
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.mft
File: smIHwyzpihrekiSGO0Y6gvj4aCs.mft (raw, json)
Hash identifier: +h+5rhnjU01k46fQcyiPds+cRHmiOyrR0EDiNcU7dlk=
Subject key identifier: C4:C7:6F:98:60:99:CE:AB:95:4F:91:76:C4:22:33:76:3A:21:5D:4F
Authority key identifier: B2:62:07:C3:2C:E9:8A:1A:DE:92:24:86:3B:46:3A:82:F8:F8:68:2B
Certificate issuer: /CN=b26207c32ce98a1ade9224863b463a82f8f8682b
Certificate serial: 01989448D0460AAA0D5645614EE052C83330
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/smIHwyzpihrekiSGO0Y6gvj4aCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.mft
Manifest number: BA
Signing time: Sun 10 Aug 2025 14:00:56 +0000
Manifest this update: Sun 10 Aug 2025 14:00:56 +0000
Manifest next update: Mon 11 Aug 2025 14:00:56 +0000
Files and hashes: 1: smIHwyzpihrekiSGO0Y6gvj4aCs.crl (hash: 8lYf2TKqxoII+0qImRZ6lxGcxoqSXEDp4liT1KV1lgY=)
2: vfgaajpx_IwIslySYTAXUF8b2bQ.roa (hash: 5BG+nyK3l0jI+maIom4ahnVVqUeZ02d+C1Q9Lbzzldo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/smIHwyzpihrekiSGO0Y6gvj4aCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:48:d0:46:0a:aa:0d:56:45:61:4e:e0:52:c8:33:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b26207c32ce98a1ade9224863b463a82f8f8682b
Validity
Not Before: Aug 10 14:00:56 2025 GMT
Not After : Aug 11 14:00:56 2025 GMT
Subject: CN=c4c76f986099ceab954f9176c42233763a215d4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a6:9f:9c:0d:23:95:e7:af:92:88:86:43:05:
fb:8e:ef:ee:bb:98:72:fc:d5:27:12:7a:1b:40:53:
a3:fe:95:e0:4e:6c:f2:db:d8:c0:3b:e3:cb:79:f4:
97:8e:b8:f4:46:3a:74:54:c9:cb:23:04:fe:97:88:
0e:54:c9:56:a4:a2:73:7f:8f:87:14:24:2e:69:1c:
3b:b1:a2:a8:4a:e7:ff:e1:ef:3a:97:78:aa:fc:85:
fd:52:ce:8e:98:8c:e4:87:94:89:3e:b8:56:2d:67:
57:34:29:b5:83:8c:72:3d:00:51:4d:6f:a7:d6:a4:
be:4a:9f:fc:97:8b:03:2b:df:c4:e8:c7:21:23:e9:
f4:a8:c5:28:eb:62:e4:10:d6:3a:73:55:eb:48:17:
e0:86:90:47:23:a0:07:10:41:14:fc:b1:ed:9c:e8:
5c:d7:9d:26:13:68:19:86:23:2c:d3:fe:72:85:09:
59:5c:56:35:4e:ea:dc:a2:2c:83:ff:0a:62:55:59:
55:e2:be:c2:ef:38:67:5e:04:cf:bc:c3:95:78:a6:
74:6f:b8:90:40:12:c5:77:2e:f4:1e:2b:cb:c8:f2:
2e:07:fb:1b:b0:e6:6c:bf:44:49:40:c9:f2:10:f5:
84:cf:b0:2b:9e:51:18:b5:3a:c2:7d:83:3a:50:48:
45:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:C7:6F:98:60:99:CE:AB:95:4F:91:76:C4:22:33:76:3A:21:5D:4F
X509v3 Authority Key Identifier:
keyid:B2:62:07:C3:2C:E9:8A:1A:DE:92:24:86:3B:46:3A:82:F8:F8:68:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/smIHwyzpihrekiSGO0Y6gvj4aCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:b5:39:b9:aa:bb:29:05:2b:a4:a9:07:2d:d8:bf:d9:17:b7:
cb:a7:ec:38:54:87:2f:5a:15:ca:f0:8a:b3:77:38:43:07:1b:
e8:25:17:4f:97:c8:3e:09:60:bd:a5:5c:41:a7:f3:f5:33:9d:
ca:14:d6:9e:a3:e0:0f:ee:14:9f:21:6c:f1:ce:3a:6d:46:27:
9d:0f:62:9f:98:e1:60:7f:25:54:75:27:b0:43:9f:eb:74:a7:
b8:97:f8:cc:ff:a7:c7:aa:da:d7:3c:36:1b:55:18:37:b7:7d:
9c:33:da:83:0a:ad:7a:2a:c3:71:90:78:23:91:2c:f0:52:4c:
0e:da:4a:1b:f0:bb:5e:ff:98:bb:75:02:7e:d1:68:15:29:90:
17:07:94:79:56:43:71:63:f6:ab:c7:d6:35:75:47:d5:e5:db:
6b:af:e8:07:06:1d:04:53:a5:97:4c:bd:a1:dd:c9:6f:82:f5:
10:d6:70:d3:5d:70:ae:f9:c6:00:b3:19:be:ab:79:ad:51:66:
af:0b:97:46:26:56:e3:26:0f:85:2e:ca:f0:2e:fe:19:ff:a2:
ee:13:c8:79:e7:76:e2:2c:dc:aa:7b:90:cb:7d:79:ca:67:a0:
2a:af:a4:47:90:4e:43:dc:86:06:98:08:bd:1a:91:db:ea:cc:
2a:fc:19:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 15:59:01 2025 by rpki-client