Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.mft
File: sMmblRxqb2rcyGjYhalArfAFGhk.mft (raw, json)
Hash identifier: sJZ46BOb56ZvkAkeBe5lEWmtq3E30oo50Bz09cvyg9A=
Subject key identifier: 4E:28:57:D0:7D:0D:6F:0E:18:EA:42:18:CD:32:1D:9E:77:4A:41:62
Authority key identifier: B0:C9:9B:95:1C:6A:6F:6A:DC:C8:68:D8:85:A9:40:AD:F0:05:1A:19
Certificate issuer: /CN=b0c99b951c6a6f6adcc868d885a940adf0051a19
Certificate serial: 01984A77E2D5CB4C2DA41BF69B6B04C2DD27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMmblRxqb2rcyGjYhalArfAFGhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.mft
Manifest number: 0C93
Signing time: Sun 27 Jul 2025 06:00:27 +0000
Manifest this update: Sun 27 Jul 2025 06:00:27 +0000
Manifest next update: Mon 28 Jul 2025 06:00:27 +0000
Files and hashes: 1: S5idv9RUVm_2J5GgNAX09HgvY7U.roa (hash: 4OYpTkc09pdm5hRENjZ+uPkWTS9n8ZtkwbMJqCtcIGQ=)
2: sMmblRxqb2rcyGjYhalArfAFGhk.crl (hash: LqfdKmhjV9Bcs9san90nXmnkxl5ZMp4Dup86XvdRzkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sMmblRxqb2rcyGjYhalArfAFGhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:e2:d5:cb:4c:2d:a4:1b:f6:9b:6b:04:c2:dd:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c99b951c6a6f6adcc868d885a940adf0051a19
Validity
Not Before: Jul 27 06:00:27 2025 GMT
Not After : Jul 28 06:00:27 2025 GMT
Subject: CN=4e2857d07d0d6f0e18ea4218cd321d9e774a4162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c1:2d:31:89:a1:c5:91:a6:a3:59:29:e7:1b:
7d:49:1d:77:38:59:cb:3f:50:c2:4a:49:cb:c6:97:
a5:ce:c6:a3:04:c9:3a:1d:61:96:d3:b6:8a:5f:e9:
2c:06:17:ad:41:0e:cb:db:5f:c1:6d:d5:d4:ae:a2:
c6:b4:db:13:0b:21:ff:76:b5:30:11:9d:62:72:42:
11:b9:a6:44:32:c2:62:8a:e7:11:80:ee:9d:42:a4:
92:26:de:eb:a4:a3:43:65:61:ea:3d:62:a9:a0:ec:
28:7f:88:e9:a9:b4:32:b3:47:78:a8:15:d9:fa:4d:
7f:d0:0b:57:08:b0:ac:da:54:e6:33:7e:a8:e5:42:
03:35:b2:34:56:20:14:ef:cf:ac:e1:4f:d0:71:6b:
7e:1a:61:ea:f9:41:99:53:08:c0:87:b7:f6:b1:da:
77:de:1f:7d:0a:e6:9a:65:5f:98:7f:e4:19:6f:f9:
33:70:52:e7:62:6e:1c:fa:ca:c8:d8:8c:5c:ad:53:
47:c2:f3:b6:5b:63:cd:b8:92:4d:a3:2a:18:fc:aa:
de:c5:0e:b8:ce:1d:8e:46:54:8f:1c:99:7c:e0:ca:
df:fc:84:27:0b:84:f3:d0:84:d5:a4:2a:fe:fb:1b:
0e:c5:02:9b:c9:07:cc:cd:49:51:97:bf:fb:11:25:
ff:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:28:57:D0:7D:0D:6F:0E:18:EA:42:18:CD:32:1D:9E:77:4A:41:62
X509v3 Authority Key Identifier:
keyid:B0:C9:9B:95:1C:6A:6F:6A:DC:C8:68:D8:85:A9:40:AD:F0:05:1A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMmblRxqb2rcyGjYhalArfAFGhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:fe:2f:1b:99:d9:90:3a:6f:f4:09:be:5d:4a:09:92:1d:de:
73:02:e5:a0:9e:9e:eb:a8:86:d7:b4:37:71:69:f9:e0:24:a6:
a5:12:29:3d:0f:ff:d9:70:18:49:71:dd:38:08:fd:43:56:7d:
19:1d:f0:f8:62:3e:e5:36:6f:a9:9a:47:23:f3:76:80:22:ba:
00:c2:d4:0d:84:49:c4:d8:36:5f:bb:d1:cd:9d:bb:5f:31:ea:
c6:83:39:ed:c6:6c:07:a2:5b:be:3f:43:91:b1:7d:8a:2d:cd:
17:ab:a2:0e:f4:db:8a:84:7e:e3:5c:0f:5f:81:18:05:23:d3:
80:d5:61:7f:58:4a:dc:10:6e:78:73:b1:94:54:29:0b:1f:e1:
a9:90:56:94:a7:02:26:64:35:9c:8e:3b:01:4a:78:7d:3c:a3:
fc:00:70:4c:a9:20:05:ed:98:f9:f8:d4:e4:39:8a:00:2b:d9:
79:55:d8:2a:57:b4:ab:ba:91:23:81:aa:74:f0:2a:7f:0d:d9:
5a:b1:ef:85:89:1d:e6:16:c9:69:fc:2a:38:2a:cb:3f:22:d8:
e6:cc:1b:ba:95:36:97:20:d0:13:e8:85:97:08:20:ec:ca:3f:
0f:5d:09:68:03:d4:4b:64:24:10:bf:d8:5e:47:de:e4:44:55:
b8:43:93:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:21:09 2025 by rpki-client