Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.mft
File: SMuUpENJ-Y1Am33bmgU99K7xrd8.mft (raw, json)
Hash identifier: SIYVENNyyXVZy1RwaOf0ZxfLZ676Li/0YgsIQ6ZaENI=
Subject key identifier: C0:89:2C:AF:FA:85:3A:04:A0:63:C2:5F:AB:9A:0B:7E:D4:1F:D2:30
Authority key identifier: 48:CB:94:A4:43:49:F9:8D:40:9B:7D:DB:9A:05:3D:F4:AE:F1:AD:DF
Certificate issuer: /CN=48cb94a44349f98d409b7ddb9a053df4aef1addf
Certificate serial: 019A22F7CA3515B8C4AACD4B33170A8D5043
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SMuUpENJ-Y1Am33bmgU99K7xrd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.mft
Manifest number: 0FE4
Signing time: Mon 27 Oct 2025 00:00:55 +0000
Manifest this update: Mon 27 Oct 2025 00:00:55 +0000
Manifest next update: Tue 28 Oct 2025 00:00:55 +0000
Files and hashes: 1: SMuUpENJ-Y1Am33bmgU99K7xrd8.crl (hash: u2GRmWpTlvIJzHOX5bFvulc3lIfGtOZRRISU507S9eo=)
2: galtvA878B_gyWy0hQyRkeaZi6U.roa (hash: COa1iZxjQ8Xwq/EGs0wzkzw8um4DhbZoyDMdmoMPbH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SMuUpENJ-Y1Am33bmgU99K7xrd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:f7:ca:35:15:b8:c4:aa:cd:4b:33:17:0a:8d:50:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48cb94a44349f98d409b7ddb9a053df4aef1addf
Validity
Not Before: Oct 27 00:00:55 2025 GMT
Not After : Oct 28 00:00:55 2025 GMT
Subject: CN=c0892caffa853a04a063c25fab9a0b7ed41fd230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:80:62:04:a1:8d:08:7b:e6:16:87:46:99:e1:
16:ce:d9:9d:c7:3e:0e:0f:11:49:44:53:73:91:70:
a2:71:7e:de:c7:a2:6c:31:7c:8c:72:6b:21:e3:5d:
b3:ca:c4:3d:af:15:cc:69:e5:08:c5:d1:7c:aa:1c:
53:e4:f1:f6:f5:34:cf:1e:55:85:81:6f:99:a3:72:
6f:4a:aa:db:58:b3:4c:a4:91:8f:07:76:4d:4a:5b:
91:be:3b:f3:52:63:0b:56:cd:8f:7d:6e:cd:fa:6e:
9e:01:4a:de:1a:a7:7e:69:fb:1f:02:5f:52:7d:2d:
07:46:94:0e:d7:d9:6f:05:0f:73:25:e9:6e:42:19:
21:49:d2:d9:e1:76:17:71:18:b8:bf:fe:f9:7c:17:
06:4e:3f:d3:ed:e0:3a:48:67:21:45:bc:f9:65:05:
c2:51:4e:44:61:bd:1a:13:50:52:03:bb:0b:72:df:
b6:4f:ff:8b:e0:f0:2a:29:0c:3e:8a:d6:7e:be:37:
25:8e:de:f2:48:70:6c:eb:a5:65:66:8e:b5:89:f9:
9b:de:11:b2:6a:3f:33:c9:23:7b:40:b3:4d:30:d2:
ee:f6:1d:17:eb:ec:3d:da:f7:4b:45:3c:10:80:2c:
30:1e:04:0d:25:bc:60:0d:f1:ed:d8:0f:cd:c3:0b:
5a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:89:2C:AF:FA:85:3A:04:A0:63:C2:5F:AB:9A:0B:7E:D4:1F:D2:30
X509v3 Authority Key Identifier:
keyid:48:CB:94:A4:43:49:F9:8D:40:9B:7D:DB:9A:05:3D:F4:AE:F1:AD:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SMuUpENJ-Y1Am33bmgU99K7xrd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:ba:d4:a1:58:62:d5:80:21:d4:c9:3b:39:7d:cd:9e:09:7b:
5c:ec:85:c6:5c:7a:85:a5:23:83:9b:54:01:3b:76:23:3b:20:
00:dd:50:94:63:92:09:45:4d:42:0b:20:6d:25:a2:ab:3f:4c:
ee:53:f4:32:27:ce:21:d7:fe:b8:65:33:f0:12:b2:16:88:18:
f7:4b:e9:4d:dc:96:8b:e4:52:51:53:c9:02:8e:15:af:17:e2:
42:8d:62:14:06:0a:1e:2c:f6:68:3e:df:ca:90:d8:54:93:92:
1c:6c:4d:cd:e5:88:74:fa:13:0c:5a:c5:31:f1:44:90:67:ca:
7d:26:92:0a:45:27:4b:d1:70:e1:c7:3c:28:ed:ba:8c:71:62:
6f:59:46:03:49:9a:7a:90:08:60:cb:05:2b:c8:71:84:c8:91:
8a:0f:ce:37:c2:f7:76:5a:09:7b:9d:79:0f:58:a3:47:e6:72:
3d:65:4a:64:e8:24:72:bc:82:b9:0f:f0:58:f5:a6:69:65:d4:
ea:9c:9d:3c:59:73:0d:49:ea:39:7f:3f:e9:62:99:4c:c1:4f:
e4:e5:57:81:21:a9:0a:85:c4:18:50:77:90:f9:6a:da:59:20:
73:03:cc:a7:8a:8b:21:c3:a8:e8:05:8e:48:ec:8e:06:73:e0:
da:dc:cf:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 05:47:17 2025 by rpki-client