Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/ec8801-0a7c-487e-a103-525d7e22c788/1/smbm5NXff4olZUFEdV172ZLnNTk.mft
File: smbm5NXff4olZUFEdV172ZLnNTk.mft (raw, json)
Hash identifier: HTLs0VnYny5DEcDjSENPKd4eD94nO3QAs4mH7Dnrgi0=
Subject key identifier: EF:93:AB:AC:29:15:57:AC:72:4A:6D:BD:FB:45:88:74:FE:56:E0:43
Authority key identifier: B2:66:E6:E4:D5:DF:7F:8A:25:65:41:44:75:5D:7B:D9:92:E7:35:39
Certificate issuer: /CN=b266e6e4d5df7f8a25654144755d7bd992e73539
Certificate serial: 019873E251A5DA865A60DED36A27BF021D5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/smbm5NXff4olZUFEdV172ZLnNTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/ec8801-0a7c-487e-a103-525d7e22c788/1/smbm5NXff4olZUFEdV172ZLnNTk.mft
Manifest number: 0920
Signing time: Mon 04 Aug 2025 07:01:08 +0000
Manifest this update: Mon 04 Aug 2025 07:01:08 +0000
Manifest next update: Tue 05 Aug 2025 07:01:08 +0000
Files and hashes: 1: 4UxBywVcvcMsb-HDJGoMszIr0uA.roa (hash: CPNjg2b32CAKEDe5pmcVPP+MsVRB7Gy+EYi43k44UBQ=)
2: smbm5NXff4olZUFEdV172ZLnNTk.crl (hash: v4r9yUM1vy8EmnKSh49+hPx8dRdfcitnHnv4G1tk7Xg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/ec8801-0a7c-487e-a103-525d7e22c788/1/smbm5NXff4olZUFEdV172ZLnNTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/ec8801-0a7c-487e-a103-525d7e22c788/1/smbm5NXff4olZUFEdV172ZLnNTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/smbm5NXff4olZUFEdV172ZLnNTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:51:a5:da:86:5a:60:de:d3:6a:27:bf:02:1d:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b266e6e4d5df7f8a25654144755d7bd992e73539
Validity
Not Before: Aug 4 07:01:08 2025 GMT
Not After : Aug 5 07:01:08 2025 GMT
Subject: CN=ef93abac291557ac724a6dbdfb458874fe56e043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:41:a2:3f:36:23:fb:81:b4:56:49:39:4e:54:
38:fb:c7:71:29:87:d6:4b:b9:96:d9:65:1e:b1:9a:
9b:19:f5:65:22:7d:c2:0e:11:34:1e:74:0b:61:1e:
d8:e7:de:19:56:42:4d:c7:59:ce:bd:53:d3:73:b3:
29:c8:92:c2:58:64:0d:2f:54:c6:74:a3:de:3e:9e:
4a:1d:17:86:e7:3c:b9:b5:7a:95:28:d2:c5:d7:6f:
42:5f:6c:a4:65:6c:e2:b0:d0:b6:08:6a:8e:fb:12:
6e:76:ba:1d:98:9b:52:66:c9:e4:e2:34:35:aa:e0:
28:d1:5a:55:82:37:17:83:1e:c2:c5:ed:60:e1:5a:
cf:92:f7:2f:f7:59:99:0e:0f:53:5a:9d:fb:02:bd:
4b:e0:cf:f0:19:e7:dc:95:87:18:a3:97:ed:7f:93:
19:cd:ba:83:db:8e:d1:93:a8:7d:28:0c:25:0b:46:
50:37:1f:63:33:e5:61:46:7c:68:10:72:df:bd:d2:
6b:c3:73:0f:19:31:9a:0c:a5:b5:4b:7b:94:f5:a4:
88:08:03:3f:68:d0:68:cc:67:fa:be:db:ff:d1:90:
55:7a:5d:59:49:70:d4:99:fd:14:82:9c:64:01:aa:
b0:b6:59:f1:e1:b6:68:df:2e:4c:2e:f8:f7:5e:c2:
26:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:93:AB:AC:29:15:57:AC:72:4A:6D:BD:FB:45:88:74:FE:56:E0:43
X509v3 Authority Key Identifier:
keyid:B2:66:E6:E4:D5:DF:7F:8A:25:65:41:44:75:5D:7B:D9:92:E7:35:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/smbm5NXff4olZUFEdV172ZLnNTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ec8801-0a7c-487e-a103-525d7e22c788/1/smbm5NXff4olZUFEdV172ZLnNTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ec8801-0a7c-487e-a103-525d7e22c788/1/smbm5NXff4olZUFEdV172ZLnNTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:81:12:7b:6c:06:30:08:51:62:47:a9:05:15:96:8b:43:07:
cd:e1:dc:bd:f6:c6:f4:c0:ea:b6:29:50:17:99:9a:e9:1e:a4:
61:6c:bd:68:54:ef:4c:27:a1:63:51:8b:95:59:30:80:9d:a2:
90:7c:2d:5e:62:94:04:5a:70:89:12:93:99:eb:47:1d:7c:df:
0b:aa:13:46:8d:86:ef:65:e7:be:a2:1c:0e:2d:78:2d:14:f7:
9c:37:1f:87:f3:61:45:7c:41:5f:72:b6:b6:c2:ce:4f:7e:5f:
68:b8:97:e6:9f:50:c5:be:a9:e5:e3:a4:71:3f:bb:2e:14:a1:
c1:f0:5e:cf:13:d1:6c:15:b1:21:ec:d4:9e:46:6b:22:91:ca:
7f:c6:93:f3:70:d7:d6:1b:e7:b4:98:14:34:29:88:94:97:00:
76:41:d4:56:b2:35:17:df:ef:7f:9d:b6:07:d1:f7:45:a6:57:
37:2e:97:4a:1c:8a:87:1f:48:16:08:2e:4c:6a:58:4f:0d:86:
7c:e7:52:aa:48:65:96:78:71:08:06:ec:bf:68:79:2c:e7:00:
1d:4e:6e:99:8f:b3:46:e1:73:c9:32:2d:12:e3:8a:b5:e6:7c:
18:e7:28:af:c0:24:2b:2e:c6:4c:75:07:22:9b:93:2a:ac:5f:
85:9b:20:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:01:39 2025 by rpki-client