Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.mft
File: SAqutTeS1SAWm84oDD3Yb4N27GM.mft (raw, json)
Hash identifier: 24MdhvHFWBxMYR1M9CaiVd4R8ZfwnXWVJVTlc4OHCOQ=
Subject key identifier: 63:89:DA:D8:A1:8A:57:E8:AC:EC:A6:F6:BA:DA:85:93:A7:F4:03:34
Authority key identifier: 48:0A:AE:B5:37:92:D5:20:16:9B:CE:28:0C:3D:D8:6F:83:76:EC:63
Certificate issuer: /CN=480aaeb53792d520169bce280c3dd86f8376ec63
Certificate serial: 0197B8C5CF02FC77DA97FCCC6737873DC1F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAqutTeS1SAWm84oDD3Yb4N27GM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 23:01:00 +0000
Manifest this update: Sat 28 Jun 2025 23:01:00 +0000
Manifest next update: Sun 29 Jun 2025 23:01:00 +0000
Files and hashes: 1: Kc84xCLoopoVZjLsNJRLj2XaVE4.roa (hash: EYoVSxaior1IONB3NcpWKZcJ8AkylxdNSnDbeuoh7e8=)
2: SAqutTeS1SAWm84oDD3Yb4N27GM.crl (hash: T4lSL8z62+DYNBhDWVURkyyHOSF8frdDXHk57YHr6lg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAqutTeS1SAWm84oDD3Yb4N27GM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 23:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:c5:cf:02:fc:77:da:97:fc:cc:67:37:87:3d:c1:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480aaeb53792d520169bce280c3dd86f8376ec63
Validity
Not Before: Jun 28 23:01:00 2025 GMT
Not After : Jun 29 23:01:00 2025 GMT
Subject: CN=6389dad8a18a57e8aceca6f6bada8593a7f40334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b2:5f:b2:6a:a5:a2:01:d1:b5:6c:9f:35:79:
48:0a:1f:a6:2e:64:cf:80:e1:17:eb:74:80:ea:ca:
83:39:ee:07:33:86:2b:9f:d7:76:02:fe:13:ed:b1:
11:46:d2:e0:3f:02:35:b2:e7:ca:3b:c4:54:75:28:
ab:7f:ae:27:c6:f7:5b:d5:67:06:f9:81:cc:83:08:
47:52:11:e6:c3:14:46:06:bf:a2:ce:c8:88:77:d1:
c3:0c:a5:ee:36:4e:b9:aa:06:0f:b1:80:c1:03:17:
ea:64:d9:16:ce:a1:33:6e:35:21:ba:9a:bb:7b:9e:
d6:fa:9c:7d:15:01:9b:7e:ec:f7:b1:0a:84:1a:e1:
a1:0f:0f:12:38:02:6a:fb:06:79:35:bd:dc:28:3e:
3d:8f:7c:9b:3e:d4:52:06:7f:5e:2e:4f:2c:96:72:
73:e9:df:10:53:32:c4:9f:d2:7d:b6:15:93:d2:8b:
3c:62:53:e0:88:58:fc:56:3c:c2:d0:a8:03:1b:dc:
00:59:a0:79:f6:80:3b:91:94:31:92:f0:28:3e:c1:
1c:f3:33:2f:63:8d:f2:0b:4e:25:91:94:a8:9e:45:
70:c0:99:85:7b:18:84:07:ef:29:c6:74:b1:fd:d5:
11:8c:a8:30:5f:3d:87:bc:1f:01:3b:cd:50:6e:40:
4c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:89:DA:D8:A1:8A:57:E8:AC:EC:A6:F6:BA:DA:85:93:A7:F4:03:34
X509v3 Authority Key Identifier:
keyid:48:0A:AE:B5:37:92:D5:20:16:9B:CE:28:0C:3D:D8:6F:83:76:EC:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAqutTeS1SAWm84oDD3Yb4N27GM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:da:8b:7f:de:83:1d:a9:6f:35:29:c8:80:2e:35:27:71:75:
13:ce:d4:b6:c1:32:0f:c1:b7:09:6d:15:43:7a:97:09:52:93:
ef:cf:ab:30:3a:3b:20:f9:19:ca:f1:5b:d0:89:9f:00:8d:44:
02:02:78:73:da:ee:e1:0a:18:ab:7a:60:f7:f3:c4:8a:d0:1f:
fb:d7:02:33:0b:6b:78:8e:51:84:4e:5f:8e:99:20:d4:6e:0d:
0f:93:df:e5:46:05:7b:34:3b:e6:67:e4:da:08:ad:b5:a5:c2:
8c:1d:5f:9f:46:c8:dc:26:cb:ee:c1:fe:d5:ac:42:84:cf:97:
24:e6:38:0e:a6:f9:0e:4e:cb:ee:b6:9d:82:5b:1c:e2:9f:e2:
64:8e:2d:49:b5:79:36:f9:ab:a5:93:0b:ce:e5:ea:19:2a:65:
34:05:2e:37:5e:77:9f:c2:4d:16:4d:11:b6:16:77:60:6c:7c:
68:87:0a:44:59:85:dd:c2:93:52:0b:5c:10:1c:30:0f:63:f0:
f8:21:88:17:61:9e:15:08:ca:4f:24:e0:35:8c:c3:69:e8:cf:
8f:59:b9:e7:e1:a4:da:fd:21:c0:83:86:ad:dd:8f:c5:32:19:
13:89:bb:55:4a:32:20:58:f6:9b:97:b3:0f:11:56:5b:c1:39:
4e:e9:b7:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:51:24 2025 by rpki-client