Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/ec8801-0a7c-487e-a103-525d7e22c788/1/smbm5NXff4olZUFEdV172ZLnNTk.mft
File: smbm5NXff4olZUFEdV172ZLnNTk.mft (raw, json)
Hash identifier: pmNGzJ6IKFsFNRwb0E/uB1VAKX4jnJ82E5faEVR/c/M=
Subject key identifier: 07:58:8A:02:FD:00:C9:79:D3:7E:BE:1F:3A:57:C6:43:EE:BC:33:1A
Authority key identifier: B2:66:E6:E4:D5:DF:7F:8A:25:65:41:44:75:5D:7B:D9:92:E7:35:39
Certificate issuer: /CN=b266e6e4d5df7f8a25654144755d7bd992e73539
Certificate serial: 019656EF4BACDE87670B6995DFD2F6A266BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/smbm5NXff4olZUFEdV172ZLnNTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/ec8801-0a7c-487e-a103-525d7e22c788/1/smbm5NXff4olZUFEdV172ZLnNTk.mft
Manifest number: 0808
Signing time: Mon 21 Apr 2025 06:00:45 +0000
Manifest this update: Mon 21 Apr 2025 06:00:45 +0000
Manifest next update: Tue 22 Apr 2025 06:00:45 +0000
Files and hashes: 1: 4UxBywVcvcMsb-HDJGoMszIr0uA.roa (hash: CPNjg2b32CAKEDe5pmcVPP+MsVRB7Gy+EYi43k44UBQ=)
2: smbm5NXff4olZUFEdV172ZLnNTk.crl (hash: ehc+gNG45Zwwif24h8VHDNyq/K5U2+yGjuab3vjXEUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/ec8801-0a7c-487e-a103-525d7e22c788/1/smbm5NXff4olZUFEdV172ZLnNTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/ec8801-0a7c-487e-a103-525d7e22c788/1/smbm5NXff4olZUFEdV172ZLnNTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/smbm5NXff4olZUFEdV172ZLnNTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:ef:4b:ac:de:87:67:0b:69:95:df:d2:f6:a2:66:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b266e6e4d5df7f8a25654144755d7bd992e73539
Validity
Not Before: Apr 21 06:00:45 2025 GMT
Not After : Apr 22 06:00:45 2025 GMT
Subject: CN=07588a02fd00c979d37ebe1f3a57c643eebc331a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:31:34:b2:35:f3:75:f1:92:1d:6b:8b:97:4d:
39:7a:59:1a:64:2f:1c:c8:82:35:18:b9:66:d3:16:
cd:20:6b:33:eb:42:19:7f:7b:7f:22:6e:b9:38:31:
4b:25:6a:21:11:ff:e5:e3:0d:ef:82:ec:3a:9a:f0:
77:ce:58:34:dd:a5:3d:b2:79:bd:de:2b:4a:36:83:
61:2b:44:fa:db:9d:71:5c:4c:36:83:6f:22:f7:29:
49:b1:16:9e:ac:80:d2:7a:f7:b6:fe:95:c1:18:fe:
3d:3e:e3:62:9b:15:0c:18:f2:bb:68:62:2c:a8:c5:
18:d4:df:86:02:15:62:33:eb:cb:47:b7:da:a8:cc:
e6:2e:aa:2a:3f:1c:16:ae:89:c3:b3:2b:0b:81:fb:
46:17:7d:8e:85:26:71:41:53:f9:b7:98:6b:ee:58:
85:23:4c:15:54:eb:63:94:7d:ed:ef:1b:d8:63:9a:
6b:2b:07:78:ab:e6:4d:5a:06:e0:ee:15:38:a9:8e:
aa:43:a6:34:a7:f8:3b:9e:cd:82:7c:d1:70:7c:5d:
9f:fb:6b:88:21:74:07:76:7d:cc:85:d0:8f:8c:ec:
8f:e5:64:2e:3b:1c:82:00:db:42:f9:c7:80:66:73:
44:9f:67:07:41:7f:ab:be:d8:cb:5c:9a:5c:b5:2f:
de:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:58:8A:02:FD:00:C9:79:D3:7E:BE:1F:3A:57:C6:43:EE:BC:33:1A
X509v3 Authority Key Identifier:
keyid:B2:66:E6:E4:D5:DF:7F:8A:25:65:41:44:75:5D:7B:D9:92:E7:35:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/smbm5NXff4olZUFEdV172ZLnNTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ec8801-0a7c-487e-a103-525d7e22c788/1/smbm5NXff4olZUFEdV172ZLnNTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ec8801-0a7c-487e-a103-525d7e22c788/1/smbm5NXff4olZUFEdV172ZLnNTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:05:6a:79:a3:0c:29:39:1b:4e:92:b6:a8:75:0a:14:38:a4:
c5:e9:0c:e3:a2:fc:8b:e0:82:ee:37:4e:05:ed:84:6e:ce:32:
ce:0e:f7:76:c1:bb:47:89:c1:61:d1:59:c0:03:dc:28:65:48:
b1:64:a2:fc:dc:37:ea:8b:2b:24:0e:03:24:d8:13:f1:35:42:
7f:8e:ee:22:75:28:3e:cf:84:a4:ee:17:a3:c9:fb:96:d4:ce:
99:64:44:64:a9:e8:6e:77:a9:ec:cd:f6:d1:c0:1f:ea:ac:81:
ba:27:e5:70:80:b2:fb:77:56:a5:0f:25:92:75:d8:da:24:c4:
81:fa:42:1c:c4:48:97:bb:a7:af:eb:c7:ba:71:dd:d6:e9:20:
fe:2e:24:6f:16:b0:4e:7c:c0:de:8d:b0:01:b1:69:b2:76:dc:
2b:3b:45:1f:77:31:73:d1:3e:9c:14:ba:c0:11:9d:74:8a:d2:
d2:24:84:c6:bc:9d:2e:07:55:23:e5:64:53:f9:7e:c2:a1:46:
19:bb:5c:8f:bb:f9:ea:6d:56:8d:e8:46:54:09:21:c8:db:4c:
a7:c3:72:8b:17:dc:b2:da:64:05:0b:a7:78:ab:27:b8:59:bc:
b2:47:a5:c5:0c:1c:da:d7:d6:1d:34:3c:49:0b:ac:1d:7b:b0:
29:7f:42:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:37:53 2025 by rpki-client