Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.mft
File: SAqutTeS1SAWm84oDD3Yb4N27GM.mft (raw, json)
Hash identifier: p1PaqVDv3bCQZMyJ9w7KaMEjFBNwCWIb0TsSzqE7OcE=
Subject key identifier: 03:EE:48:5E:BF:3D:E6:15:27:0C:45:88:0E:38:9D:6F:85:1C:4F:2B
Authority key identifier: 48:0A:AE:B5:37:92:D5:20:16:9B:CE:28:0C:3D:D8:6F:83:76:EC:63
Certificate issuer: /CN=480aaeb53792d520169bce280c3dd86f8376ec63
Certificate serial: 0199FC214D5D48FEE6BECAFB89BE0784F26B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAqutTeS1SAWm84oDD3Yb4N27GM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 11:01:04 +0000
Manifest this update: Sun 19 Oct 2025 11:01:04 +0000
Manifest next update: Mon 20 Oct 2025 11:01:04 +0000
Files and hashes: 1: Kc84xCLoopoVZjLsNJRLj2XaVE4.roa (hash: EYoVSxaior1IONB3NcpWKZcJ8AkylxdNSnDbeuoh7e8=)
2: SAqutTeS1SAWm84oDD3Yb4N27GM.crl (hash: Mu3WGvVikqQVGli6qtShXGhGgFnPWotnl+fRIDLBbiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAqutTeS1SAWm84oDD3Yb4N27GM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:4d:5d:48:fe:e6:be:ca:fb:89:be:07:84:f2:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480aaeb53792d520169bce280c3dd86f8376ec63
Validity
Not Before: Oct 19 11:01:04 2025 GMT
Not After : Oct 20 11:01:04 2025 GMT
Subject: CN=03ee485ebf3de615270c45880e389d6f851c4f2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f5:aa:5d:a0:bd:fb:5c:0d:54:d0:42:32:ec:
09:a1:1f:07:42:ff:d2:37:ef:bf:70:b0:e9:aa:38:
09:fa:c0:0b:d3:6e:fb:49:3b:5a:a3:e1:29:7e:6f:
63:2f:88:70:47:74:be:f6:0f:26:c2:5c:b4:41:bd:
5a:ab:5d:e1:6e:7a:b5:4e:90:87:9a:c1:36:22:21:
a8:97:65:13:b8:f1:5d:16:c2:b9:a0:58:c9:ae:bf:
b7:6e:f2:73:9d:3b:bb:8f:02:a2:ec:5c:ff:f8:d0:
2f:ee:f0:2b:0e:e1:2e:e5:e4:8a:9f:6b:b5:c5:b4:
42:be:31:a1:f1:e1:cc:97:be:e3:26:b7:48:52:21:
3d:91:ce:83:74:4b:05:1e:a8:80:39:b0:8e:2d:fd:
0e:aa:a0:6d:47:3e:05:57:09:d2:3f:0e:52:f8:12:
11:a9:1e:30:da:22:12:3e:2f:6e:2c:b7:69:31:56:
24:4d:7f:41:38:38:8c:31:fd:7f:69:64:2b:91:e0:
91:02:36:b5:c3:80:df:b1:3b:91:90:c2:7c:d9:bf:
24:ae:53:78:60:82:32:b2:41:f0:31:a0:56:aa:5a:
39:b4:c1:38:d4:04:18:6b:42:c1:1c:21:3f:87:d5:
ee:82:14:6b:a2:8d:7c:07:4a:50:d2:9e:be:39:df:
c9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:EE:48:5E:BF:3D:E6:15:27:0C:45:88:0E:38:9D:6F:85:1C:4F:2B
X509v3 Authority Key Identifier:
keyid:48:0A:AE:B5:37:92:D5:20:16:9B:CE:28:0C:3D:D8:6F:83:76:EC:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAqutTeS1SAWm84oDD3Yb4N27GM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:bb:bc:9d:b7:a9:82:a2:af:fb:f9:cf:b8:15:44:7f:5d:4b:
94:5d:df:54:3d:8a:7d:b5:21:a5:8b:23:7b:83:ae:f7:df:13:
c7:39:50:53:bc:e6:e0:98:70:f7:66:0b:a8:cd:4b:45:17:6f:
7b:7e:9c:85:9a:a1:3b:b4:2e:f0:55:31:50:15:d0:7f:d7:2d:
2a:82:76:71:74:3f:9c:0b:e4:bd:6d:44:02:0a:57:3e:4b:cf:
70:97:fc:b1:24:54:2d:04:9a:06:b7:0e:2d:08:11:7b:22:35:
a6:81:f4:a4:7b:47:01:fa:08:95:0d:88:69:00:cc:2e:f2:a1:
3b:f7:8c:cd:49:ae:1c:51:d1:df:54:d4:c4:42:d4:5b:3f:80:
82:64:8f:ec:8a:82:35:1f:8d:bf:e7:b9:1a:e7:b0:4a:a7:34:
c5:d2:ab:63:a2:c8:60:11:96:7f:c5:26:d5:a0:c5:6b:f3:4d:
4c:90:d0:01:7e:0d:fb:31:3c:a9:6a:1e:06:f5:4e:44:2f:87:
90:0b:47:af:3a:b0:ff:a5:4f:96:1f:f7:37:17:8d:4c:6c:b6:
d9:64:14:35:05:08:4b:7b:62:ff:6c:4d:e9:81:fc:b5:12:82:
2b:8e:92:d4:23:2e:c2:14:fb:cf:0e:0d:08:99:f7:20:ae:9f:
54:37:f9:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:51 2025 by rpki-client