Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.mft
File: smu0Mz7-nhTEgxsFghQW5cVb30I.mft (raw, json)
Hash identifier: c3i5cJR4im6exbOxAU7IIQhCzskjSMZYkutYadE7Y/s=
Subject key identifier: 76:D5:F9:E9:7E:AA:86:76:31:BD:26:83:F5:BD:C7:61:F5:4F:B4:A0
Authority key identifier: B2:6B:B4:33:3E:FE:9E:14:C4:83:1B:05:82:14:16:E5:C5:5B:DF:42
Certificate issuer: /CN=b26bb4333efe9e14c4831b05821416e5c55bdf42
Certificate serial: 01972FE0460B518181817D5B323F1F7E964A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/smu0Mz7-nhTEgxsFghQW5cVb30I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.mft
Manifest number: 1027
Signing time: Mon 02 Jun 2025 09:01:56 +0000
Manifest this update: Mon 02 Jun 2025 09:01:56 +0000
Manifest next update: Tue 03 Jun 2025 09:01:56 +0000
Files and hashes: 1: F_5jyI70I8rVjTf2ep027mY2RmU.roa (hash: P/CUUf/qaBdESN8cQx3ZzCN3CEChdcz8YXHGB8DZwPM=)
2: smu0Mz7-nhTEgxsFghQW5cVb30I.crl (hash: Q/5dJtxUaQLVIELHaGWujXzfEy/fPibd4mOI3GTTfgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.mft
rsync://rpki.ripe.net/repository/DEFAULT/smu0Mz7-nhTEgxsFghQW5cVb30I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Jun 2025 09:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:2f:e0:46:0b:51:81:81:81:7d:5b:32:3f:1f:7e:96:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b26bb4333efe9e14c4831b05821416e5c55bdf42
Validity
Not Before: Jun 2 09:01:56 2025 GMT
Not After : Jun 3 09:01:56 2025 GMT
Subject: CN=76d5f9e97eaa867631bd2683f5bdc761f54fb4a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6e:23:90:1c:de:06:08:89:cf:5c:1a:44:72:
c2:47:45:2b:f1:40:80:01:bd:cc:06:c2:80:c2:a1:
b0:27:0d:c3:27:5a:6c:12:25:50:d0:cf:4d:2d:e8:
58:5e:1a:53:96:3e:2d:87:b0:ac:39:a8:11:17:9c:
ae:ca:b1:ec:85:96:2c:3c:4e:2f:91:21:d1:32:74:
de:ef:e4:4c:3f:1f:83:cf:1b:2a:9f:89:f7:ec:51:
de:43:07:5d:5a:39:66:58:64:fd:64:9c:cc:a7:8e:
ce:12:3a:6f:c7:77:2a:b9:9d:06:3f:34:4f:4a:b1:
d1:dd:9d:80:15:6b:84:a4:6f:b1:55:a1:0f:03:78:
b2:8c:fe:e2:2d:ef:46:97:7d:f4:5b:54:11:19:ce:
31:ef:fa:b9:e5:53:69:98:4e:ed:00:1b:00:97:51:
ac:16:55:a5:c5:b1:fd:31:af:75:5d:98:63:63:f5:
d1:31:e6:81:37:00:98:7a:c1:19:f3:96:5c:db:53:
9a:78:e5:b4:ea:41:77:e1:6c:c9:c0:18:de:b9:72:
0d:a7:13:9e:6a:06:b3:c0:b3:ea:00:10:b7:01:f0:
81:c0:7b:3c:c1:d8:01:ca:55:3f:17:9f:f1:29:52:
fc:2d:c4:51:65:6a:b5:42:7d:5c:16:b6:2b:4b:6c:
88:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:D5:F9:E9:7E:AA:86:76:31:BD:26:83:F5:BD:C7:61:F5:4F:B4:A0
X509v3 Authority Key Identifier:
