Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
File: saSmAco1xsg3a4mq9EO2PqQ5zbg.mft (raw, json)
Hash identifier: Ca67dIwRKPrYBDVqu9QQi6ZePcbFsNrlOoySdtKw+eU=
Subject key identifier: C8:9B:33:06:E8:C5:39:A0:F9:B9:5C:66:2D:B2:B2:25:E5:16:00:52
Authority key identifier: B1:A4:A6:01:CA:35:C6:C8:37:6B:89:AA:F4:43:B6:3E:A4:39:CD:B8
Certificate issuer: /CN=b1a4a601ca35c6c8376b89aaf443b63ea439cdb8
Certificate serial: 0198D88489D3F7C549A7584318BBBA4A9992
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
Manifest number: 1658
Signing time: Sat 23 Aug 2025 20:00:21 +0000
Manifest this update: Sat 23 Aug 2025 20:00:21 +0000
Manifest next update: Sun 24 Aug 2025 20:00:21 +0000
Files and hashes: 1: 9PRjxeCqIjFBKjj9ZCsSUjWebm8.roa (hash: RUbumQikWEUJw86fkVBXkNxglUvMLn5BU1sBdU5SK10=)
2: Bjn95uhuPOZfmvC5Hlwb47V9emA.roa (hash: eI7zCms4yUIVsMumVhbxjLkGPCR2Oes6ouNTkj3JCYQ=)
3: fMf7eyqEUG6wDxNfLym83Kyd4aQ.roa (hash: 1Tc3rrxlFqoaEb/zNF3iOU0XDowc7uiSsGwcEKpC398=)
4: saSmAco1xsg3a4mq9EO2PqQ5zbg.crl (hash: qDc8AsRaWeJ6D8WtOX0A4P+b98NxU3xXZNBZ2dB82Yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 20:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:84:89:d3:f7:c5:49:a7:58:43:18:bb:ba:4a:99:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a4a601ca35c6c8376b89aaf443b63ea439cdb8
Validity
Not Before: Aug 23 20:00:21 2025 GMT
Not After : Aug 24 20:00:21 2025 GMT
Subject: CN=c89b3306e8c539a0f9b95c662db2b225e5160052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e0:da:e4:8d:48:d8:0f:29:7c:4d:ec:8a:c4:
2a:0d:4a:bf:7b:45:e3:a9:0c:e1:51:00:04:a1:6a:
e5:96:d1:74:6e:f1:fd:ef:f2:ff:0d:ff:f3:ec:29:
8b:c6:15:89:78:3c:15:69:ab:54:ea:34:7b:e7:10:
54:0e:7f:b5:0d:b5:42:57:45:a7:58:47:68:46:04:
ee:34:ba:e9:dd:ec:b4:c7:0e:d0:19:7f:93:4f:2e:
f4:b3:af:53:a6:d0:94:a0:b4:87:0d:71:dd:78:f6:
be:58:2d:a3:33:93:d2:02:3f:32:6a:21:db:c7:88:
1d:b2:ab:e4:36:22:fb:d2:d5:a4:ad:d8:13:4d:fc:
b9:f4:67:70:b7:34:4b:da:fe:cb:9d:5f:70:30:da:
9b:6f:aa:3b:32:b4:1d:2f:d8:65:3b:65:77:b0:6e:
f2:3f:2e:75:92:ce:17:a1:fd:65:6a:c7:28:90:96:
3b:fb:7b:62:50:cd:95:86:79:21:84:65:c4:c3:87:
4f:c2:17:d5:dc:e8:ca:1f:71:ab:0f:89:d2:a1:54:
c6:11:19:b2:7b:5c:96:77:90:e4:ca:cf:50:7f:b5:
4a:21:9b:5b:e2:ca:bb:93:bb:22:f6:58:b3:07:63:
ac:15:1d:df:ea:fa:43:17:e2:86:ed:52:99:e4:08:
6f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:9B:33:06:E8:C5:39:A0:F9:B9:5C:66:2D:B2:B2:25:E5:16:00:52
X509v3 Authority Key Identifier:
keyid:B1:A4:A6:01:CA:35:C6:C8:37:6B:89:AA:F4:43:B6:3E:A4:39:CD:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:95:5e:e1:b8:0f:e4:18:1a:83:2b:13:5d:d9:fc:0f:15:78:
e7:44:ee:ab:48:9c:aa:fd:02:32:22:a7:95:3c:e5:6e:45:c9:
0e:a6:25:3a:d2:71:28:da:79:a6:b0:7a:45:3c:f2:02:89:88:
15:00:9b:5a:57:8d:c0:50:ff:9b:7b:fa:dd:1c:aa:5c:bb:ec:
71:fb:ac:cb:fb:f9:10:22:5b:55:2e:07:7b:ee:88:6c:3d:87:
93:27:28:65:61:a4:4b:4d:eb:a3:b3:4e:0f:c8:1a:f0:6d:83:
a0:51:7b:50:28:f5:fb:3c:51:ba:79:a5:b3:0b:86:7e:a8:36:
4a:ab:24:ed:79:f3:c3:3a:f9:13:9b:cc:f4:c9:0e:7c:54:d9:
67:b4:dc:fb:1e:68:e0:b5:6a:59:60:20:73:5c:76:96:8a:0b:
31:71:c9:96:7a:de:55:da:7b:89:b2:31:89:dc:2e:e2:e8:55:
f5:c8:7f:09:fe:0f:31:68:2c:6c:af:8e:9a:ed:28:03:97:8e:
a2:ca:a7:c5:f2:fb:78:45:00:36:0d:65:fc:1e:f9:d4:f5:46:
8a:84:33:6e:a1:2c:1f:3b:0d:10:14:b9:ef:e6:6e:fd:48:d7:
24:9f:73:98:07:96:67:b7:a3:b0:d4:98:8f:f2:fb:0f:05:ac:
fd:48:5f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:23:22 2025 by rpki-client