Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.mft
File: sMmblRxqb2rcyGjYhalArfAFGhk.mft (raw, json)
Hash identifier: W3v1uO1XGNCYlEVhv1VF9ldxbtf6+Bf62ed94EN3F7A=
Subject key identifier: 32:1D:1D:D0:9C:91:0D:17:22:41:2A:81:0B:9E:5E:3F:C2:F0:53:2F
Authority key identifier: B0:C9:9B:95:1C:6A:6F:6A:DC:C8:68:D8:85:A9:40:AD:F0:05:1A:19
Certificate issuer: /CN=b0c99b951c6a6f6adcc868d885a940adf0051a19
Certificate serial: 019A70DC4AAA8C9FA24E1B8BC50BFE7518AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMmblRxqb2rcyGjYhalArfAFGhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.mft
Manifest number: 0DB0
Signing time: Tue 11 Nov 2025 03:01:16 +0000
Manifest this update: Tue 11 Nov 2025 03:01:16 +0000
Manifest next update: Wed 12 Nov 2025 03:01:16 +0000
Files and hashes: 1: S5idv9RUVm_2J5GgNAX09HgvY7U.roa (hash: 4OYpTkc09pdm5hRENjZ+uPkWTS9n8ZtkwbMJqCtcIGQ=)
2: sMmblRxqb2rcyGjYhalArfAFGhk.crl (hash: ajG11fThKnzmPJOyESgcwtSMBdP+C1v7mKpF7ycBj0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sMmblRxqb2rcyGjYhalArfAFGhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:4a:aa:8c:9f:a2:4e:1b:8b:c5:0b:fe:75:18:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c99b951c6a6f6adcc868d885a940adf0051a19
Validity
Not Before: Nov 11 03:01:16 2025 GMT
Not After : Nov 12 03:01:16 2025 GMT
Subject: CN=321d1dd09c910d1722412a810b9e5e3fc2f0532f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9c:a7:c1:c1:7a:3c:3f:4e:a3:2f:5b:69:37:
b6:98:3b:35:62:d0:37:1a:24:5f:5d:3c:9a:72:67:
be:5b:1e:f3:88:0c:13:8d:50:69:0c:c9:eb:1c:61:
a8:59:16:e6:8e:1e:2a:1b:c6:ee:29:10:ef:e2:b6:
65:08:42:49:4d:ac:e8:c0:81:1c:0a:94:ce:66:95:
67:0c:7c:3b:29:3f:2a:ba:03:44:7b:29:c5:ba:e6:
42:11:d8:ad:ff:7a:3d:c1:b1:dc:02:9d:fd:24:f3:
db:63:02:bc:bd:dc:9c:4b:92:1c:f5:cf:86:4d:9a:
5a:ca:9a:a8:68:d3:25:a5:f4:67:01:01:2a:2e:44:
ee:2c:6c:f0:d4:15:5a:fd:a9:d0:85:7b:18:1d:ac:
13:51:22:02:0c:cf:c9:42:46:e1:66:61:25:57:32:
d4:62:68:50:ae:92:13:66:e1:e2:de:ad:41:15:62:
70:f6:51:d9:dc:c7:0d:d3:e1:d2:4a:38:12:93:f9:
43:10:77:fe:12:63:1a:b9:30:a4:50:c1:75:2f:e5:
ee:92:1a:3b:64:4a:5a:41:b4:2f:a5:79:3f:78:b4:
9e:28:f2:54:b9:34:59:a5:75:10:ae:3c:29:76:10:
a9:25:b2:4b:e6:be:53:f9:b7:b3:27:a0:7b:7b:88:
d4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:1D:1D:D0:9C:91:0D:17:22:41:2A:81:0B:9E:5E:3F:C2:F0:53:2F
X509v3 Authority Key Identifier:
keyid:B0:C9:9B:95:1C:6A:6F:6A:DC:C8:68:D8:85:A9:40:AD:F0:05:1A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMmblRxqb2rcyGjYhalArfAFGhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:1f:00:bc:32:3c:44:91:e7:5b:02:53:54:c2:20:3a:c0:4b:
0e:01:a9:e7:d9:5b:74:12:10:a2:bd:35:79:e9:8b:af:e6:82:
7d:4e:df:d1:72:92:a1:22:e6:5e:a5:0f:a8:57:e8:12:73:0a:
95:b1:23:d5:9b:66:1a:e3:eb:ff:ad:d1:8c:3f:3f:5c:fb:fe:
1c:72:15:2f:96:1d:05:ce:35:d2:06:b3:9f:24:fc:69:78:ac:
9e:f3:7b:4e:71:71:54:7e:b9:cf:1d:df:ba:6e:19:84:29:9b:
05:2c:22:97:b5:1f:53:7a:ef:b3:82:aa:ca:99:6e:1e:2c:25:
ee:60:71:1b:ee:23:20:2b:fc:28:6d:e8:ba:34:dc:01:a6:71:
c7:b7:b5:23:8d:5d:d5:08:9a:53:0b:a8:1a:e1:14:0f:79:fd:
77:5c:89:77:01:d9:5c:2a:93:2d:e7:35:08:d3:46:d2:47:e4:
ca:b4:09:98:fd:bf:00:e1:59:2a:4a:56:f4:45:48:d4:f2:79:
e5:b3:2f:89:17:73:14:81:af:1e:7b:f8:d4:72:d9:78:f7:70:
6c:b7:97:c0:3d:e5:97:ee:5a:04:2f:5f:ff:89:eb:9d:5d:69:
35:48:70:67:77:7b:b3:96:50:49:7b:2d:9f:48:be:5b:55:87:
62:b0:08:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:39:11 2025 by rpki-client