Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/458282-5405-4b17-997d-7cd59619c0d6/1/SMdByd9bLkiZO5GDt5_zRrQxk4E.mft
File: SMdByd9bLkiZO5GDt5_zRrQxk4E.mft (raw, json)
Hash identifier: MJbCU8x4/L/LgVY9dffaM7UU8cUXQiqAySHQeOCww80=
Subject key identifier: 96:4F:0E:92:88:81:7B:C5:BE:2D:E7:9E:9F:C1:81:DC:61:2C:12:D3
Authority key identifier: 48:C7:41:C9:DF:5B:2E:48:99:3B:91:83:B7:9F:F3:46:B4:31:93:81
Certificate issuer: /CN=48c741c9df5b2e48993b9183b79ff346b4319381
Certificate serial: 019A5150BB161DF74889E6B125655A158CA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SMdByd9bLkiZO5GDt5_zRrQxk4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/458282-5405-4b17-997d-7cd59619c0d6/1/SMdByd9bLkiZO5GDt5_zRrQxk4E.mft
Manifest number: 170F
Signing time: Wed 05 Nov 2025 00:00:36 +0000
Manifest this update: Wed 05 Nov 2025 00:00:36 +0000
Manifest next update: Thu 06 Nov 2025 00:00:36 +0000
Files and hashes: 1: SMdByd9bLkiZO5GDt5_zRrQxk4E.crl (hash: CzdOpbkIaFn6U7lhDYi0chVvQylrf942m4TsPJk1dWs=)
2: joaFEW-NdPhZyszfRS8lbScgqm0.roa (hash: 0utj+sPXgGZYWSm41u/aEZLOVRC1lSd5e6cU8LiAr60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/458282-5405-4b17-997d-7cd59619c0d6/1/SMdByd9bLkiZO5GDt5_zRrQxk4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/458282-5405-4b17-997d-7cd59619c0d6/1/SMdByd9bLkiZO5GDt5_zRrQxk4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/SMdByd9bLkiZO5GDt5_zRrQxk4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:bb:16:1d:f7:48:89:e6:b1:25:65:5a:15:8c:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48c741c9df5b2e48993b9183b79ff346b4319381
Validity
Not Before: Nov 5 00:00:36 2025 GMT
Not After : Nov 6 00:00:36 2025 GMT
Subject: CN=964f0e9288817bc5be2de79e9fc181dc612c12d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:40:31:84:05:9f:4c:37:50:72:d2:ab:23:20:
c1:e6:40:9f:32:dd:77:c6:b0:c7:e2:1a:5e:e0:aa:
31:42:0d:8c:84:91:d2:b5:9d:0d:82:b4:87:7e:c7:
9b:21:fe:8c:3a:ac:10:08:fb:d8:f4:13:55:15:d6:
19:c4:07:d8:88:49:7b:00:45:6b:6e:21:dc:32:51:
fe:a7:dd:cd:c5:f7:8c:fa:18:42:fc:c1:49:4d:45:
6e:43:df:b3:54:e4:3d:bc:a2:90:b0:1d:ad:ad:f2:
bb:33:9b:3b:91:0a:47:c7:ea:61:f9:04:b2:78:cf:
da:31:db:24:16:1e:8f:81:eb:92:60:1d:39:c3:b8:
a3:8a:6f:d6:27:82:6b:7c:1e:25:c8:2d:9a:2b:b4:
2d:83:46:ab:3f:1f:47:1e:60:b8:93:49:5c:a5:40:
a9:f1:c6:bb:3b:71:ba:50:d1:f5:7b:cd:4d:27:0e:
1b:6b:19:0f:88:41:60:63:c9:9a:bc:86:84:0f:af:
da:76:90:3f:4c:88:f7:9a:76:b6:ae:cf:86:9d:78:
22:38:a4:84:d6:39:60:d7:01:a0:24:e0:d8:df:2e:
74:bf:77:00:93:1e:47:e6:04:6c:0d:0b:50:b1:dc:
02:52:f5:fe:1c:69:7d:40:ec:39:8d:27:04:72:fc:
d8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:4F:0E:92:88:81:7B:C5:BE:2D:E7:9E:9F:C1:81:DC:61:2C:12:D3
X509v3 Authority Key Identifier:
keyid:48:C7:41:C9:DF:5B:2E:48:99:3B:91:83:B7:9F:F3:46:B4:31:93:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SMdByd9bLkiZO5GDt5_zRrQxk4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/458282-5405-4b17-997d-7cd59619c0d6/1/SMdByd9bLkiZO5GDt5_zRrQxk4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/458282-5405-4b17-997d-7cd59619c0d6/1/SMdByd9bLkiZO5GDt5_zRrQxk4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:33:b8:8c:87:61:9e:ec:60:1a:c9:56:d3:2c:62:71:11:e3:
af:d1:ed:27:5c:e4:21:d4:73:fd:91:4a:b1:c4:a0:5a:2b:45:
47:de:ed:d7:0b:4c:f4:fc:e2:e5:a3:6c:a8:24:f5:b3:a6:c9:
41:de:a4:32:8f:43:cb:71:89:07:2b:4a:ed:71:8e:23:14:82:
ac:a9:4a:e6:c5:cd:9a:89:01:bd:02:7a:c3:a1:b9:cf:c0:2f:
7c:f3:8a:a5:c2:5a:bd:97:33:f3:db:43:da:09:b3:f6:22:d3:
c5:43:b2:11:ec:34:35:5b:20:da:5c:30:94:2f:36:e1:01:cd:
cc:de:2a:23:9d:7e:fa:78:97:78:86:56:24:20:f6:8b:08:2d:
32:84:ef:f8:f4:3c:ea:94:50:8a:c7:4f:b6:8a:bb:8a:c6:a5:
e9:4c:65:c9:7e:07:36:2e:af:f1:65:1f:3f:6d:6e:61:a5:21:
21:ed:64:fa:29:09:05:e6:0d:11:0c:f3:f4:16:3d:51:0e:7e:
43:42:57:2a:13:7f:2b:49:72:13:8c:b3:e5:26:45:fb:ac:7e:
4d:9d:5e:ce:d3:23:01:40:6b:c9:52:86:c8:b2:4b:c6:13:ea:
95:7e:aa:b1:03:cd:1e:f4:d6:7a:80:56:84:d0:4e:11:c4:c6:
13:46:5b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:55:06 2025 by rpki-client