Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.mft
File: SMMR7eKLkvXGGpEr4GA5SYsjQio.mft (raw, json)
Hash identifier: cxCAnSr+EM5yjTGO7cZz5PWslZoq+WZDV5xDgx9k5CM=
Subject key identifier: C5:E9:EC:71:0F:34:65:BE:8B:94:41:2E:1A:A3:59:5B:29:C1:B5:2E
Authority key identifier: 48:C3:11:ED:E2:8B:92:F5:C6:1A:91:2B:E0:60:39:49:8B:23:42:2A
Certificate issuer: /CN=48c311ede28b92f5c61a912be06039498b23422a
Certificate serial: 0198744FED86A8ADA10588EE335EDB30A4BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SMMR7eKLkvXGGpEr4GA5SYsjQio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.mft
Manifest number: 0701
Signing time: Mon 04 Aug 2025 09:00:51 +0000
Manifest this update: Mon 04 Aug 2025 09:00:51 +0000
Manifest next update: Tue 05 Aug 2025 09:00:51 +0000
Files and hashes: 1: SMMR7eKLkvXGGpEr4GA5SYsjQio.crl (hash: BKMaujIyexPVz3FH6tpPPUGdwpojS4xMo6YxcTpgSnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.mft
rsync://rpki.ripe.net/repository/DEFAULT/SMMR7eKLkvXGGpEr4GA5SYsjQio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:ed:86:a8:ad:a1:05:88:ee:33:5e:db:30:a4:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48c311ede28b92f5c61a912be06039498b23422a
Validity
Not Before: Aug 4 09:00:51 2025 GMT
Not After : Aug 5 09:00:51 2025 GMT
Subject: CN=c5e9ec710f3465be8b94412e1aa3595b29c1b52e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:97:21:39:9e:95:61:ed:87:69:98:44:8f:d5:
07:d8:90:d9:53:8e:15:04:79:7f:4e:24:27:2f:bb:
c0:5c:ef:08:f1:38:79:67:ae:87:47:ac:ab:6e:d5:
af:8f:34:37:d4:00:02:8d:15:97:fc:50:cd:f9:0a:
0f:ba:80:79:c7:ea:58:1b:97:3a:dd:9b:37:a6:b3:
5d:ac:d4:8c:ce:a1:f3:d6:0f:4b:11:c0:06:5b:1c:
d1:d2:f2:f6:16:ff:73:8a:08:fa:1a:11:b8:b7:d3:
44:6c:34:12:88:d0:51:f1:ac:2d:c0:00:fd:e7:3e:
12:fb:7b:a4:db:31:6d:c3:dd:40:84:84:74:a9:84:
d7:fe:dd:95:c2:81:f8:93:06:d1:45:6b:41:7a:d9:
08:52:fa:c8:09:5e:7c:c6:18:e6:70:11:4f:21:e4:
31:65:1d:f3:99:ee:09:05:60:34:c5:87:8a:69:8e:
6e:55:ba:03:22:65:4f:23:10:6c:5d:08:b9:99:d8:
5d:d1:7d:cb:8d:22:2a:ff:34:04:33:8f:ca:4b:8b:
77:58:94:d1:4a:ea:6e:ca:6a:7d:8d:51:ac:70:fc:
9a:7e:90:34:bd:8e:f9:90:b5:19:72:7f:9e:72:ee:
95:90:a3:08:7e:4c:aa:9b:7f:6d:8b:d0:c6:8f:32:
8e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:E9:EC:71:0F:34:65:BE:8B:94:41:2E:1A:A3:59:5B:29:C1:B5:2E
X509v3 Authority Key Identifier:
keyid:48:C3:11:ED:E2:8B:92:F5:C6:1A:91:2B:E0:60:39:49:8B:23:42:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SMMR7eKLkvXGGpEr4GA5SYsjQio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:72:3b:48:3d:09:ae:80:be:e4:97:a0:d9:77:30:c9:a3:36:
