Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/2a72ee-ec1f-40c6-ad9d-5a4df896fc3e/1/SAtOZTD1jbM45B1DTlwkjri0nrU.mft
File: SAtOZTD1jbM45B1DTlwkjri0nrU.mft (raw, json)
Hash identifier: 4o38AU7nGTXtuAMSR1Ms3M3aZxguoht7bLFMqGUD64I=
Subject key identifier: B4:9A:C0:20:BA:9C:F7:97:26:AB:7B:AB:D5:1C:70:A6:27:5B:F0:06
Authority key identifier: 48:0B:4E:65:30:F5:8D:B3:38:E4:1D:43:4E:5C:24:8E:B8:B4:9E:B5
Certificate issuer: /CN=480b4e6530f58db338e41d434e5c248eb8b49eb5
Certificate serial: 0198D5BB7C7A95F323D6B6352A61B1C4B565
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAtOZTD1jbM45B1DTlwkjri0nrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/2a72ee-ec1f-40c6-ad9d-5a4df896fc3e/1/SAtOZTD1jbM45B1DTlwkjri0nrU.mft
Manifest number: 0DA7
Signing time: Sat 23 Aug 2025 07:01:30 +0000
Manifest this update: Sat 23 Aug 2025 07:01:30 +0000
Manifest next update: Sun 24 Aug 2025 07:01:30 +0000
Files and hashes: 1: 7uSiA8HXWA8UBPDhlbJf6OPrStI.roa (hash: FkBj3YOFMPVe1t2rUxjgfIEksgfiFnto6OU3DC0lCyA=)
2: SAtOZTD1jbM45B1DTlwkjri0nrU.crl (hash: S/p1Xji+463u7wxo/RITYLjCgLPw98ORXdE4RwD9pO8=)
3: USDR-3S3Ht8uHMQ4E3_c_aswiFo.roa (hash: V2Oob57cuCUs4jtdyHi3fUFQvcz8PYQW8jqX4krUZXU=)
4: gNRsmV0XFCKJkgH1T9VLPl0qkP8.roa (hash: 7DieLwMe7vSj5T5/A8Tf5cCcPLC+4LWTW8IbIDeyX70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/2a72ee-ec1f-40c6-ad9d-5a4df896fc3e/1/SAtOZTD1jbM45B1DTlwkjri0nrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/2a72ee-ec1f-40c6-ad9d-5a4df896fc3e/1/SAtOZTD1jbM45B1DTlwkjri0nrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAtOZTD1jbM45B1DTlwkjri0nrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:7c:7a:95:f3:23:d6:b6:35:2a:61:b1:c4:b5:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480b4e6530f58db338e41d434e5c248eb8b49eb5
Validity
Not Before: Aug 23 07:01:30 2025 GMT
Not After : Aug 24 07:01:30 2025 GMT
Subject: CN=b49ac020ba9cf79726ab7babd51c70a6275bf006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b2:4b:b4:0a:21:13:19:e7:d2:ca:53:72:bf:
34:62:96:ef:5b:ff:0c:ea:6f:93:ca:0d:45:2a:7b:
e9:17:83:b7:b6:33:17:41:bb:11:66:72:22:4b:be:
db:f0:16:13:4b:08:74:20:dc:38:b6:c5:3c:23:5e:
91:53:42:b9:d2:e3:1a:cb:60:ce:3a:c3:8d:d8:0c:
13:7d:b7:d0:98:c1:a1:90:a9:9a:f0:76:93:51:07:
25:20:d5:f3:5d:61:f6:d4:65:48:28:89:d2:fb:98:
83:59:4c:be:01:26:1f:8c:18:97:fe:a1:fa:f7:04:
f5:16:43:11:60:c7:49:ef:06:b5:c8:fd:84:fe:d2:
3a:66:ae:cc:c9:f7:24:a0:2a:c7:ad:38:62:b0:55:
a6:39:46:16:10:0a:5d:f0:bd:e2:2f:32:05:2e:37:
31:53:ee:da:36:8b:66:ae:f1:b8:89:bc:24:81:8e:
0d:6e:64:9c:04:ec:5a:5e:e7:94:49:5b:fc:92:3c:
c9:0c:19:ff:f5:6a:a0:56:b4:0e:1b:a6:63:46:05:
d2:b0:40:22:5c:96:9a:bc:d7:a7:6b:18:07:4e:4c:
d9:29:c3:2a:f1:19:b0:7d:75:0a:30:5d:39:6e:3e:
13:0a:cd:f2:fc:17:a5:62:5d:58:09:b6:7e:1f:10:
56:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:9A:C0:20:BA:9C:F7:97:26:AB:7B:AB:D5:1C:70:A6:27:5B:F0:06
X509v3 Authority Key Identifier:
keyid:48:0B:4E:65:30:F5:8D:B3:38:E4:1D:43:4E:5C:24:8E:B8:B4:9E:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAtOZTD1jbM45B1DTlwkjri0nrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2a72ee-ec1f-40c6-ad9d-5a4df896fc3e/1/SAtOZTD1jbM45B1DTlwkjri0nrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2a72ee-ec1f-40c6-ad9d-5a4df896fc3e/1/SAtOZTD1jbM45B1DTlwkjri0nrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:f6:8d:79:d4:2e:7e:48:9a:e2:9e:3c:5c:7e:9c:28:ad:59:
6a:8e:1e:e2:0f:86:12:d0:a1:e7:9a:02:35:e1:7a:eb:e5:c4:
98:e9:f0:9c:ed:78:a4:26:0d:7e:91:d6:2a:e4:56:86:2f:b3:
cb:37:78:88:5f:35:6d:13:0a:e5:f1:a7:ae:a6:d0:61:fa:17:
16:0f:1c:22:06:0d:f2:5a:e8:71:7a:7a:2b:26:8b:0f:42:b2:
d6:0d:b6:63:32:bf:23:d0:f1:84:dc:35:ef:25:6c:c8:ad:91:
e2:57:46:94:bd:be:8c:57:81:f4:27:ec:d3:a3:05:c8:e7:e9:
6d:11:72:44:3b:32:e5:95:44:19:84:c6:ae:ed:9e:fc:f4:01:
2c:5d:c0:3f:85:f8:32:e2:07:22:41:83:8d:60:14:72:47:27:
8b:bb:a4:b3:ba:74:51:eb:c6:3f:f2:0a:99:12:5c:1f:38:e8:
1c:b7:85:be:2f:90:9c:ce:06:59:c0:cb:90:62:8f:e6:4d:58:
08:c9:d1:18:7e:15:6c:3d:45:97:fc:a4:21:87:b9:e4:29:7b:
2d:f2:5f:f3:ce:22:51:82:56:85:e7:19:e6:8c:25:d3:91:b3:
51:35:bc:7a:22:2b:bc:ff:db:cd:0b:76:5f:22:33:bf:36:32:
eb:29:49:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:30:53 2025 by rpki-client