Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/a839cc-292d-472f-8a39-5f6760818655/1/SmyWV_fDBZWx2hfELhdtdSygVLg.mft
File: SmyWV_fDBZWx2hfELhdtdSygVLg.mft (raw, json)
Hash identifier: MYB0w7m+p5B3AzKT+jMZpwAUtMkJM1w6buEVPgG/5iU=
Subject key identifier: 5C:9B:76:96:26:C5:24:CA:C8:13:E7:21:8C:87:8A:40:58:EE:4F:73
Authority key identifier: 4A:6C:96:57:F7:C3:05:95:B1:DA:17:C4:2E:17:6D:75:2C:A0:54:B8
Certificate issuer: /CN=4a6c9657f7c30595b1da17c42e176d752ca054b8
Certificate serial: 019A4C61549FACAA5134056AA17E88A2F844
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmyWV_fDBZWx2hfELhdtdSygVLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/a839cc-292d-472f-8a39-5f6760818655/1/SmyWV_fDBZWx2hfELhdtdSygVLg.mft
Manifest number: 09C4
Signing time: Tue 04 Nov 2025 01:00:38 +0000
Manifest this update: Tue 04 Nov 2025 01:00:38 +0000
Manifest next update: Wed 05 Nov 2025 01:00:38 +0000
Files and hashes: 1: SmyWV_fDBZWx2hfELhdtdSygVLg.crl (hash: uvmRHo2XSUzV1XvYEvOzbztW9By2GCzXhRSmUVTxx5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/a839cc-292d-472f-8a39-5f6760818655/1/SmyWV_fDBZWx2hfELhdtdSygVLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/a839cc-292d-472f-8a39-5f6760818655/1/SmyWV_fDBZWx2hfELhdtdSygVLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SmyWV_fDBZWx2hfELhdtdSygVLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 01:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:61:54:9f:ac:aa:51:34:05:6a:a1:7e:88:a2:f8:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a6c9657f7c30595b1da17c42e176d752ca054b8
Validity
Not Before: Nov 4 01:00:38 2025 GMT
Not After : Nov 5 01:00:38 2025 GMT
Subject: CN=5c9b769626c524cac813e7218c878a4058ee4f73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a5:94:8b:24:dc:4d:3f:50:23:32:e9:43:fd:
4f:b4:00:6e:36:a7:5e:05:5b:9e:fc:3a:7a:49:33:
ab:cb:bc:6d:90:f8:16:a8:35:45:c9:35:d2:c3:5e:
b4:d1:c3:8c:f8:b3:a6:ea:6a:ff:3d:be:7a:e0:28:
c6:60:5b:ef:a7:34:75:6c:06:f7:e7:35:29:cc:e0:
6d:7d:c8:47:69:e8:85:46:d0:33:3d:ad:b7:1a:d6:
65:93:39:a3:82:3b:64:e8:fe:e4:15:ed:7c:08:ce:
59:99:1b:c5:f7:09:a2:b4:8e:20:01:2a:60:53:e6:
e2:94:42:48:5e:9c:4c:76:0a:0e:cd:a1:77:10:91:
d4:aa:dd:39:81:92:12:49:aa:8c:ae:46:7b:16:ac:
97:a1:5d:9c:91:f6:c1:cc:c9:c0:2a:38:5a:1f:7e:
5c:26:6d:6a:c5:0a:0b:dc:66:50:a4:a0:13:70:5b:
fb:57:c7:94:d7:cc:8c:66:8d:5f:55:80:c5:5b:37:
35:ff:da:23:01:36:37:eb:f1:37:c3:c8:0b:1c:9b:
01:ac:e2:66:e8:27:3f:d1:55:c2:75:0d:1d:f8:2d:
ea:41:01:e0:69:56:9b:55:24:1f:95:be:3d:ed:30:
12:2b:b8:f7:6d:a8:44:cc:01:a7:9e:5c:ad:05:d9:
0b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:9B:76:96:26:C5:24:CA:C8:13:E7:21:8C:87:8A:40:58:EE:4F:73
X509v3 Authority Key Identifier:
keyid:4A:6C:96:57:F7:C3:05:95:B1:DA:17:C4:2E:17:6D:75:2C:A0:54:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmyWV_fDBZWx2hfELhdtdSygVLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a839cc-292d-472f-8a39-5f6760818655/1/SmyWV_fDBZWx2hfELhdtdSygVLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a839cc-292d-472f-8a39-5f6760818655/1/SmyWV_fDBZWx2hfELhdtdSygVLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:37:e2:54:d6:24:69:fe:d7:36:3b:1f:48:85:02:d6:26:dd:
4e:9c:ee:60:f8:18:9e:ee:8f:89:5a:fb:64:ef:59:8b:a7:e8:
26:a4:0a:d2:9e:c1:9b:0a:61:e3:76:7e:39:3e:f2:50:8e:1d:
48:cc:36:da:b0:70:b8:74:e5:2d:e1:37:21:3b:34:25:d2:eb:
21:5b:8f:3d:d7:b7:f5:f2:e0:e0:6c:2d:cb:89:a2:00:46:01:
a9:17:f6:08:08:4e:9f:4d:e8:9f:30:65:3f:d5:5e:2e:32:f1:
a1:69:31:09:67:03:69:17:8c:1f:0b:5c:09:96:49:d1:d9:67:
fe:da:9b:89:1e:7b:72:57:fd:22:0e:3f:67:5a:9e:81:dd:af:
6a:83:67:34:4f:38:ef:33:4d:eb:10:44:c0:0c:85:c0:96:ed:
4c:84:f5:d5:70:5b:ab:1c:01:43:52:26:9a:2b:59:fe:06:f9:
96:4c:72:7f:5d:81:94:86:3f:5c:2a:2c:b3:6f:01:b0:94:10:
d5:fc:59:e9:56:0c:71:12:9b:7e:ae:6a:29:0d:fa:1c:42:bf:
bf:68:14:d9:e5:bd:97:8c:7a:b9:fe:9d:f9:13:0c:55:92:6b:
75:15:72:db:b5:2e:db:45:b2:16:eb:d7:08:0e:ac:53:05:dd:
b1:f2:fd:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:52:31 2025 by rpki-client