keyid:B2:6B:B4:33:3E:FE:9E:14:C4:83:1B:05:82:14:16:E5:C5:5B:DF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/smu0Mz7-nhTEgxsFghQW5cVb30I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:b5:c0:00:67:47:f1:e1:36:99:42:fb:e8:bf:db:92:38:74:
f3:04:22:cf:dd:2c:9a:09:5b:ca:a4:ce:85:55:cb:18:a5:4d:
07:24:3d:fb:0a:c1:ee:26:b7:98:7f:e6:a3:91:7c:bd:0b:38:
72:7f:35:3a:69:05:d3:1c:5c:6d:b4:cc:2f:50:af:b0:f4:e3:
16:a0:4e:2f:9d:4a:53:6f:ca:97:44:2e:d3:b7:90:a2:20:f9:
6d:af:5e:06:7c:e6:2f:69:a4:4c:38:50:8b:6b:38:22:79:4e:
0c:37:11:87:a3:7a:6c:d1:2f:28:c8:69:43:51:30:3e:c0:bf:
dc:2a:8b:0f:23:40:21:1e:a6:23:4b:60:4a:e1:a1:67:89:0a:
b5:66:c3:08:4a:b5:4f:89:3b:0b:28:55:b9:6e:cd:65:cb:ca:
ab:20:06:ad:7a:08:12:42:dd:72:e0:82:5e:e3:da:ac:3c:18:
83:db:1a:fa:19:6d:78:ea:e3:09:74:15:bc:29:3a:c2:c6:e0:
0c:e5:b7:8b:d6:f2:89:71:e6:dd:19:01:da:85:c6:af:f7:a6:
06:49:cc:95:d4:f2:a2:03:eb:c4:b2:98:2d:b3:36:33:01:aa:
d9:85:1a:f7:07:74:95:16:cf:f2:61:f8:69:bf:20:81:c0:1e:
66:15:e9:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZcv4EYLUYGBgX1bMj8ffpZKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyNmJiNDMzM2VmZTllMTRjNDgzMWIwNTgyMTQxNmU1YzU1
YmRmNDIwHhcNMjUwNjAyMDkwMTU2WhcNMjUwNjAzMDkwMTU2WjAzMTEwLwYDVQQD
Eyg3NmQ1ZjllOTdlYWE4Njc2MzFiZDI2ODNmNWJkYzc2MWY1NGZiNGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt24jkBzeBgiJz1waRHLCR0Ur8UCA
Ab3MBsKAwqGwJw3DJ1psEiVQ0M9NLehYXhpTlj4th7CsOagRF5yuyrHshZYsPE4v
kSHRMnTe7+RMPx+Dzxsqn4n37FHeQwddWjlmWGT9ZJzMp47OEjpvx3cquZ0GPzRP
SrHR3Z2AFWuEpG+xVaEPA3iyjP7iLe9Gl330W1QRGc4x7/q55VNpmE7tABsAl1Gs
FlWlxbH9Ma91XZhjY/XRMeaBNwCYesEZ85Zc21OaeOW06kF34WzJwBjeuXINpxOe
agazwLPqABC3AfCBwHs8wdgBylU/F5/xKVL8LcRRZWq1Qn1cFrYrS2yIMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHbV+el+qoZ2Mb0mg/W9x2H1T7SgMB8GA1UdIwQY
MBaAFLJrtDM+/p4UxIMbBYIUFuXFW99CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc211ME16Ny1uaFRFZ3hzRmdoUVc1Y1ZiMzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9hZDEzMDEtMTQ5Yy00YzIxLTk4YjMt
NDQ2YTg5MTNkNGI4LzEvc211ME16Ny1uaFRFZ3hzRmdoUVc1Y1ZiMzBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS9hZDEzMDEtMTQ5Yy00YzIxLTk4YjMtNDQ2YTg5MTNkNGI4
LzEvc211ME16Ny1uaFRFZ3hzRmdoUVc1Y1ZiMzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKLXAAGdH
8eE2mUL76L/bkjh08wQiz90smglbyqTOhVXLGKVNByQ9+wrB7ia3mH/mo5F8vQs4
cn81OmkF0xxcbbTML1CvsPTjFqBOL51KU2/Kl0Qu07eQoiD5ba9eBnzmL2mkTDhQ
i2s4InlODDcRh6N6bNEvKMhpQ1EwPsC/3CqLDyNAIR6mI0tgSuGhZ4kKtWbDCEq1
T4k7CyhVuW7NZcvKqyAGrXoIEkLdcuCCXuParDwYg9sa+hlteOrjCXQVvCk6wsbg
DOW3i9byiXHm3RkB2oXGr/emBknMldTyogPrxLKYLbM2MwGq2YUa9wd0lRbP8mH4
ab8ggcAeZhXpPA==
-----END CERTIFICATE-----
Generated at Mon Jun 2 16:47:42 2025 by rpki-client