Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a62f06-d16d-4eb9-b5cf-40a4cfc9622c/1/SM-Wql6wd08Ne0JrMnQ1qHiOsYk.mft
File: SM-Wql6wd08Ne0JrMnQ1qHiOsYk.mft (raw, json)
Hash identifier: 2zZjjMkAYFhH9q4Kop2OlIv/yIqKiJnZRPNlM+nO4Mw=
Subject key identifier: CB:13:CE:69:1E:6E:18:1C:74:32:A4:B3:44:E3:97:B9:20:CA:CF:15
Authority key identifier: 48:CF:96:AA:5E:B0:77:4F:0D:7B:42:6B:32:74:35:A8:78:8E:B1:89
Certificate issuer: /CN=48cf96aa5eb0774f0d7b426b327435a8788eb189
Certificate serial: 019A52D18963BB3BB0337936A6B5D33A89BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SM-Wql6wd08Ne0JrMnQ1qHiOsYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/a62f06-d16d-4eb9-b5cf-40a4cfc9622c/1/SM-Wql6wd08Ne0JrMnQ1qHiOsYk.mft
Manifest number: 170C
Signing time: Wed 05 Nov 2025 07:00:54 +0000
Manifest this update: Wed 05 Nov 2025 07:00:54 +0000
Manifest next update: Thu 06 Nov 2025 07:00:54 +0000
Files and hashes: 1: SM-Wql6wd08Ne0JrMnQ1qHiOsYk.crl (hash: GYpvRVrkKtcKFMfhM8vPHJWBoELR/6LaWP8U+yGxgcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/a62f06-d16d-4eb9-b5cf-40a4cfc9622c/1/SM-Wql6wd08Ne0JrMnQ1qHiOsYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/a62f06-d16d-4eb9-b5cf-40a4cfc9622c/1/SM-Wql6wd08Ne0JrMnQ1qHiOsYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/SM-Wql6wd08Ne0JrMnQ1qHiOsYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:89:63:bb:3b:b0:33:79:36:a6:b5:d3:3a:89:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48cf96aa5eb0774f0d7b426b327435a8788eb189
Validity
Not Before: Nov 5 07:00:54 2025 GMT
Not After : Nov 6 07:00:54 2025 GMT
Subject: CN=cb13ce691e6e181c7432a4b344e397b920cacf15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:61:21:51:f2:de:eb:64:83:a9:d8:ce:2e:48:
9d:38:2e:3e:b3:86:51:e7:17:1b:89:88:a1:d5:88:
fb:4c:fc:ed:35:d0:0b:cb:8f:19:04:3a:cb:a8:34:
28:2e:e5:30:ca:b0:87:b3:e1:bf:66:83:14:cc:52:
af:2b:50:06:96:fe:c9:18:8e:22:f9:57:e8:96:53:
6a:39:e4:ff:c5:cb:3c:bc:77:88:e4:63:35:a8:a9:
82:de:72:1f:4f:26:cd:81:5e:76:aa:82:ad:4b:91:
13:64:98:ac:6a:5f:c6:a2:c9:e4:dc:2e:df:ee:f0:
87:78:de:8e:22:fa:0c:d1:e9:87:0a:a3:4a:46:ff:
74:28:c7:28:05:d6:fb:bb:4a:98:9f:14:d7:08:55:
35:a9:ce:7c:19:d0:f4:1c:5b:10:db:cb:44:53:ee:
f2:af:67:8b:c1:9a:1a:ec:e0:9e:37:57:3f:fd:cb:
b3:81:3d:56:34:df:4d:b0:08:56:fe:79:af:cf:e7:
c8:07:37:c7:f4:20:95:29:fe:ee:0a:d4:db:c5:1b:
74:2a:1a:7a:ee:f0:ad:3b:17:1a:ce:4b:88:9c:03:
b5:57:2f:46:fc:4c:ac:0e:d7:a9:37:28:7c:62:b8:
8f:fd:65:2c:3c:4c:b6:8a:89:c4:33:31:4a:e9:52:
c6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:13:CE:69:1E:6E:18:1C:74:32:A4:B3:44:E3:97:B9:20:CA:CF:15
X509v3 Authority Key Identifier:
keyid:48:CF:96:AA:5E:B0:77:4F:0D:7B:42:6B:32:74:35:A8:78:8E:B1:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SM-Wql6wd08Ne0JrMnQ1qHiOsYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a62f06-d16d-4eb9-b5cf-40a4cfc9622c/1/SM-Wql6wd08Ne0JrMnQ1qHiOsYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a62f06-d16d-4eb9-b5cf-40a4cfc9622c/1/SM-Wql6wd08Ne0JrMnQ1qHiOsYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:b5:d2:bf:9b:40:35:44:39:e2:68:bf:6e:73:8d:ba:64:83:
9a:ae:89:c4:f4:1b:0e:78:ce:fc:2a:b7:88:48:7e:5b:b3:ea:
bc:ea:6c:3f:c8:0e:a8:aa:6b:92:a2:6e:25:7d:19:30:3e:02:
aa:b5:96:38:61:f2:3f:94:fd:df:21:4d:f5:c0:6b:ed:bd:ce:
ef:80:3f:cc:c1:3c:f7:63:e5:93:28:0f:10:04:da:a6:4d:80:
5c:29:8f:90:13:52:d7:d8:9d:b0:b3:cb:0e:2f:f0:da:c7:07:
15:fc:96:87:8d:a7:f6:fa:6f:4f:09:fe:2d:84:7f:a6:41:8a:
9d:8b:9b:ce:9a:cc:8c:2d:58:39:4a:09:81:5b:26:34:dc:b1:
db:66:90:30:99:ce:c7:89:3a:d2:c5:43:30:83:47:25:76:29:
d9:92:ac:9c:f0:a1:a8:26:65:cc:30:5d:d6:14:9b:b7:90:e1:
1a:9d:a2:d1:65:72:20:8a:60:d5:ab:49:99:a0:cd:dd:40:3e:
a7:e8:3c:21:dd:6f:85:9a:cc:5e:7b:89:27:70:12:ef:c6:a8:
00:ec:c4:cc:5b:cc:5a:21:1b:af:38:06:4f:aa:d8:8f:90:3d:
ea:a1:b9:8f:a4:bd:e4:d6:0b:fc:98:ea:89:ea:72:14:ac:81:
23:fa:a7:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:11:21 2025 by rpki-client