0b:86:83:8a:6b:4b:90:6b:
a2:62:06:d0:08:b4:f3:60:3d:1e:05:cd:30:2e:2e:
22:d8:f0:eb:6c:8f:24:a5:a2:b7:37:61:13:26:06:
d0:68:2a:3c:da:cd:fe:bc:9e:d6:5d:68:2c:e0:43:
3e:75:ca:49:fa:4d:ac:8f:a1:ae:0b:05:f4:a7:03:
8c:57:95:bc:6e:4c:f0:5d:28:7b:09:d6:45:ee:e3:
d2:fa:69:32:58:1c:a9:26:1a:51:27:60:2b:9f:07:
ac:8b:25:89:05:38:a1:da:68:e8:61:17:ac:a7:e4:
07:a0:50:b4:14:4d:be:de:5a:e9:8f:33:f9:1b:41:
5a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:8B:50:70:F1:18:76:5F:E1:9F:CE:4E:EB:15:64:19:CA:E2:A2:B0
X509v3 Authority Key Identifier:
keyid:B1:A4:A6:01:CA:35:C6:C8:37:6B:89:AA:F4:43:B6:3E:A4:39:CD:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:b4:56:2f:3a:0d:7f:a8:f7:8f:41:64:22:b3:8d:9f:26:84:
3d:55:a7:fa:75:4b:2a:98:9e:b4:a1:3d:fc:c6:41:d0:d6:cf:
b3:c7:3f:d9:f2:75:38:5a:e3:52:dc:c6:d1:07:fb:48:c3:e0:
97:66:bf:15:7b:e2:91:2f:e4:a9:7d:35:37:c1:79:5a:ca:28:
bb:28:e3:72:d9:c9:02:31:dc:c7:1b:8c:e8:b5:b7:a3:a6:cc:
2c:03:cd:42:29:02:7d:ee:4e:d0:dd:29:67:6e:d1:85:d9:17:
98:49:19:d1:f5:0d:51:9f:52:13:27:15:02:35:75:5a:12:9e:
c7:01:6c:dd:b5:44:0b:42:63:69:be:ce:f9:a5:21:f4:84:18:
17:09:e0:d8:57:24:a9:ad:40:ab:20:b1:a2:79:62:3f:d9:d5:
a4:e3:f2:c3:a2:2f:c9:a3:7d:e4:29:a2:91:ec:81:8b:46:7d:
54:57:73:78:51:e0:4e:36:72:18:2b:56:83:ee:cf:bf:6c:a2:
44:0e:09:fd:b8:e4:c5:db:77:de:a4:80:71:34:21:70:c6:1e:
38:ea:ae:3f:17:fa:68:e0:b0:8d:ee:a8:fc:93:7b:16:d6:32:
e9:c0:0d:6e:44:28:d0:93:0e:cf:81:77:72:03:ce:1f:19:ea:
2e:c1:94:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoiwNBNy6DtKuvSk9Cks8NjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYTRhNjAxY2EzNWM2YzgzNzZiODlhYWY0NDNiNjNlYTQz
OWNkYjgwHhcNMjUxMDI2MjMwMDUyWhcNMjUxMDI3MjMwMDUyWjAzMTEwLwYDVQQD
EyhmMDhiNTA3MGYxMTg3NjVmZTE5ZmNlNGVlYjE1NjQxOWNhZTJhMmIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApM9rKoPtyaleMUEbNDJ3sXUt2myu
n1kRPKpHNeSbDioafHZ2fiMJCw+9fO4Mwq7T340V0HA/WZrpTGOpwqkJzUn5Q2in
r9x73QV98IjYszt3W8IcTFgpH3RJW2ui6RUpQ7m+1S31fxXj30L6mnVnz23w9kmF
WHjDJY+cgd29C4aDimtLkGuiYgbQCLTzYD0eBc0wLi4i2PDrbI8kpaK3N2ETJgbQ
aCo82s3+vJ7WXWgs4EM+dcpJ+k2sj6GuCwX0pwOMV5W8bkzwXSh7CdZF7uPS+mky
WBypJhpRJ2ArnwesiyWJBTih2mjoYResp+QHoFC0FE2+3lrpjzP5G0FadwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPCLUHDxGHZf4Z/OTusVZBnK4qKwMB8GA1UdIwQY
MBaAFLGkpgHKNcbIN2uJqvRDtj6kOc24MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2FTbUFjbzF4c2czYTRtcTlFTzJQcVE1emJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9kZmVjNDAtYjg2ZS00OTRjLWJhMTAt
M2E1NjI4Y2M4MWQ5LzEvc2FTbUFjbzF4c2czYTRtcTlFTzJQcVE1emJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9kZmVjNDAtYjg2ZS00OTRjLWJhMTAtM2E1NjI4Y2M4MWQ5
LzEvc2FTbUFjbzF4c2czYTRtcTlFTzJQcVE1emJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiLRWLzoN
f6j3j0FkIrONnyaEPVWn+nVLKpietKE9/MZB0NbPs8c/2fJ1OFrjUtzG0Qf7SMPg
l2a/FXvikS/kqX01N8F5WsoouyjjctnJAjHcxxuM6LW3o6bMLAPNQikCfe5O0N0p
Z27RhdkXmEkZ0fUNUZ9SEycVAjV1WhKexwFs3bVEC0Jjab7O+aUh9IQYFwng2Fck
qa1AqyCxonliP9nVpOPyw6IvyaN95CmikeyBi0Z9VFdzeFHgTjZyGCtWg+7Pv2yi
RA4J/bjkxdt33qSAcTQhcMYeOOquPxf6aOCwje6o/JN7FtYy6cANbkQo0JMOz4F3
cgPOHxnqLsGUcw==
-----END CERTIFICATE-----
Generated at Mon Oct 27 01:42:32 2025 by rpki-client