Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.mft
File: sMXmrlmHEAZksjA0zvxy1H-PS5s.mft (raw, json)
Hash identifier: e4yOxm/tpxRtu37BtFfGsGQ2J/BAc9GmHux2NBSjPWU=
Subject key identifier: 02:D1:90:70:99:08:8D:42:2C:38:00:37:2C:64:54:7B:E8:CD:BE:6B
Authority key identifier: B0:C5:E6:AE:59:87:10:06:64:B2:30:34:CE:FC:72:D4:7F:8F:4B:9B
Certificate issuer: /CN=b0c5e6ae5987100664b23034cefc72d47f8f4b9b
Certificate serial: 019896A65A1ACB1DE63561CE88E2AAC0A518
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMXmrlmHEAZksjA0zvxy1H-PS5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.mft
Manifest number: 162A
Signing time: Mon 11 Aug 2025 01:02:21 +0000
Manifest this update: Mon 11 Aug 2025 01:02:21 +0000
Manifest next update: Tue 12 Aug 2025 01:02:21 +0000
Files and hashes: 1: Xpu5z6C93G9BRUn-gmewTXpV4p4.roa (hash: HRJgPQbn7ofu1m7IlOj+BpfT6NzW9G/pwBr/coPVab0=)
2: sMXmrlmHEAZksjA0zvxy1H-PS5s.crl (hash: j+huXad2nmk23/AR5pluAj+cFNlbkGRAPtjIOiQF4pY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/sMXmrlmHEAZksjA0zvxy1H-PS5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a6:5a:1a:cb:1d:e6:35:61:ce:88:e2:aa:c0:a5:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c5e6ae5987100664b23034cefc72d47f8f4b9b
Validity
Not Before: Aug 11 01:02:21 2025 GMT
Not After : Aug 12 01:02:21 2025 GMT
Subject: CN=02d1907099088d422c3800372c64547be8cdbe6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0c:3e:bb:56:b2:ce:0c:be:58:82:0b:7a:49:
07:21:49:60:5d:ac:d4:99:17:a5:02:24:03:ba:f3:
3e:28:a7:dd:fc:32:c2:a7:1d:68:d2:fb:e6:f3:b4:
e2:19:72:c8:dc:cd:5b:fb:83:71:45:21:fb:9e:6e:
35:5f:63:a6:06:0a:f2:33:0b:b9:94:90:29:cb:d1:
ec:97:33:93:0a:37:7c:5d:c6:cb:72:3f:ad:ce:b4:
6b:c3:70:18:08:e5:c1:e7:6f:f4:13:4e:8d:f0:8f:
4b:54:cf:e9:f8:16:1a:6b:09:fe:17:ee:44:d4:7a:
48:56:07:6a:f6:0d:ed:0e:a3:68:34:00:5d:e9:1d:
f3:6d:08:7d:05:17:c1:72:0b:86:e0:43:cf:30:d6:
80:ae:57:61:f1:ce:4d:ed:64:ea:9f:3c:12:2c:19:
0c:77:7d:6e:47:a8:0b:17:73:84:91:9b:6d:1d:73:
97:be:a6:79:56:f8:91:18:cb:a8:ac:0e:a3:2d:cb:
e0:50:eb:f5:9d:94:0e:f9:03:2f:66:11:cb:8e:1d:
6f:e3:ec:dc:70:f2:bb:a4:03:b5:41:75:30:32:78:
d7:bd:6b:b2:fe:c3:64:51:07:50:2a:b0:fb:34:05:
e2:54:7a:f5:55:5d:dc:18:11:00:3a:b7:9f:51:fa:
ab:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:D1:90:70:99:08:8D:42:2C:38:00:37:2C:64:54:7B:E8:CD:BE:6B
X509v3 Authority Key Identifier:
keyid:B0:C5:E6:AE:59:87:10:06:64:B2:30:34:CE:FC:72:D4:7F:8F:4B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMXmrlmHEAZksjA0zvxy1H-PS5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:d0:85:9f:e9:c0:bc:17:78:14:64:79:4e:c7:da:33:0e:91:
85:16:81:11:30:97:4a:20:87:50:69:be:b4:89:7b:73:76:4b:
be:97:43:b4:d8:92:6e:1a:a4:59:85:22:7d:e8:46:28:d2:de:
ab:2a:84:25:5d:7a:6b:d0:55:4f:71:87:0a:57:fb:a6:c5:12:
25:ed:67:2a:c9:db:49:34:68:98:c6:64:03:c4:fe:3f:ff:7e:
7a:60:15:5d:a7:44:fd:ca:47:97:66:66:7b:41:11:1b:26:6b:
bb:34:a1:78:4f:f6:1e:6f:f2:3a:29:d3:3b:d1:15:7a:1f:75:
6e:9e:bd:97:72:d8:c3:40:44:77:16:e1:0d:ec:c5:c9:95:05:
e9:42:ec:50:6b:c9:33:58:6a:51:c3:9a:f6:03:2c:01:3d:f0:
a3:07:7d:1b:dc:93:05:ca:c1:8f:4c:47:ca:03:ce:5b:fa:06:
a6:70:9f:b2:d4:7c:7f:f5:27:c8:98:e3:22:7c:5a:26:d8:04:
48:c6:46:2b:99:8d:62:37:94:f5:e4:17:a0:de:a8:cc:fe:96:
6d:a9:34:26:c6:9a:c9:be:cb:3b:79:0d:b2:58:2c:a6:8b:3f:
6d:ea:93:63:ff:17:9d:44:a7:4e:01:0c:94:49:7f:e8:19:88:
18:b5:1a:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiWploayx3mNWHOiOKqwKUYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYzVlNmFlNTk4NzEwMDY2NGIyMzAzNGNlZmM3MmQ0N2Y4
ZjRiOWIwHhcNMjUwODExMDEwMjIxWhcNMjUwODEyMDEwMjIxWjAzMTEwLwYDVQQD
EygwMmQxOTA3MDk5MDg4ZDQyMmMzODAwMzcyYzY0NTQ3YmU4Y2RiZTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gw+u1ayzgy+WIILekkHIUlgXazU
mRelAiQDuvM+KKfd/DLCpx1o0vvm87TiGXLI3M1b+4NxRSH7nm41X2OmBgryMwu5
lJApy9HslzOTCjd8XcbLcj+tzrRrw3AYCOXB52/0E06N8I9LVM/p+BYaawn+F+5E
1HpIVgdq9g3tDqNoNABd6R3zbQh9BRfBcguG4EPPMNaArldh8c5N7WTqnzwSLBkM
d31uR6gLF3OEkZttHXOXvqZ5VviRGMuorA6jLcvgUOv1nZQO+QMvZhHLjh1v4+zc
cPK7pAO1QXUwMnjXvWuy/sNkUQdQKrD7NAXiVHr1VV3cGBEAOrefUfqrYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFALRkHCZCI1CLDgANyxkVHvozb5rMB8GA1UdIwQY
MBaAFLDF5q5ZhxAGZLIwNM78ctR/j0ubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc01YbXJsbUhFQVprc2pBMHp2eHkxSC1QUzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC81N2VkNmEtMTE3Ny00YTlkLTk4YzUt
ZDU5ZTI2NGVlODNiLzEvc01YbXJsbUhFQVprc2pBMHp2eHkxSC1QUzVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC81N2VkNmEtMTE3Ny00YTlkLTk4YzUtZDU5ZTI2NGVlODNi
LzEvc01YbXJsbUhFQVprc2pBMHp2eHkxSC1QUzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtdCFn+nA
vBd4FGR5TsfaMw6RhRaBETCXSiCHUGm+tIl7c3ZLvpdDtNiSbhqkWYUifehGKNLe
qyqEJV16a9BVT3GHClf7psUSJe1nKsnbSTRomMZkA8T+P/9+emAVXadE/cpHl2Zm
e0ERGyZruzSheE/2Hm/yOinTO9EVeh91bp69l3LYw0BEdxbhDezFyZUF6ULsUGvJ
M1hqUcOa9gMsAT3wowd9G9yTBcrBj0xHygPOW/oGpnCfstR8f/UnyJjjInxaJtgE
SMZGK5mNYjeU9eQXoN6ozP6Wbak0Jsaayb7LO3kNslgspos/beqTY/8XnUSnTgEM
lEl/6BmIGLUa2g==
-----END CERTIFICATE-----
Generated at Mon Aug 11 09:51:20 2025 by rpki-client