Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.mft
File: SMOd4l_6fq8CsqbYws9uLOtWK_M.mft (raw, json)
Hash identifier: 4omyIVq/W9FJpLIphjz8TE6D+HHeCSmZS9adbARbTGQ=
Subject key identifier: D4:AB:94:17:35:D7:3F:87:32:8B:5C:33:8B:01:CC:C1:B5:0C:73:2B
Authority key identifier: 48:C3:9D:E2:5F:FA:7E:AF:02:B2:A6:D8:C2:CF:6E:2C:EB:56:2B:F3
Certificate issuer: /CN=48c39de25ffa7eaf02b2a6d8c2cf6e2ceb562bf3
Certificate serial: 019A522C4851AE38530E755C6C560F64E861
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SMOd4l_6fq8CsqbYws9uLOtWK_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.mft
Manifest number: 136B
Signing time: Wed 05 Nov 2025 04:00:25 +0000
Manifest this update: Wed 05 Nov 2025 04:00:25 +0000
Manifest next update: Thu 06 Nov 2025 04:00:25 +0000
Files and hashes: 1: JtwVZJ2q-er-ZyfG4We1Ih9BT0U.roa (hash: xnd0jnisgvFr2C1BnV+wtzkH+5RWNTZh9FBZUZ5Hu3E=)
2: SMOd4l_6fq8CsqbYws9uLOtWK_M.crl (hash: TIh45tmlQucXSkaXCMYytaTo07HjsWQFL/pawHQRptE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/SMOd4l_6fq8CsqbYws9uLOtWK_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:48:51:ae:38:53:0e:75:5c:6c:56:0f:64:e8:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48c39de25ffa7eaf02b2a6d8c2cf6e2ceb562bf3
Validity
Not Before: Nov 5 04:00:25 2025 GMT
Not After : Nov 6 04:00:25 2025 GMT
Subject: CN=d4ab941735d73f87328b5c338b01ccc1b50c732b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d4:69:14:a0:2f:28:ba:de:89:d9:1e:71:63:
10:80:a8:b6:dc:e1:b5:6b:36:01:19:2e:af:13:d8:
b1:57:aa:41:fe:a5:34:42:6d:2e:4d:4f:52:a0:3b:
33:50:90:24:2f:76:dc:61:2c:73:c3:e7:7a:a6:38:
3d:14:f0:5c:11:28:52:c0:d5:2e:ca:1c:53:41:b4:
00:a3:ba:a1:65:60:07:1b:06:9f:2f:ae:33:0a:83:
ae:f2:7e:22:ea:71:b0:13:84:ce:33:33:cc:19:e8:
f1:a3:d1:e6:a2:08:c4:b5:00:44:a6:92:3d:72:48:
7c:6d:d8:d3:36:5c:ce:17:fb:71:84:e9:52:7b:5b:
9a:26:43:62:f8:f3:85:6d:a8:c2:45:7d:ab:fc:d0:
9c:56:2d:17:fa:9a:4a:2f:fc:03:d0:8a:1e:76:17:
f6:3a:90:6f:09:54:da:61:2d:b3:c8:c1:84:0d:a5:
db:67:40:e4:f9:2c:17:13:67:04:29:f9:96:a1:9f:
78:4e:ef:e2:83:28:8d:6a:38:e4:5e:d0:e9:cb:9f:
3c:21:45:ca:b1:b9:9f:64:82:bd:21:ee:eb:f5:c0:
20:f2:e7:8f:8f:33:3a:8d:e3:79:12:47:2e:3a:a0:
88:21:24:f6:70:e3:8d:61:58:52:9f:2d:a2:d4:1a:
19:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:AB:94:17:35:D7:3F:87:32:8B:5C:33:8B:01:CC:C1:B5:0C:73:2B
X509v3 Authority Key Identifier:
keyid:48:C3:9D:E2:5F:FA:7E:AF:02:B2:A6:D8:C2:CF:6E:2C:EB:56:2B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SMOd4l_6fq8CsqbYws9uLOtWK_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:ff:cf:4d:5a:7b:f2:8c:7a:a7:b6:75:a4:d2:ab:93:5d:11:
