Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/64dabc-6564-4ca0-802f-ca9790080716/1/SmO14kps7e29L-j2bXl6s9jqpMk.mft
File: SmO14kps7e29L-j2bXl6s9jqpMk.mft (raw, json)
Hash identifier: AJScTgKTsiRvBnQ8efoGmTteqBc9F6SwEJkiXci5rbc=
Subject key identifier: 3C:6E:4B:A0:F8:DD:24:F4:10:7C:A0:9F:73:9A:6E:02:9F:D7:96:BD
Authority key identifier: 4A:63:B5:E2:4A:6C:ED:ED:BD:2F:E8:F6:6D:79:7A:B3:D8:EA:A4:C9
Certificate issuer: /CN=4a63b5e24a6cededbd2fe8f66d797ab3d8eaa4c9
Certificate serial: 019776E53AD985A1CC74245E6FD0C5A6457E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmO14kps7e29L-j2bXl6s9jqpMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/64dabc-6564-4ca0-802f-ca9790080716/1/SmO14kps7e29L-j2bXl6s9jqpMk.mft
Manifest number: 158E
Signing time: Mon 16 Jun 2025 04:00:23 +0000
Manifest this update: Mon 16 Jun 2025 04:00:23 +0000
Manifest next update: Tue 17 Jun 2025 04:00:23 +0000
Files and hashes: 1: SmO14kps7e29L-j2bXl6s9jqpMk.crl (hash: K/dZ6eGQAzda15cnsDevWCTfbUojxzcxlOLyBuOcX84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/64dabc-6564-4ca0-802f-ca9790080716/1/SmO14kps7e29L-j2bXl6s9jqpMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/64dabc-6564-4ca0-802f-ca9790080716/1/SmO14kps7e29L-j2bXl6s9jqpMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/SmO14kps7e29L-j2bXl6s9jqpMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:e5:3a:d9:85:a1:cc:74:24:5e:6f:d0:c5:a6:45:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a63b5e24a6cededbd2fe8f66d797ab3d8eaa4c9
Validity
Not Before: Jun 16 04:00:23 2025 GMT
Not After : Jun 17 04:00:23 2025 GMT
Subject: CN=3c6e4ba0f8dd24f4107ca09f739a6e029fd796bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5d:7e:a0:00:4b:f6:db:52:a7:45:7f:9b:c6:
5d:73:a1:4b:7b:60:7a:d8:df:a9:ea:fe:1a:59:00:
4a:70:c0:28:69:8a:e6:b0:c6:d1:4b:30:6f:ff:2d:
0e:9a:89:c9:e8:4f:fb:b7:6d:ae:68:11:40:e4:30:
fe:ce:6b:a0:7a:2a:27:7a:9c:be:f5:f5:31:90:89:
ef:0f:7f:95:f0:7f:83:97:7f:94:dd:15:72:23:ac:
36:fd:45:4f:e7:1a:42:83:97:c4:0e:c1:82:28:6a:
49:68:03:11:bb:42:9c:05:60:27:2e:b0:2c:42:26:
5c:c7:d3:6b:4a:23:ec:b8:8c:17:6c:29:3f:32:25:
fc:99:93:82:1e:ff:67:11:77:62:70:37:20:7c:27:
fb:8e:ed:de:b8:68:f1:7f:ae:b4:f9:99:8f:dc:14:
5d:29:b3:3c:7e:a5:f0:ed:fe:ab:8b:6b:51:8c:a0:
bb:aa:8a:8f:e4:9d:6a:99:05:82:65:22:61:9d:09:
fb:13:08:4b:5e:de:f2:ac:5a:ef:bc:d8:56:b3:f7:
c4:1d:ac:60:7b:49:a6:16:96:38:1f:13:0c:57:75:
35:cb:e4:1f:dd:b9:d9:32:d8:ce:71:b3:a0:94:89:
2c:4a:23:8d:94:dd:4f:14:d5:83:e1:e4:e8:0c:7b:
88:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:6E:4B:A0:F8:DD:24:F4:10:7C:A0:9F:73:9A:6E:02:9F:D7:96:BD
X509v3 Authority Key Identifier:
keyid:4A:63:B5:E2:4A:6C:ED:ED:BD:2F:E8:F6:6D:79:7A:B3:D8:EA:A4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmO14kps7e29L-j2bXl6s9jqpMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/64dabc-6564-4ca0-802f-ca9790080716/1/SmO14kps7e29L-j2bXl6s9jqpMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/64dabc-6564-4ca0-802f-ca9790080716/1/SmO14kps7e29L-j2bXl6s9jqpMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:ba:3b:f8:b5:1d:63:9f:22:04:9f:a0:1f:77:04:93:15:d2:
0c:34:31:b0:96:dd:4d:0b:37:c0:96:79:67:14:d1:fe:94:6c:
f8:ae:78:77:1e:88:91:6c:b0:bd:8d:ac:54:2f:8e:0b:72:11:
43:8a:ec:a7:e4:67:a4:83:38:e3:85:0a:bd:02:2b:0c:94:93:
20:42:91:1d:12:2c:ac:ea:5d:c9:70:1e:7e:74:60:ff:3a:83:
24:45:70:6e:0b:09:20:ba:45:70:39:52:00:2b:22:ff:a6:c7:
22:fd:bf:9f:a8:69:f6:91:51:d1:73:f5:6c:1c:06:b6:56:bb:
b4:be:58:8d:c0:51:51:42:82:03:58:59:40:c5:17:1f:c8:5e:
1e:54:24:ae:12:27:1d:02:19:ba:25:52:23:ea:fb:68:7b:54:
f6:66:bb:2c:f8:2c:f5:3a:97:23:f6:c8:7d:bf:14:9c:98:95:
8e:f4:10:b1:2a:62:1a:ba:4a:ff:d9:e3:76:d3:7c:19:05:bf:
12:13:bb:3f:df:21:10:10:36:1f:cb:bc:30:b2:66:de:30:bd:
75:f7:f6:64:b7:36:89:d6:f3:be:3f:f6:a1:1e:aa:1e:71:8b:
01:d0:6f:84:55:d6:85:b2:c8:0d:04:2f:6d:b6:a1:dd:d5:d7:
a4:84:49:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd25TrZhaHMdCReb9DFpkV+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNjNiNWUyNGE2Y2VkZWRiZDJmZThmNjZkNzk3YWIzZDhl
YWE0YzkwHhcNMjUwNjE2MDQwMDIzWhcNMjUwNjE3MDQwMDIzWjAzMTEwLwYDVQQD
EygzYzZlNGJhMGY4ZGQyNGY0MTA3Y2EwOWY3MzlhNmUwMjlmZDc5NmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxl1+oABL9ttSp0V/m8Zdc6FLe2B6
2N+p6v4aWQBKcMAoaYrmsMbRSzBv/y0OmonJ6E/7t22uaBFA5DD+zmugeionepy+
9fUxkInvD3+V8H+Dl3+U3RVyI6w2/UVP5xpCg5fEDsGCKGpJaAMRu0KcBWAnLrAs
QiZcx9NrSiPsuIwXbCk/MiX8mZOCHv9nEXdicDcgfCf7ju3euGjxf660+ZmP3BRd
KbM8fqXw7f6ri2tRjKC7qoqP5J1qmQWCZSJhnQn7EwhLXt7yrFrvvNhWs/fEHaxg
e0mmFpY4HxMMV3U1y+Qf3bnZMtjOcbOglIksSiONlN1PFNWD4eToDHuIpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDxuS6D43ST0EHygn3OabgKf15a9MB8GA1UdIwQY
MBaAFEpjteJKbO3tvS/o9m15erPY6qTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU21PMTRrcHM3ZTI5TC1qMmJYbDZzOWpxcE1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC82NGRhYmMtNjU2NC00Y2EwLTgwMmYt
Y2E5NzkwMDgwNzE2LzEvU21PMTRrcHM3ZTI5TC1qMmJYbDZzOWpxcE1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC82NGRhYmMtNjU2NC00Y2EwLTgwMmYtY2E5NzkwMDgwNzE2
LzEvU21PMTRrcHM3ZTI5TC1qMmJYbDZzOWpxcE1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt7o7+LUd
Y58iBJ+gH3cEkxXSDDQxsJbdTQs3wJZ5ZxTR/pRs+K54dx6IkWywvY2sVC+OC3IR
Q4rsp+RnpIM444UKvQIrDJSTIEKRHRIsrOpdyXAefnRg/zqDJEVwbgsJILpFcDlS
ACsi/6bHIv2/n6hp9pFR0XP1bBwGtla7tL5YjcBRUUKCA1hZQMUXH8heHlQkrhIn
HQIZuiVSI+r7aHtU9ma7LPgs9TqXI/bIfb8UnJiVjvQQsSpiGrpK/9njdtN8GQW/
EhO7P98hEBA2H8u8MLJm3jC9dff2ZLc2idbzvj/2oR6qHnGLAdBvhFXWhbLIDQQv
bbah3dXXpIRJKw==
-----END CERTIFICATE-----
Generated at Mon Jun 16 14:43:31 2025 by rpki-client