6e:c0:18:65:26:29:e6:f4:94:99:25:8c:0f:ad:df:2e:52:ed:
b3:49:54:8a:7e:3f:8f:0d:cf:9c:8d:f6:aa:d4:2f:00:9d:49:
fd:dd:e3:d9:20:7e:32:f7:fd:b1:56:9e:05:13:36:92:74:69:
4f:43:71:c3:b8:a1:17:88:ef:1b:18:ea:89:93:b9:a8:8a:26:
6e:3f:e1:c5:d1:95:e1:c5:84:d3:ba:a1:98:be:b9:3c:3b:b6:
ea:59:fd:78:59:98:66:9a:03:cc:05:6a:c2:d6:62:fc:c6:66:
01:49:ec:9e:83:49:96:a7:bb:59:d2:fd:b1:b7:41:58:c7:50:
5b:25:17:6a:bf:08:a1:b0:fa:fa:da:2c:d1:0a:ae:3c:42:f1:
74:d2:a0:b2:1f:23:d5:69:7e:23:c3:17:55:d5:24:fe:2f:7c:
f4:d6:1a:1a:9e:8b:e9:75:20:5a:9b:64:e0:ce:76:92:df:2f:
ff:5a:57:4f:5f:f2:a4:97:40:c6:ac:d9:5f:96:f0:65:38:1c:
dc:ce:11:6d:e5:b9:e0:d7:fa:68:a0:df:4b:85:cb:09:94:17:
61:84:78:37:08:13:bf:23:14:ee:72:58:56:5f:0d:94:51:9e:
d5:93:79:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0T+2GqK2hBYjuM17bMKS8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4YzMxMWVkZTI4YjkyZjVjNjFhOTEyYmUwNjAzOTQ5OGIy
MzQyMmEwHhcNMjUwODA0MDkwMDUxWhcNMjUwODA1MDkwMDUxWjAzMTEwLwYDVQQD
EyhjNWU5ZWM3MTBmMzQ2NWJlOGI5NDQxMmUxYWEzNTk1YjI5YzFiNTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJchOZ6VYe2HaZhEj9UH2JDZU44V
BHl/TiQnL7vAXO8I8Th5Z66HR6yrbtWvjzQ31AACjRWX/FDN+QoPuoB5x+pYG5c6
3Zs3prNdrNSMzqHz1g9LEcAGWxzR0vL2Fv9zigj6GhG4t9NEbDQSiNBR8awtwAD9
5z4S+3uk2zFtw91AhIR0qYTX/t2VwoH4kwbRRWtBetkIUvrICV58xhjmcBFPIeQx
ZR3zme4JBWA0xYeKaY5uVboDImVPIxBsXQi5mdhd0X3LjSIq/zQEM4/KS4t3WJTR
Supuymp9jVGscPyafpA0vY75kLUZcn+ecu6VkKMIfkyqm39ti9DGjzKOiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMXp7HEPNGW+i5RBLhqjWVspwbUuMB8GA1UdIwQY
MBaAFEjDEe3ii5L1xhqRK+BgOUmLI0IqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU01NUjdlS0xrdlhHR3BFcjRHQTVTWXNqUWlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8xZjY3NmEtYzUyMS00ZmM5LWI1NGIt
N2FlOGI3MDY2NzE5LzEvU01NUjdlS0xrdlhHR3BFcjRHQTVTWXNqUWlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8xZjY3NmEtYzUyMS00ZmM5LWI1NGItN2FlOGI3MDY2NzE5
LzEvU01NUjdlS0xrdlhHR3BFcjRHQTVTWXNqUWlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtXI7SD0J
roC+5Jeg2XcwyaM2bsAYZSYp5vSUmSWMD63fLlLts0lUin4/jw3PnI32qtQvAJ1J
/d3j2SB+Mvf9sVaeBRM2knRpT0Nxw7ihF4jvGxjqiZO5qIombj/hxdGV4cWE07qh
mL65PDu26ln9eFmYZpoDzAVqwtZi/MZmAUnsnoNJlqe7WdL9sbdBWMdQWyUXar8I
obD6+tos0QquPELxdNKgsh8j1Wl+I8MXVdUk/i989NYaGp6L6XUgWptk4M52kt8v
/1pXT1/ypJdAxqzZX5bwZTgc3M4RbeW54Nf6aKDfS4XLCZQXYYR4NwgTvyMU7nJY
Vl8NlFGe1ZN51Q==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:14:54 2025 by rpki-client