Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.mft
File: SMMR7eKLkvXGGpEr4GA5SYsjQio.mft (raw, json)
Hash identifier: VDrbiIJefhUeTVt6Kf5sAcZsbsPYlCRTN8D+VQ8o9Q0=
Subject key identifier: 0D:B8:6F:39:1D:F6:EB:E5:47:1E:AF:41:EE:FB:F9:21:2D:80:C1:88
Authority key identifier: 48:C3:11:ED:E2:8B:92:F5:C6:1A:91:2B:E0:60:39:49:8B:23:42:2A
Certificate issuer: /CN=48c311ede28b92f5c61a912be06039498b23422a
Certificate serial: 019A4F628AD73973D24ED43F8CC635B4A248
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SMMR7eKLkvXGGpEr4GA5SYsjQio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.mft
Manifest number: 07F7
Signing time: Tue 04 Nov 2025 15:00:49 +0000
Manifest this update: Tue 04 Nov 2025 15:00:49 +0000
Manifest next update: Wed 05 Nov 2025 15:00:49 +0000
Files and hashes: 1: SMMR7eKLkvXGGpEr4GA5SYsjQio.crl (hash: Y8NBmEosLJqbbCXRJSYeSmIpw3QeB/KUqvrcZWt6LFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.mft
rsync://rpki.ripe.net/repository/DEFAULT/SMMR7eKLkvXGGpEr4GA5SYsjQio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:8a:d7:39:73:d2:4e:d4:3f:8c:c6:35:b4:a2:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48c311ede28b92f5c61a912be06039498b23422a
Validity
Not Before: Nov 4 15:00:49 2025 GMT
Not After : Nov 5 15:00:49 2025 GMT
Subject: CN=0db86f391df6ebe5471eaf41eefbf9212d80c188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2d:3b:f2:d7:6c:00:24:ad:ff:4e:cb:9e:ba:
f3:e5:dc:dd:47:b5:14:a7:c8:9f:cf:17:c0:cd:dc:
41:2d:82:69:8d:57:c4:9f:16:53:8b:c7:96:1b:e3:
0e:b9:eb:6d:32:16:f2:15:31:bb:7d:0d:66:d0:cf:
71:a5:f4:8e:bd:28:f4:75:61:90:66:1b:1b:be:71:
a2:08:bc:ce:62:77:a8:78:34:ec:ce:81:28:4f:57:
5c:f2:ff:06:2d:a2:7e:14:0b:aa:74:f3:9b:21:e4:
73:d3:f0:59:64:87:f2:a5:79:3a:c2:04:09:69:21:
90:a6:46:30:9b:30:2d:76:c8:98:43:eb:8d:11:72:
83:ba:f4:cd:51:b1:55:0d:9a:f2:d6:73:f2:0a:f9:
b6:e7:1a:32:b3:26:ad:ed:2b:88:8d:2f:14:79:6e:
41:6f:74:8d:d6:54:b5:ce:1a:55:41:3c:76:ea:dc:
63:ac:83:45:75:41:6c:54:3f:1f:e8:e0:2b:d8:77:
e4:91:25:db:2b:b2:a5:12:19:8d:33:8d:c1:26:65:
3f:2d:d5:76:30:a6:c6:3a:7d:e1:b4:e2:bc:ea:d8:
e6:eb:e5:4b:a3:ea:f6:38:65:d6:31:51:91:e5:c9:
8a:7d:c4:c6:ca:80:31:c8:18:ec:53:13:59:58:f6:
31:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B8:6F:39:1D:F6:EB:E5:47:1E:AF:41:EE:FB:F9:21:2D:80:C1:88
X509v3 Authority Key Identifier:
keyid:48:C3:11:ED:E2:8B:92:F5:C6:1A:91:2B:E0:60:39:49:8B:23:42:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SMMR7eKLkvXGGpEr4GA5SYsjQio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:1c:5c:f4:27:10:c7:7b:00:e2:69:42:fa:42:41:24:99:df:
32:cc:4d:90:74:0f:dd:09:c4:35:20:96:bc:ad:24:4d:7f:c6:
88:46:b8:74:73:f4:85:56:cf:a3:a2:e6:85:5c:cc:4e:c9:d5:
1d:05:6c:4c:f3:08:86:2a:4a:4e:1a:90:9c:00:76:84:9a:cc:
58:40:47:87:7f:f6:b9:07:e0:c8:cc:6e:9e:fa:8c:b7:96:8e:
86:e3:f1:d0:d8:7e:f0:cc:f4:8c:a3:da:f3:16:53:e3:ea:4f:
a8:ee:5a:2f:0a:b2:13:df:84:8c:ca:1f:dc:aa:e8:c2:4b:1e:
c2:bb:79:98:b8:f3:b1:6c:eb:92:dd:3c:ac:62:de:34:18:72:
51:31:13:0f:ac:2e:ae:de:c6:b5:dd:a7:c2:80:d8:b9:b9:a5:
69:1c:c8:29:d1:ca:ac:d2:9d:54:e6:59:cc:18:89:9c:a7:51:
c2:17:ef:45:11:af:fe:cd:f9:bc:fe:47:b3:e6:f3:b9:33:c1:
c4:f4:d6:41:6a:53:a0:ba:ab:3f:01:5c:35:2d:70:4e:ad:31:
65:09:cc:5d:18:83:ae:cc:40:5a:96:91:84:46:e7:75:63:35:
9e:bf:98:76:b5:f8:39:5b:6b:07:a3:5f:90:df:c7:27:7f:25:
11:d6:83:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:16:55 2025 by rpki-client