Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.mft
File: SAqutTeS1SAWm84oDD3Yb4N27GM.mft (raw, json)
Hash identifier: munjQfSYjRglS7uYGUjaytz7zCv3RSiiFLOz5x4O2SI=
Subject key identifier: 57:DC:82:77:D2:23:E6:CD:DA:DB:1A:C7:75:13:89:FF:93:B7:C6:BB
Authority key identifier: 48:0A:AE:B5:37:92:D5:20:16:9B:CE:28:0C:3D:D8:6F:83:76:EC:63
Certificate issuer: /CN=480aaeb53792d520169bce280c3dd86f8376ec63
Certificate serial: 0198D4A7966B0E037A4E21DEA792E68DAAEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAqutTeS1SAWm84oDD3Yb4N27GM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 02:00:09 +0000
Manifest this update: Sat 23 Aug 2025 02:00:09 +0000
Manifest next update: Sun 24 Aug 2025 02:00:09 +0000
Files and hashes: 1: Kc84xCLoopoVZjLsNJRLj2XaVE4.roa (hash: EYoVSxaior1IONB3NcpWKZcJ8AkylxdNSnDbeuoh7e8=)
2: SAqutTeS1SAWm84oDD3Yb4N27GM.crl (hash: mnbylIhoMCdLfIOUonc9zRIAVyYKOl+Y2UWCaeoNVE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAqutTeS1SAWm84oDD3Yb4N27GM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:96:6b:0e:03:7a:4e:21:de:a7:92:e6:8d:aa:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480aaeb53792d520169bce280c3dd86f8376ec63
Validity
Not Before: Aug 23 02:00:09 2025 GMT
Not After : Aug 24 02:00:09 2025 GMT
Subject: CN=57dc8277d223e6cddadb1ac7751389ff93b7c6bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:79:d6:1d:c8:62:16:e3:97:0d:75:46:a2:ec:
43:29:d5:ae:32:d0:d5:8b:a3:d0:9c:0d:5a:2e:e4:
11:61:c0:eb:1f:c4:a2:20:f7:ed:05:33:ba:58:16:
73:a9:81:13:04:7d:be:b2:69:69:15:01:f2:8a:79:
88:45:0d:6b:5f:01:07:a0:35:9e:13:24:f6:2a:49:
70:4c:32:1b:13:18:71:2c:85:1a:58:76:e2:36:39:
ff:41:57:e4:da:94:c7:a8:38:af:46:29:d0:53:59:
00:2d:1c:14:48:31:cf:46:ff:8d:39:1f:be:50:c8:
b2:df:d8:01:75:bc:d7:a5:d3:6f:7f:a9:1e:33:83:
a0:de:2b:7f:74:ad:a8:92:c8:1a:b4:d7:47:0b:57:
39:7a:2b:a9:37:e0:a9:6c:b0:4a:e9:84:0f:e2:5d:
16:83:8a:fd:2a:d0:c7:d6:27:20:25:9a:f5:64:b5:
72:f4:6f:9b:eb:cc:23:56:f9:88:b0:8a:a3:a4:a9:
1a:75:b9:e8:ec:40:35:da:c3:af:f2:7e:c3:51:a3:
c0:4f:2a:e4:e2:e9:73:e5:b8:81:be:e6:a2:14:0b:
d1:2f:52:2f:c7:14:e3:23:26:7c:9f:c7:38:4c:b9:
f1:e5:13:54:d6:4c:ba:7f:0e:d9:55:83:dd:75:5d:
31:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:DC:82:77:D2:23:E6:CD:DA:DB:1A:C7:75:13:89:FF:93:B7:C6:BB
X509v3 Authority Key Identifier:
keyid:48:0A:AE:B5:37:92:D5:20:16:9B:CE:28:0C:3D:D8:6F:83:76:EC:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAqutTeS1SAWm84oDD3Yb4N27GM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:2a:af:e9:3c:f0:73:22:35:2f:62:06:fc:73:e2:35:6b:d9:
