Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.mft
File: SmPcZ1Ooy9dLdEUsFTbzfZxNxww.mft (raw, json)
Hash identifier: UYnr7aEtso2uMObSBtb9bgh1JfHw/a5JrtZoxp1yUaQ=
Subject key identifier: B1:47:00:09:B1:6A:CE:FF:5B:E8:9E:5D:1C:5A:B5:E0:4B:06:D6:2D
Authority key identifier: 4A:63:DC:67:53:A8:CB:D7:4B:74:45:2C:15:36:F3:7D:9C:4D:C7:0C
Certificate issuer: /CN=4a63dc6753a8cbd74b74452c1536f37d9c4dc70c
Certificate serial: 0199221E36B6BAEBD407B30B4F8C27A1513E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.mft
Manifest number: 0B34
Signing time: Sun 07 Sep 2025 03:00:29 +0000
Manifest this update: Sun 07 Sep 2025 03:00:29 +0000
Manifest next update: Mon 08 Sep 2025 03:00:29 +0000
Files and hashes: 1: SmPcZ1Ooy9dLdEUsFTbzfZxNxww.crl (hash: vwG6xjPSFiHm2QB6uyNvEu6jRS2mKZc9msJOyViA5Hg=)
2: XWgrA6JE6hMs-fYR5JSr732MBIw.roa (hash: +T0dpzBRYum3dH9uf73tvrJYycbYVgdyC2zBV2vtA1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.mft
rsync://rpki.ripe.net/repository/DEFAULT/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:36:b6:ba:eb:d4:07:b3:0b:4f:8c:27:a1:51:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a63dc6753a8cbd74b74452c1536f37d9c4dc70c
Validity
Not Before: Sep 7 03:00:29 2025 GMT
Not After : Sep 8 03:00:29 2025 GMT
Subject: CN=b1470009b16aceff5be89e5d1c5ab5e04b06d62d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:10:37:19:ea:18:cc:0c:16:d3:5d:39:7f:f9:
6b:45:a5:50:39:33:bc:70:8f:db:6e:46:14:8a:84:
87:f9:70:7b:2a:57:e1:b4:66:a6:ba:04:bd:cd:5d:
a6:bd:19:fc:77:c4:02:7a:b1:bd:2f:e5:d8:4b:f1:
6d:7d:8c:47:58:d0:77:d4:cc:72:a1:14:3f:ce:d2:
54:37:46:e8:c5:f5:24:47:75:70:d4:b6:c4:25:ae:
47:b7:de:f0:5e:da:d7:a5:a7:05:8b:89:eb:4a:74:
1b:4f:40:1b:c9:02:af:11:c7:27:0a:ac:1e:e6:2e:
c7:00:cd:cd:0c:b9:cd:36:8b:ba:3f:a8:57:4f:df:
39:a1:43:a0:aa:d7:c3:2d:6c:fa:cd:3d:99:5a:a5:
60:7d:e0:fa:02:33:91:e9:89:36:c2:3e:09:ba:06:
8c:98:99:e2:43:dc:8b:0e:03:d1:78:20:27:b0:f1:
03:0d:07:9b:58:6c:dc:c3:8b:d8:76:30:63:06:8d:
8b:51:24:44:69:62:ab:0e:5e:b5:b2:db:be:7f:6a:
d3:ec:b2:1d:36:ec:8d:a1:2c:75:2e:10:c5:6e:cd:
60:6e:f6:d1:72:e2:72:a2:85:3a:0c:ff:69:ec:b0:
dd:21:6a:31:e0:14:2b:e2:5e:ed:95:9f:f9:55:c4:
cf:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:47:00:09:B1:6A:CE:FF:5B:E8:9E:5D:1C:5A:B5:E0:4B:06:D6:2D
X509v3 Authority Key Identifier:
keyid:4A:63:DC:67:53:A8:CB:D7:4B:74:45:2C:15:36:F3:7D:9C:4D:C7:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:80:fc:cd:0e:63:b4:ed:4d:ca:db:a8:2e:a0:ba:49:db:31:
7a:22:11:34:e9:e6:27:72:ed:ad:d3:4c:9f:78:24:92:b2:32:
f9:ed:12:7f:0b:ff:ba:c6:a4:77:70:a4:80:0d:57:bb:86:79:
a3:05:23:1f:c4:65:44:56:25:e3:97:c7:98:cd:d9:53:3e:91:
9b:78:2c:24:e7:b7:08:72:31:2f:ae:70:6b:59:3a:1f:d0:0d:
67:af:d0:85:06:db:59:90:19:4f:72:fe:02:7e:cc:9c:a0:ea:
c6:18:7b:d7:6b:f4:70:c0:4b:9c:64:f8:3d:49:58:ab:e2:35:
02:65:34:20:94:3a:05:b5:c8:5d:5c:ed:a5:48:45:b2:44:b0:
e3:f0:df:a6:a3:27:c2:6a:a7:55:d4:62:d6:b5:e2:1c:d9:ed:
f7:80:8c:de:cc:5a:24:0c:9f:e8:5f:8d:d2:6f:aa:5a:cc:84:
db:9b:8c:b7:bd:db:46:61:8e:13:68:9a:7b:81:46:02:d4:50:
26:51:8b:c9:5b:47:f2:c9:10:45:be:81:c5:fb:05:e0:ea:cd:
10:84:ad:78:d2:c5:25:2d:4f:9e:09:be:93:b4:99:3c:fd:64:
53:c4:df:e5:01:68:18:cc:bb:df:45:b8:9e:a7:08:6d:54:20:
50:c5:d9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:09:20 2025 by rpki-client