Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
File: saSmAco1xsg3a4mq9EO2PqQ5zbg.mft (raw, json)
Hash identifier: bM6X/Cyv/j0K0hN3gQABCvYoVTWGm94MmzstMI2lfNw=
Subject key identifier: 8E:09:F3:93:F7:ED:4E:28:9A:7E:77:2C:F1:8F:5F:26:8A:A1:92:AD
Authority key identifier: B1:A4:A6:01:CA:35:C6:C8:37:6B:89:AA:F4:43:B6:3E:A4:39:CD:B8
Certificate issuer: /CN=b1a4a601ca35c6c8376b89aaf443b63ea439cdb8
Certificate serial: 0197B6D763027EB3E4DF2D3E2790588A5E17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
Manifest number: 15C2
Signing time: Sat 28 Jun 2025 14:00:58 +0000
Manifest this update: Sat 28 Jun 2025 14:00:58 +0000
Manifest next update: Sun 29 Jun 2025 14:00:58 +0000
Files and hashes: 1: 9PRjxeCqIjFBKjj9ZCsSUjWebm8.roa (hash: RUbumQikWEUJw86fkVBXkNxglUvMLn5BU1sBdU5SK10=)
2: Bjn95uhuPOZfmvC5Hlwb47V9emA.roa (hash: eI7zCms4yUIVsMumVhbxjLkGPCR2Oes6ouNTkj3JCYQ=)
3: fMf7eyqEUG6wDxNfLym83Kyd4aQ.roa (hash: 1Tc3rrxlFqoaEb/zNF3iOU0XDowc7uiSsGwcEKpC398=)
4: saSmAco1xsg3a4mq9EO2PqQ5zbg.crl (hash: beRt0ufTTIRpaE5nCDGK6Q+jNB+AAJVVDbG3XMj6ans=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:63:02:7e:b3:e4:df:2d:3e:27:90:58:8a:5e:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a4a601ca35c6c8376b89aaf443b63ea439cdb8
Validity
Not Before: Jun 28 14:00:58 2025 GMT
Not After : Jun 29 14:00:58 2025 GMT
Subject: CN=8e09f393f7ed4e289a7e772cf18f5f268aa192ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8b:b3:42:4e:d9:63:a9:1c:af:29:e9:33:49:
fa:00:45:ef:7a:a2:0a:8f:e6:12:4c:28:e6:44:23:
35:70:56:0d:c9:8a:21:42:7b:31:be:76:8f:9e:91:
78:49:1d:44:02:1c:66:75:a1:35:c8:52:1e:50:fc:
1b:24:cd:79:04:73:67:0e:1d:b8:e2:97:e7:d7:15:
5a:e1:14:d6:0c:12:c5:7b:62:24:3e:c1:e7:68:55:
fe:53:d1:36:87:db:76:36:a7:42:ff:46:3d:81:77:
c2:5e:e0:22:c2:ec:ab:03:50:3e:a6:81:aa:da:6b:
c1:33:9a:47:8c:b9:f8:63:42:66:93:87:9d:7d:f8:
e4:4f:55:36:a4:7d:fd:d9:ab:6f:bd:a3:a0:5f:01:
b5:b6:99:3d:3e:16:0a:e5:a2:7a:fe:b9:0c:30:df:
fb:a8:27:9a:da:28:b6:60:79:04:29:0c:ee:b4:bb:
10:eb:76:b7:77:79:fd:68:c7:44:0e:d3:b1:78:c3:
bd:bb:f4:79:ec:04:59:26:ed:07:44:b5:56:e9:97:
ac:8b:03:c8:65:77:f3:a0:8b:d4:08:cc:64:3f:42:
39:a1:a8:e7:61:68:22:2a:ac:a2:2a:7e:91:ac:7e:
3a:42:e4:16:8b:70:d0:61:6e:2a:b3:d2:a4:6a:8e:
2d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:09:F3:93:F7:ED:4E:28:9A:7E:77:2C:F1:8F:5F:26:8A:A1:92:AD
X509v3 Authority Key Identifier:
keyid:B1:A4:A6:01:CA:35:C6:C8:37:6B:89:AA:F4:43:B6:3E:A4:39:CD:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:3a:3e:c5:a1:a3:9d:43:a0:c3:6e:20:07:8c:42:49:74:c9:
ef:e8:60:5c:3b:d5:2f:79:e4:86:4c:38:9a:4b:44:1d:5a:1b:
e2:56:a0:a5:1d:5e:81:8a:22:1a:b1:aa:42:0a:8d:2f:c6:6b:
d8:99:69:5b:b2:f4:97:3c:e5:3d:cb:08:65:3e:9b:6e:71:df:
57:19:80:79:18:ac:5e:d1:85:6d:c6:87:df:9c:85:14:54:19:
9a:19:3b:3e:75:8e:d2:e9:82:18:b2:12:75:7d:81:ce:18:8b:
21:5b:63:c5:99:e7:11:ef:32:5e:cd:fd:f4:a0:2c:69:15:df:
27:71:23:56:6d:b4:5c:36:68:68:e6:c0:c9:ec:bf:77:77:20:
49:9d:1f:8d:2f:8d:e2:1f:22:d6:79:af:f0:d7:43:fe:71:9a:
05:19:95:57:f6:b5:7b:83:09:36:53:2b:d1:7a:f7:01:af:c2:
03:68:44:f4:7b:ac:3b:95:97:1e:fd:d0:84:ee:1e:47:19:fd:
85:bc:03:91:f0:db:f5:31:9f:e1:6d:01:15:2f:d2:35:de:c0:
56:d4:fa:60:ae:ca:ce:27:55:4f:d8:b6:92:76:b8:39:02:91:
a7:20:9c:b5:08:c5:3a:48:4d:39:91:dc:76:05:d2:5c:25:8a:
fe:37:dc:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:52:30 2025 by rpki-client