c1:2a:7d:36:cd:ce:fe:79:9f:38:20:4d:0a:5a:b9:3e:c6:0c:
c9:ad:96:49:f3:c7:d6:aa:98:b2:ae:16:0b:b3:8d:96:d1:43:
dd:b0:17:19:ad:67:5e:79:3e:ff:56:51:ea:f5:84:0f:31:ae:
e9:36:b8:fc:ca:20:a4:30:de:33:24:59:a0:8e:36:af:7b:15:
f8:05:0e:23:e0:6d:ef:13:7e:82:42:de:0b:65:5b:f6:d1:bd:
54:f9:3e:d7:62:d3:8f:7a:15:3d:8a:c3:bf:cf:91:d4:b8:3c:
ba:89:64:27:8b:54:f3:4d:02:97:14:46:9d:90:55:d9:b5:37:
27:bc:ad:38:c7:2e:5a:e4:59:1d:24:27:e0:ed:06:e3:f8:f5:
b8:12:22:c7:91:07:2c:c3:d8:59:f2:37:66:dc:2f:5c:ef:4e:
72:12:30:1a:c0:97:4e:69:d4:97:35:3e:ec:78:6a:12:50:b8:
30:e9:7a:8e:dc:ad:70:57:69:7f:37:cb:7c:20:06:62:02:f9:
8c:e9:f6:65:61:8c:ab:ef:1c:18:1f:bf:ae:a5:98:be:c5:15:
86:75:f1:c7:51:22:62:d6:49:b5:71:72:b8:cc:f5:29:ce:c4:
48:b2:52:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUp5ZrDgN6TiHep5LmjarsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MGFhZWI1Mzc5MmQ1MjAxNjliY2UyODBjM2RkODZmODM3
NmVjNjMwHhcNMjUwODIzMDIwMDA5WhcNMjUwODI0MDIwMDA5WjAzMTEwLwYDVQQD
Eyg1N2RjODI3N2QyMjNlNmNkZGFkYjFhYzc3NTEzODlmZjkzYjdjNmJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHnWHchiFuOXDXVGouxDKdWuMtDV
i6PQnA1aLuQRYcDrH8SiIPftBTO6WBZzqYETBH2+smlpFQHyinmIRQ1rXwEHoDWe
EyT2KklwTDIbExhxLIUaWHbiNjn/QVfk2pTHqDivRinQU1kALRwUSDHPRv+NOR++
UMiy39gBdbzXpdNvf6keM4Og3it/dK2oksgatNdHC1c5eiupN+CpbLBK6YQP4l0W
g4r9KtDH1icgJZr1ZLVy9G+b68wjVvmIsIqjpKkadbno7EA12sOv8n7DUaPATyrk
4ulz5biBvuaiFAvRL1IvxxTjIyZ8n8c4TLnx5RNU1ky6fw7ZVYPddV0xpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFfcgnfSI+bN2tsax3UTif+Tt8a7MB8GA1UdIwQY
MBaAFEgKrrU3ktUgFpvOKAw92G+DduxjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0FxdXRUZVMxU0FXbTg0b0REM1liNE4yN0dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8zZDU3OWYtODE1YS00NDZlLThlZDkt
ZDE2NjkxYWQ2OWZhLzEvU0FxdXRUZVMxU0FXbTg0b0REM1liNE4yN0dNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi8zZDU3OWYtODE1YS00NDZlLThlZDktZDE2NjkxYWQ2OWZh
LzEvU0FxdXRUZVMxU0FXbTg0b0REM1liNE4yN0dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIiqv6Tzw
cyI1L2IG/HPiNWvZwSp9Ns3O/nmfOCBNClq5PsYMya2WSfPH1qqYsq4WC7ONltFD
3bAXGa1nXnk+/1ZR6vWEDzGu6Ta4/MogpDDeMyRZoI42r3sV+AUOI+Bt7xN+gkLe
C2Vb9tG9VPk+12LTj3oVPYrDv8+R1Lg8uolkJ4tU800ClxRGnZBV2bU3J7ytOMcu
WuRZHSQn4O0G4/j1uBIix5EHLMPYWfI3ZtwvXO9OchIwGsCXTmnUlzU+7HhqElC4
MOl6jtytcFdpfzfLfCAGYgL5jOn2ZWGMq+8cGB+/rqWYvsUVhnXxx1EiYtZJtXFy
uMz1Kc7ESLJSnA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:47:53 2025 by rpki-client