Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.mft
File: SMMR7eKLkvXGGpEr4GA5SYsjQio.mft (raw, json)
Hash identifier: nuE1aYUWGcMJtdKofthDmwqOq7/81/wBAT8k40jVeis=
Subject key identifier: F1:AD:65:15:7C:D5:CC:D5:1F:23:F5:2A:3B:CD:73:80:7C:DF:79:FE
Authority key identifier: 48:C3:11:ED:E2:8B:92:F5:C6:1A:91:2B:E0:60:39:49:8B:23:42:2A
Certificate issuer: /CN=48c311ede28b92f5c61a912be06039498b23422a
Certificate serial: 019A722664C02DDB782A72CC019DD0796CE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SMMR7eKLkvXGGpEr4GA5SYsjQio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.mft
Manifest number: 0809
Signing time: Tue 11 Nov 2025 09:01:50 +0000
Manifest this update: Tue 11 Nov 2025 09:01:50 +0000
Manifest next update: Wed 12 Nov 2025 09:01:50 +0000
Files and hashes: 1: SMMR7eKLkvXGGpEr4GA5SYsjQio.crl (hash: QaW82aixOrqFVMcqVuFE5Rmf0ZNZ68QGJT++IO+Ap1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.mft
rsync://rpki.ripe.net/repository/DEFAULT/SMMR7eKLkvXGGpEr4GA5SYsjQio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:64:c0:2d:db:78:2a:72:cc:01:9d:d0:79:6c:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48c311ede28b92f5c61a912be06039498b23422a
Validity
Not Before: Nov 11 09:01:50 2025 GMT
Not After : Nov 12 09:01:50 2025 GMT
Subject: CN=f1ad65157cd5ccd51f23f52a3bcd73807cdf79fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e3:0c:be:80:b5:d4:b5:03:fb:14:9e:00:48:
33:7f:77:fd:58:c8:4e:27:18:02:81:87:d7:f9:f5:
76:bc:a9:7c:50:af:8d:ef:53:b6:b9:4b:85:80:5a:
8d:01:d6:c6:05:f6:91:97:39:37:fb:33:fc:d6:38:
38:3e:66:15:77:cd:d7:9b:48:a0:d5:4e:57:f5:c9:
f1:67:48:b3:bd:cf:ed:1e:32:3b:87:e0:c9:84:14:
86:61:53:da:77:58:02:de:a4:17:43:9a:83:bb:47:
88:3b:de:5c:e5:d1:db:d5:47:68:03:f9:18:3a:a1:
8a:5c:2e:d8:83:84:f1:d1:7c:d2:27:1a:1e:cd:47:
95:43:16:2d:06:6b:0c:21:99:d5:6e:af:45:fb:bc:
11:cb:6a:94:67:60:a9:59:93:f5:7b:7f:75:2e:b6:
9b:3d:cf:89:c4:37:3b:bb:4e:c1:f5:08:7f:a7:7d:
6e:be:da:9e:e4:07:21:9a:33:52:ea:69:18:1a:5d:
d0:9d:38:b3:9c:81:2a:4a:a3:69:8d:e1:a3:1c:16:
a8:25:82:62:86:61:af:20:9b:95:9a:8a:e3:ff:20:
3b:97:53:09:f8:47:f9:03:0a:b7:a0:77:e9:92:db:
a4:38:c5:c5:d8:dd:47:35:b8:f5:1c:30:87:93:d2:
e8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:AD:65:15:7C:D5:CC:D5:1F:23:F5:2A:3B:CD:73:80:7C:DF:79:FE
X509v3 Authority Key Identifier:
keyid:48:C3:11:ED:E2:8B:92:F5:C6:1A:91:2B:E0:60:39:49:8B:23:42:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SMMR7eKLkvXGGpEr4GA5SYsjQio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:dc:14:85:75:8e:d5:45:4a:2d:bf:ec:05:e5:4c:24:6b:9e:
51:1f:d5:4e:68:9d:b2:70:d1:37:0d:a0:2e:0e:cc:0e:02:6e:
b5:b7:63:52:44:be:92:f2:71:4d:82:89:f2:c9:46:b0:a2:32:
0b:45:1c:04:57:a9:0e:97:36:88:6c:a3:c1:ab:27:91:b4:61:
61:82:ce:53:7f:cf:4d:a5:ee:a8:e1:8c:ad:b8:c6:f1:d0:a1:
ac:8e:78:4d:33:da:f5:95:22:a3:92:8e:45:4e:5d:b6:34:87:
33:52:26:b1:18:30:31:8a:09:84:2a:b4:95:ac:2b:b2:d3:1d:
a7:cb:90:3a:ef:b2:9e:03:e6:fa:c5:b4:48:bc:39:e9:d4:cb:
b2:30:1d:3f:64:9c:80:7e:e0:f6:33:4f:d2:36:23:6a:69:a0:
f1:36:d2:9c:a8:2b:dc:7f:d5:2c:22:eb:48:1a:f2:fa:dc:a8:
cf:a9:81:54:77:6c:69:21:45:ee:48:63:4a:d2:64:ca:2a:12:
c9:ea:f4:1c:fb:56:a7:82:e0:50:ed:37:40:f3:df:98:8d:9c:
1b:17:64:38:8c:e6:8a:36:ac:d0:23:c0:aa:bc:f3:4a:a2:77:
96:31:b0:f1:be:e3:0c:1f:89:36:4b:e7:7c:22:bf:1a:c6:48:
0b:bb:2f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:27:20 2025 by rpki-client