Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.mft
File: SmPcZ1Ooy9dLdEUsFTbzfZxNxww.mft (raw, json)
Hash identifier: Y6yBnEs3Wmc3tg10fW2hErab97z4/8Yp2qMTlw5qKwQ=
Subject key identifier: 11:ED:7F:A5:50:BC:82:ED:C4:48:D6:1D:6E:88:BA:C7:33:A0:05:30
Authority key identifier: 4A:63:DC:67:53:A8:CB:D7:4B:74:45:2C:15:36:F3:7D:9C:4D:C7:0C
Certificate issuer: /CN=4a63dc6753a8cbd74b74452c1536f37d9c4dc70c
Certificate serial: 01989ECC405DF0AA9ED8AEDC57136FFC036A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.mft
Manifest number: 0AF0
Signing time: Tue 12 Aug 2025 15:00:42 +0000
Manifest this update: Tue 12 Aug 2025 15:00:42 +0000
Manifest next update: Wed 13 Aug 2025 15:00:42 +0000
Files and hashes: 1: SmPcZ1Ooy9dLdEUsFTbzfZxNxww.crl (hash: ZxVGsRnN2vBO3tHGkNX4xqX7I/OGKJxIyuqzGw0NRjE=)
2: XWgrA6JE6hMs-fYR5JSr732MBIw.roa (hash: +T0dpzBRYum3dH9uf73tvrJYycbYVgdyC2zBV2vtA1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.mft
rsync://rpki.ripe.net/repository/DEFAULT/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:cc:40:5d:f0:aa:9e:d8:ae:dc:57:13:6f:fc:03:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a63dc6753a8cbd74b74452c1536f37d9c4dc70c
Validity
Not Before: Aug 12 15:00:42 2025 GMT
Not After : Aug 13 15:00:42 2025 GMT
Subject: CN=11ed7fa550bc82edc448d61d6e88bac733a00530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e0:4d:26:61:d1:0d:64:92:e6:cd:12:6f:8d:
d8:e7:a3:7d:11:2e:d9:4a:90:c3:eb:6b:3e:a5:87:
3f:66:00:5b:c4:05:bd:60:09:a6:7c:1e:98:b4:f9:
06:ea:bb:6c:81:ae:b1:1c:5f:43:f5:d4:58:d0:ed:
62:6a:99:02:69:c2:c2:a7:d2:68:e0:a6:36:c8:dc:
33:2c:3f:1b:28:7d:08:79:e4:b6:f1:42:40:01:31:
fa:84:d7:5e:b0:bf:c9:7e:1d:36:e7:73:8f:74:29:
54:1d:0d:c1:d5:11:9e:80:a0:81:1a:76:90:3a:38:
80:55:d5:01:67:49:81:82:28:e2:a7:84:5c:32:e4:
8f:77:56:a5:6f:15:11:8f:54:2c:b6:58:df:12:7f:
76:e0:92:57:3a:27:ff:6a:2f:43:12:6c:86:8e:ee:
0c:25:e8:92:aa:50:16:92:1c:98:99:9d:ac:a9:30:
64:88:ba:a3:d1:cc:53:a3:da:20:86:44:c7:45:75:
9e:f9:44:07:64:3d:2b:9c:cc:94:c7:67:22:55:0d:
97:b8:1d:82:15:d3:70:87:58:41:0f:a2:47:08:fc:
5a:35:b0:a1:41:27:9c:3d:07:9c:be:35:e7:60:ea:
98:71:5e:90:e7:49:ed:36:e4:a1:84:ba:41:2b:90:
95:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:ED:7F:A5:50:BC:82:ED:C4:48:D6:1D:6E:88:BA:C7:33:A0:05:30
X509v3 Authority Key Identifier:
keyid:4A:63:DC:67:53:A8:CB:D7:4B:74:45:2C:15:36:F3:7D:9C:4D:C7:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:72:8c:77:c4:39:f1:81:12:70:16:b4:65:14:1a:22:60:f4:
5e:64:44:28:bd:76:07:f1:ae:7e:ae:1a:b1:3c:fb:f6:d5:27:
29:73:db:13:8c:fc:99:a5:45:6e:8b:62:dc:39:82:74:8b:62:
57:06:96:b5:f5:4e:7d:5a:aa:3a:a4:88:52:2a:10:db:59:45:
89:b3:f1:1e:9d:0d:ac:69:60:c4:d4:70:e5:41:70:5e:18:15:
8b:e7:58:80:ae:5c:70:39:85:a5:3f:28:0b:67:bb:c4:25:31:
8e:d6:6c:15:50:45:0a:be:69:22:c7:d9:07:c4:72:c5:1d:43:
d1:3b:1a:2d:9f:32:d5:c5:eb:90:56:e7:9c:9f:a3:38:36:2f:
b7:1d:7b:16:61:34:5a:df:df:0a:d3:3f:c4:4e:b1:4f:74:7b:
52:ed:63:f3:77:ad:31:25:ec:aa:9a:20:20:73:25:d4:70:0b:
b5:f0:62:86:08:21:60:88:69:ce:10:a3:7e:37:4d:67:2e:bd:
77:96:79:e2:09:e8:41:ce:b9:55:5b:f5:a3:a9:19:b4:88:4c:
78:22:0c:1d:8c:62:d3:06:0d:26:18:f6:87:d1:3e:db:3f:af:
f7:bd:ee:60:e3:fd:6f:0a:b2:94:91:57:e0:32:38:9b:a5:e8:
95:8f:5b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:52:03 2025 by rpki-client