9d:39:69:8a:2d:ac:82:99:31:ea:de:c6:01:95:d4:e6:8b:79:
46:2a:08:ba:61:10:fc:1e:75:40:d2:0c:b4:28:b0:3f:83:14:
ee:3a:b7:56:ad:a1:2b:ab:fb:22:0a:23:6f:0a:a9:a3:4f:7b:
b1:e3:64:a8:68:ea:b2:00:94:3e:83:3e:76:69:d6:d6:81:44:
a6:00:75:f3:e5:d7:87:b3:64:ff:f7:6e:86:d7:9f:84:ba:04:
5e:a3:30:d4:7d:3b:a2:02:c6:35:7f:dd:00:4b:5a:08:32:59:
a0:5b:cc:fb:4f:d9:2a:56:ad:5d:eb:ed:9e:fb:72:65:f4:9b:
80:d1:0d:da:68:cb:e3:24:d8:41:7e:c2:6a:50:18:80:4c:eb:
4d:ab:cb:77:68:50:b4:7a:bf:41:29:cd:09:1e:54:cd:b4:6a:
d8:33:69:33:52:8d:0e:65:81:2a:27:16:79:52:d6:3b:42:c5:
73:b2:9e:26:a4:6f:11:b3:9f:a7:79:ae:45:46:e0:da:dd:fe:
0b:46:a4:a6:48:7e:ef:c1:6d:25:8e:d4:e0:08:3c:d8:43:5d:
c7:36:51:30:ab:ba:c1:d9:f8:d6:67:e9:de:77:4b:a5:2b:0d:
22:89:c2:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpSLEhRrjhTDnVcbFYPZOhhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4YzM5ZGUyNWZmYTdlYWYwMmIyYTZkOGMyY2Y2ZTJjZWI1
NjJiZjMwHhcNMjUxMTA1MDQwMDI1WhcNMjUxMTA2MDQwMDI1WjAzMTEwLwYDVQQD
EyhkNGFiOTQxNzM1ZDczZjg3MzI4YjVjMzM4YjAxY2NjMWI1MGM3MzJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9RpFKAvKLreidkecWMQgKi23OG1
azYBGS6vE9ixV6pB/qU0Qm0uTU9SoDszUJAkL3bcYSxzw+d6pjg9FPBcEShSwNUu
yhxTQbQAo7qhZWAHGwafL64zCoOu8n4i6nGwE4TOMzPMGejxo9HmogjEtQBEppI9
ckh8bdjTNlzOF/txhOlSe1uaJkNi+POFbajCRX2r/NCcVi0X+ppKL/wD0Ioedhf2
OpBvCVTaYS2zyMGEDaXbZ0Dk+SwXE2cEKfmWoZ94Tu/igyiNajjkXtDpy588IUXK
sbmfZIK9Ie7r9cAg8uePjzM6jeN5EkcuOqCIIST2cOONYVhSny2i1BoZMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNSrlBc11z+HMotcM4sBzMG1DHMrMB8GA1UdIwQY
MBaAFEjDneJf+n6vArKm2MLPbizrVivzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU01PZDRsXzZmcThDc3FiWXdzOXVMT3RXS19NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85YmNiYWYtNDk5My00ZDA4LWI5YTgt
MDM1NWVmMTE1ODljLzEvU01PZDRsXzZmcThDc3FiWXdzOXVMT3RXS19NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS85YmNiYWYtNDk5My00ZDA4LWI5YTgtMDM1NWVmMTE1ODlj
LzEvU01PZDRsXzZmcThDc3FiWXdzOXVMT3RXS19NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWv/PTVp7
8ox6p7Z1pNKrk10RnTlpii2sgpkx6t7GAZXU5ot5RioIumEQ/B51QNIMtCiwP4MU
7jq3Vq2hK6v7Igojbwqpo097seNkqGjqsgCUPoM+dmnW1oFEpgB18+XXh7Nk//du
htefhLoEXqMw1H07ogLGNX/dAEtaCDJZoFvM+0/ZKlatXevtnvtyZfSbgNEN2mjL
4yTYQX7CalAYgEzrTavLd2hQtHq/QSnNCR5UzbRq2DNpM1KNDmWBKicWeVLWO0LF
c7KeJqRvEbOfp3muRUbg2t3+C0akpkh+78FtJY7U4Ag82ENdxzZRMKu6wdn41mfp
3ndLpSsNIonCcQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 06:23:40 2025 by rpki-client