Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.mft
File: SmN2zpIIfkx85TZoZTd2nizDQFk.mft (raw, json)
Hash identifier: 1/oYpJvQmIfPu3e6njbOHJhdhqcB+8YDpa96aK0RA+E=
Subject key identifier: 3B:29:5F:3A:C8:8D:21:68:F0:E1:4F:9B:B6:4C:C3:2F:29:40:0F:0C
Authority key identifier: 4A:63:76:CE:92:08:7E:4C:7C:E5:36:68:65:37:76:9E:2C:C3:40:59
Certificate issuer: /CN=4a6376ce92087e4c7ce536686537769e2cc34059
Certificate serial: 019A51F5C47124AA957E48CB89814EF54DF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmN2zpIIfkx85TZoZTd2nizDQFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 03:00:52 +0000
Manifest this update: Wed 05 Nov 2025 03:00:52 +0000
Manifest next update: Thu 06 Nov 2025 03:00:52 +0000
Files and hashes: 1: SmN2zpIIfkx85TZoZTd2nizDQFk.crl (hash: aOhjz2ZvzyStYaG3PseV65GrntIRMhyHu20V0D588ZY=)
2: ZCwrk3DUvn-uZjo3WgvhoOWpHv0.roa (hash: AtdbQHHLI0H407seskZvbBq2HBK/6vTqf2YFUILBHxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/SmN2zpIIfkx85TZoZTd2nizDQFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:c4:71:24:aa:95:7e:48:cb:89:81:4e:f5:4d:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a6376ce92087e4c7ce536686537769e2cc34059
Validity
Not Before: Nov 5 03:00:52 2025 GMT
Not After : Nov 6 03:00:52 2025 GMT
Subject: CN=3b295f3ac88d2168f0e14f9bb64cc32f29400f0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7f:74:40:ba:53:2b:8e:c0:ab:8e:4f:78:95:
99:af:a3:b7:69:aa:b4:d2:2d:93:ea:f9:c6:11:cb:
18:83:5a:e1:4a:90:9f:b3:07:90:77:cc:41:4e:fa:
48:38:b4:ea:62:73:a3:4a:1f:c2:4e:4a:6b:40:75:
e7:a2:1c:c3:e5:be:8d:c8:62:e0:94:7c:96:95:77:
d6:87:9d:64:86:34:5d:52:97:3c:7b:b0:0b:9b:87:
0f:ec:19:d8:fa:e3:8d:fd:dc:3f:d1:bf:e6:c6:76:
37:b8:57:08:d5:9c:0c:34:e4:d0:3f:b9:f1:90:88:
9f:89:fd:1c:ff:1e:1b:db:5c:45:e7:54:26:02:5a:
4d:20:17:49:e6:f4:81:98:9e:e1:6f:54:a5:83:4c:
f6:28:b8:f3:4d:72:d7:61:bd:ea:75:d4:10:55:64:
de:0a:a1:4f:6e:84:83:05:59:5b:24:51:af:f4:c8:
5a:20:71:7c:26:49:88:00:02:11:71:01:73:1a:42:
43:6a:fa:b0:35:26:b5:80:4c:88:df:f4:b8:1f:4b:
6f:5b:4f:98:8e:cb:4e:17:e0:36:15:dd:4a:e0:cc:
f2:07:05:e6:50:05:ab:7c:d3:a8:44:9b:80:a5:ce:
62:67:77:11:b9:c6:bb:94:c5:88:d5:19:04:6b:a9:
28:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:29:5F:3A:C8:8D:21:68:F0:E1:4F:9B:B6:4C:C3:2F:29:40:0F:0C
X509v3 Authority Key Identifier:
keyid:4A:63:76:CE:92:08:7E:4C:7C:E5:36:68:65:37:76:9E:2C:C3:40:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmN2zpIIfkx85TZoZTd2nizDQFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:99:19:c4:2a:91:78:0c:a3:38:56:e6:1a:58:f7:11:f1:3e:
3f:af:62:89:30:95:94:81:be:30:77:3e:ee:be:fb:d4:77:01:
7b:94:e2:d6:89:0d:cc:c0:f9:1a:d3:47:4d:ec:d6:9e:4a:12:
e8:87:5c:4d:6b:73:a5:89:dd:ad:99:95:ab:d2:fd:6b:a0:84:
91:8a:6e:36:c1:ae:f7:cd:71:98:79:1d:02:3c:cb:1c:15:a0:
d5:94:df:c6:f4:31:69:d2:f3:8c:27:d9:e0:3a:78:00:62:e1:
7a:c2:80:58:3b:79:05:e8:fd:88:a6:1c:04:7d:4e:6c:b6:e8:
bb:ac:2b:b5:c0:18:dd:7e:c1:d7:12:17:3b:a8:f7:d2:f7:40:
fa:be:61:4a:03:ba:33:09:9a:c3:c4:62:3e:71:49:8a:d9:bd:
4f:db:e3:4c:14:27:8b:3c:38:e8:c3:f0:81:04:21:f4:7c:8a:
20:6e:73:19:1f:90:8f:89:a1:90:eb:a3:99:71:08:1d:47:ab:
44:33:cc:1f:56:47:e2:15:69:28:c7:fb:75:03:44:31:31:e8:
70:6c:e8:dd:f4:21:07:4c:fe:0f:9d:bd:54:55:6e:2b:48:d7:
ce:d6:f8:80:e8:e0:67:63:07:3d:38:b9:25:91:ed:08:db:51:
a4:7b:c0:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:22:14 2025 by rpki-client