Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.mft
File: smu0Mz7-nhTEgxsFghQW5cVb30I.mft (raw, json)
Hash identifier: qVVeZRfmHoibWKdqVevuk0BFYeyF93FyCIlt4IVkSF4=
Subject key identifier: 4A:16:38:18:8A:FE:08:CF:7D:C7:FC:D6:98:49:45:51:B9:06:11:5E
Authority key identifier: B2:6B:B4:33:3E:FE:9E:14:C4:83:1B:05:82:14:16:E5:C5:5B:DF:42
Certificate issuer: /CN=b26bb4333efe9e14c4831b05821416e5c55bdf42
Certificate serial: 019648217CFD578BA22714385AB9E6CF8E37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/smu0Mz7-nhTEgxsFghQW5cVb30I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.mft
Manifest number: 0FAF
Signing time: Fri 18 Apr 2025 09:01:16 +0000
Manifest this update: Fri 18 Apr 2025 09:01:16 +0000
Manifest next update: Sat 19 Apr 2025 09:01:16 +0000
Files and hashes: 1: F_5jyI70I8rVjTf2ep027mY2RmU.roa (hash: P/CUUf/qaBdESN8cQx3ZzCN3CEChdcz8YXHGB8DZwPM=)
2: smu0Mz7-nhTEgxsFghQW5cVb30I.crl (hash: gWCKl7KPrQxmSkUazpa+Uzxbou/LouJyes+sf3+2M7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.mft
rsync://rpki.ripe.net/repository/DEFAULT/smu0Mz7-nhTEgxsFghQW5cVb30I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:21:7c:fd:57:8b:a2:27:14:38:5a:b9:e6:cf:8e:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b26bb4333efe9e14c4831b05821416e5c55bdf42
Validity
Not Before: Apr 18 09:01:16 2025 GMT
Not After : Apr 19 09:01:16 2025 GMT
Subject: CN=4a1638188afe08cf7dc7fcd698494551b906115e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:42:5a:0e:1a:92:15:0d:26:10:25:60:18:ee:
c4:e7:3a:bd:da:16:0c:53:64:6f:cc:21:42:dc:73:
3f:c5:5d:0d:e7:98:77:62:d8:ff:1c:09:e1:38:c1:
7c:3e:41:ad:c8:bb:99:d9:2e:f5:f4:75:cb:ef:ff:
af:6d:f1:8f:ea:54:04:ec:f1:b2:29:a3:ba:8d:0d:
d7:4e:9a:76:07:e6:04:fb:20:46:88:17:a2:98:3b:
6a:c3:77:14:88:73:bd:a0:14:6a:59:74:e6:f3:45:
2b:21:74:e2:dc:85:28:80:0b:7f:53:50:07:47:e6:
58:59:e5:b1:98:76:2f:37:c8:99:21:65:a0:e6:2a:
82:07:1c:d4:34:73:e0:d8:66:b1:91:ec:9f:5e:8f:
d4:39:94:e7:ac:f7:64:66:f5:41:66:39:b0:3e:6b:
38:39:0e:46:8e:6e:fe:1b:19:cf:25:e0:1b:dd:4c:
91:f5:f6:67:83:86:16:79:16:a4:73:03:71:01:cb:
2e:c7:14:4b:df:02:e4:83:8a:15:67:46:18:68:c0:
d0:e8:1c:c0:c2:6d:d6:1c:83:7c:84:06:a0:cf:c8:
74:2e:3f:7f:dd:8f:75:10:d5:4b:fe:98:10:af:72:
56:90:89:70:6c:ac:36:2e:90:53:ac:26:c4:9e:42:
a8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:16:38:18:8A:FE:08:CF:7D:C7:FC:D6:98:49:45:51:B9:06:11:5E
X509v3 Authority Key Identifier:
keyid:B2:6B:B4:33:3E:FE:9E:14:C4:83:1B:05:82:14:16:E5:C5:5B:DF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/smu0Mz7-nhTEgxsFghQW5cVb30I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:55:fe:33:4a:5c:4e:68:91:a0:cf:04:6b:51:3a:55:0c:4f:
96:24:db:3b:70:b0:a9:66:83:0c:47:50:21:8a:f2:2c:71:3a:
36:f4:c0:ef:ad:03:9c:f9:ed:74:04:84:70:46:2e:73:1e:8e:
83:56:b4:ce:56:34:d4:9a:a5:c4:ae:cb:ff:1a:d3:65:be:99:
23:2f:f9:c6:e3:a3:c9:01:60:d4:7a:e9:62:16:26:81:2d:4b:
5d:a3:ea:40:b3:bd:c5:90:11:7d:fd:98:08:e1:39:e0:b1:de:
db:ae:91:10:62:64:98:28:4e:e3:0f:4b:ec:c8:af:d3:f3:24:
8c:b7:a6:a0:4a:61:2d:9c:c3:bb:9c:86:6d:62:d1:d6:63:ac:
30:82:fe:7f:dd:d1:ef:61:f7:3a:0d:8d:d1:1d:80:dc:7b:54:
79:3f:ff:9c:1a:ee:d9:57:d8:4d:08:72:19:ab:4e:11:0f:49:
c1:92:5c:af:b5:ae:4f:d8:55:f0:08:47:8b:52:61:32:87:05:
af:a4:5a:d6:0b:40:7e:a6:ef:86:53:12:17:29:0f:bc:9c:46:
c3:b6:87:d7:fa:87:f0:d0:b0:0a:28:db:d2:dd:6d:0d:4c:cb:
e4:01:2f:e6:cf:06:ad:18:d4:20:17:4f:65:e0:32:62:e1:ab:
71:9f:1d:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZIIXz9V4uiJxQ4Wrnmz443MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyNmJiNDMzM2VmZTllMTRjNDgzMWIwNTgyMTQxNmU1YzU1
YmRmNDIwHhcNMjUwNDE4MDkwMTE2WhcNMjUwNDE5MDkwMTE2WjAzMTEwLwYDVQQD
Eyg0YTE2MzgxODhhZmUwOGNmN2RjN2ZjZDY5ODQ5NDU1MWI5MDYxMTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUJaDhqSFQ0mECVgGO7E5zq92hYM
U2RvzCFC3HM/xV0N55h3Ytj/HAnhOMF8PkGtyLuZ2S719HXL7/+vbfGP6lQE7PGy
KaO6jQ3XTpp2B+YE+yBGiBeimDtqw3cUiHO9oBRqWXTm80UrIXTi3IUogAt/U1AH
R+ZYWeWxmHYvN8iZIWWg5iqCBxzUNHPg2GaxkeyfXo/UOZTnrPdkZvVBZjmwPms4
OQ5Gjm7+GxnPJeAb3UyR9fZng4YWeRakcwNxAcsuxxRL3wLkg4oVZ0YYaMDQ6BzA
wm3WHIN8hAagz8h0Lj9/3Y91ENVL/pgQr3JWkIlwbKw2LpBTrCbEnkKoVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEoWOBiK/gjPfcf81phJRVG5BhFeMB8GA1UdIwQY
MBaAFLJrtDM+/p4UxIMbBYIUFuXFW99CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc211ME16Ny1uaFRFZ3hzRmdoUVc1Y1ZiMzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9hZDEzMDEtMTQ5Yy00YzIxLTk4YjMt
NDQ2YTg5MTNkNGI4LzEvc211ME16Ny1uaFRFZ3hzRmdoUVc1Y1ZiMzBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS9hZDEzMDEtMTQ5Yy00YzIxLTk4YjMtNDQ2YTg5MTNkNGI4
LzEvc211ME16Ny1uaFRFZ3hzRmdoUVc1Y1ZiMzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIFX+M0pc
TmiRoM8Ea1E6VQxPliTbO3CwqWaDDEdQIYryLHE6NvTA760DnPntdASEcEYucx6O
g1a0zlY01JqlxK7L/xrTZb6ZIy/5xuOjyQFg1HrpYhYmgS1LXaPqQLO9xZARff2Y
COE54LHe266REGJkmChO4w9L7Miv0/MkjLemoEphLZzDu5yGbWLR1mOsMIL+f93R
72H3Og2N0R2A3HtUeT//nBru2VfYTQhyGatOEQ9JwZJcr7WuT9hV8AhHi1JhMocF
r6Ra1gtAfqbvhlMSFykPvJxGw7aH1/qH8NCwCijb0t1tDUzL5AEv5s8GrRjUIBdP
ZeAyYuGrcZ8dpA==
-----END CERTIFICATE-----
Generated at Fri Apr 18 11:23:27 2025 by rpki-client