
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.mft
File: SMMR7eKLkvXGGpEr4GA5SYsjQio.mft (raw, json)
Hash identifier: NlN7iH9Nqm2CFg8zZknNiYttzT8ZkPBov0f0G/fw7KA=
Subject key identifier: C1:6B:54:D2:5D:2D:34:48:C4:FA:C9:D2:2C:4F:64:04:AE:BE:8E:D9
Authority key identifier: 48:C3:11:ED:E2:8B:92:F5:C6:1A:91:2B:E0:60:39:49:8B:23:42:2A
Certificate issuer: /CN=48c311ede28b92f5c61a912be06039498b23422a
Certificate serial: 0199240DAE36565920FA5BBC763E9396AF17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SMMR7eKLkvXGGpEr4GA5SYsjQio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.mft
Manifest number: 075C
Signing time: Sun 07 Sep 2025 12:01:40 +0000
Manifest this update: Sun 07 Sep 2025 12:01:40 +0000
Manifest next update: Mon 08 Sep 2025 12:01:40 +0000
Files and hashes: 1: SMMR7eKLkvXGGpEr4GA5SYsjQio.crl (hash: 4R5G2a3nR76IyaLs2mM1xZCeeII7vXKfqYyFWSYkmJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.mft
rsync://rpki.ripe.net/repository/DEFAULT/SMMR7eKLkvXGGpEr4GA5SYsjQio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0d:ae:36:56:59:20:fa:5b:bc:76:3e:93:96:af:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48c311ede28b92f5c61a912be06039498b23422a
Validity
Not Before: Sep 7 12:01:40 2025 GMT
Not After : Sep 8 12:01:40 2025 GMT
Subject: CN=c16b54d25d2d3448c4fac9d22c4f6404aebe8ed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:81:a6:25:fe:cd:1b:9a:09:81:ac:21:fb:45:
7b:9c:d3:7f:d6:07:ac:f5:02:1f:2b:db:b6:7b:08:
27:57:42:ce:f7:be:4f:0a:ba:18:c9:4d:5e:8d:cb:
07:cc:50:b4:f0:51:e1:90:51:bf:e9:2b:81:d6:88:
4b:24:21:e2:bc:f0:20:9b:ff:24:fc:35:d4:79:90:
18:76:58:57:56:b5:44:87:04:3e:80:27:fd:7d:ec:
b8:c1:c8:1e:d4:10:d6:a5:28:fd:44:77:c7:f3:dd:
93:d3:cd:33:9f:cb:1c:38:a4:8e:17:4d:9b:4f:b7:
84:96:31:eb:93:a5:3c:ed:08:17:fe:81:76:5c:b2:
bb:3d:b1:05:98:cf:fe:9a:4f:e8:ae:8b:70:b2:f5:
51:b5:9c:f6:c9:35:31:27:a9:5d:25:7d:8a:7b:e2:
fd:3f:4f:d1:fb:2c:bb:a6:8e:33:9d:a0:ef:c9:ae:
35:c3:86:e8:d0:e5:83:7b:d1:ef:d0:ad:3e:a1:aa:
3e:fd:75:d1:7d:46:e5:51:13:44:17:c4:6e:12:6e:
30:8a:55:20:20:73:c0:64:e7:b0:e5:46:dd:6a:41:
b6:64:8b:01:1b:9d:bb:7e:9a:32:8d:2e:42:e4:e0:
8c:0a:df:c7:34:55:9c:d6:b5:40:e7:f2:22:87:97:
79:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:6B:54:D2:5D:2D:34:48:C4:FA:C9:D2:2C:4F:64:04:AE:BE:8E:D9
X509v3 Authority Key Identifier:
keyid:48:C3:11:ED:E2:8B:92:F5:C6:1A:91:2B:E0:60:39:49:8B:23:42:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SMMR7eKLkvXGGpEr4GA5SYsjQio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:c2:ef:b4:e2:14:5c:3a:d6:11:4a:e3:3a:14:b1:6a:71:29:
28:64:c5:30:a6:82:38:44:e5:8e:94:5c:1a:b5:a3:ef:5b:ee:
2e:44:a7:08:08:26:ea:b0:2e:f5:41:33:cc:00:33:29:76:ca:
e4:53:c7:d8:25:80:8f:9e:20:d5:da:ca:8b:64:cc:98:60:ab:
3b:fa:b1:35:ed:30:96:c5:bc:46:2a:35:a1:10:6e:40:d4:bc:
43:28:39:24:8e:a3:75:74:02:cb:46:27:84:6c:33:f4:e1:03:
b3:64:1c:c8:b8:19:13:7c:ac:ed:a1:56:76:cb:a2:5a:f7:5a:
ae:9b:ef:37:a4:bf:ec:3a:e3:68:14:7f:d8:e2:7c:a5:93:77:
1c:0b:08:25:1d:19:fd:8d:05:c9:d2:7e:d8:02:63:d1:41:c3:
44:91:29:32:72:35:bf:c3:73:1a:c3:f3:16:85:e1:78:ee:f2:
8c:71:87:86:cf:a0:29:da:0c:06:cf:1c:cb:bf:72:f5:8c:08:
a2:7d:fc:4d:60:be:5f:39:f9:d7:22:57:03:f4:f7:a3:85:8d:
02:89:56:90:1e:f4:d7:31:9a:f7:b0:3f:01:1f:76:fc:18:ce:
8b:1d:41:43:98:5f:50:30:4b:84:c4:fe:de:93:84:cd:38:b2:
eb:d2:70:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:36:18 2025 by rpki-client