Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/64dabc-6564-4ca0-802f-ca9790080716/1/SmO14kps7e29L-j2bXl6s9jqpMk.mft
File: SmO14kps7e29L-j2bXl6s9jqpMk.mft (raw, json)
Hash identifier: vEl3Eqo8fIXOYbn+Z2F1RIQi1p6XJvxqFWVz9+se9yw=
Subject key identifier: 98:E7:33:7E:57:31:2C:9A:D7:CC:9D:DC:6B:35:35:B6:AC:8C:2B:AA
Authority key identifier: 4A:63:B5:E2:4A:6C:ED:ED:BD:2F:E8:F6:6D:79:7A:B3:D8:EA:A4:C9
Certificate issuer: /CN=4a63b5e24a6cededbd2fe8f66d797ab3d8eaa4c9
Certificate serial: 019921B12710B5A1C215647EE586C967C156
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmO14kps7e29L-j2bXl6s9jqpMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/64dabc-6564-4ca0-802f-ca9790080716/1/SmO14kps7e29L-j2bXl6s9jqpMk.mft
Manifest number: 166B
Signing time: Sun 07 Sep 2025 01:01:21 +0000
Manifest this update: Sun 07 Sep 2025 01:01:21 +0000
Manifest next update: Mon 08 Sep 2025 01:01:21 +0000
Files and hashes: 1: SmO14kps7e29L-j2bXl6s9jqpMk.crl (hash: f3p7aGCwOMHWdFC1n6blBBSr7rDzO6alDOyCMRG39Rc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/64dabc-6564-4ca0-802f-ca9790080716/1/SmO14kps7e29L-j2bXl6s9jqpMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/64dabc-6564-4ca0-802f-ca9790080716/1/SmO14kps7e29L-j2bXl6s9jqpMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/SmO14kps7e29L-j2bXl6s9jqpMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:27:10:b5:a1:c2:15:64:7e:e5:86:c9:67:c1:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a63b5e24a6cededbd2fe8f66d797ab3d8eaa4c9
Validity
Not Before: Sep 7 01:01:21 2025 GMT
Not After : Sep 8 01:01:21 2025 GMT
Subject: CN=98e7337e57312c9ad7cc9ddc6b3535b6ac8c2baa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:25:50:26:81:bc:9c:73:36:12:81:83:2b:41:
69:0c:9b:15:a4:e4:60:33:fc:63:fe:7e:e7:4d:90:
14:6f:3a:12:c2:d8:ad:2c:d0:98:5a:d9:bf:75:05:
e8:ea:a4:e2:f7:3c:ac:e6:d2:9b:33:3a:c8:11:fd:
b7:d4:cc:4a:30:53:7d:52:bf:08:04:6a:2c:23:cf:
16:26:a6:de:3a:78:c4:f7:9d:88:70:c7:68:ee:97:
0c:ce:bb:d0:61:78:6e:8d:cb:e0:34:25:db:ee:80:
24:08:21:cc:8f:74:fd:ae:e6:b5:4f:87:c3:3a:e1:
05:3c:d2:bf:68:e8:da:1f:dd:62:6e:d7:11:3d:cb:
fa:be:e2:d9:5a:a9:95:b0:e4:fd:3f:b1:a6:d6:71:
95:4c:19:57:95:e0:6a:5c:be:53:3e:6a:9e:9b:9d:
27:25:eb:95:dc:53:f2:b6:48:e1:60:d9:ea:73:ca:
38:7e:28:44:cf:c3:b9:17:5f:35:28:5d:7e:b7:f8:
05:66:c9:12:09:44:96:a5:e1:cd:8c:7b:92:af:fe:
de:6e:0f:d8:08:9d:0c:a1:2f:c5:0b:00:35:f0:7d:
c8:b2:0d:bb:cb:55:09:54:7f:8b:6c:46:ff:ac:1a:
69:ef:3e:2f:ed:f8:2b:ff:f9:a6:e1:33:d9:71:30:
81:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E7:33:7E:57:31:2C:9A:D7:CC:9D:DC:6B:35:35:B6:AC:8C:2B:AA
X509v3 Authority Key Identifier:
keyid:4A:63:B5:E2:4A:6C:ED:ED:BD:2F:E8:F6:6D:79:7A:B3:D8:EA:A4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmO14kps7e29L-j2bXl6s9jqpMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/64dabc-6564-4ca0-802f-ca9790080716/1/SmO14kps7e29L-j2bXl6s9jqpMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/64dabc-6564-4ca0-802f-ca9790080716/1/SmO14kps7e29L-j2bXl6s9jqpMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:f6:35:b5:94:8c:79:75:98:74:bd:24:14:e1:ef:e9:1c:82:
05:e8:55:d5:f8:05:58:72:10:9c:44:2c:74:5e:d6:5d:8b:1f:
73:df:9f:bd:62:c4:4b:e9:d3:30:ee:3b:04:3e:ea:4b:12:76:
b8:68:84:2c:2a:ec:f3:87:fc:a4:99:4a:10:6c:91:06:30:84:
3a:e2:d4:fa:47:c9:4a:fb:09:6d:e9:bc:77:ee:fb:6d:3c:5f:
ff:5d:54:c2:48:87:cf:d4:fc:e5:86:b6:f1:18:de:a4:d3:bc:
6b:7e:b9:19:a0:a6:d7:38:1c:50:ce:38:09:32:c9:50:17:64:
f7:8c:15:8f:60:3a:b2:b0:21:61:5a:e3:1e:60:13:e0:d1:83:
4e:7b:ae:db:40:a8:cb:d0:bf:2d:9d:b0:46:44:dd:45:cf:97:
aa:03:46:cf:e6:7e:49:08:b3:6e:9e:0e:c3:8f:33:32:a0:f9:
b9:df:52:e8:76:fa:b8:43:1e:7b:e8:65:47:ad:5d:3f:d2:cd:
d2:38:d9:8a:56:80:c4:59:57:ab:f7:05:e9:ef:58:32:90:60:
dc:c1:b4:50:02:9f:58:fb:91:0d:45:b6:07:41:89:94:4b:da:
73:20:7a:27:08:59:1a:7a:c2:55:94:7d:12:7e:ec:3e:15:1e:
c6:30:78:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhsScQtaHCFWR+5YbJZ8FWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNjNiNWUyNGE2Y2VkZWRiZDJmZThmNjZkNzk3YWIzZDhl
YWE0YzkwHhcNMjUwOTA3MDEwMTIxWhcNMjUwOTA4MDEwMTIxWjAzMTEwLwYDVQQD
Eyg5OGU3MzM3ZTU3MzEyYzlhZDdjYzlkZGM2YjM1MzViNmFjOGMyYmFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCVQJoG8nHM2EoGDK0FpDJsVpORg
M/xj/n7nTZAUbzoSwtitLNCYWtm/dQXo6qTi9zys5tKbMzrIEf231MxKMFN9Ur8I
BGosI88WJqbeOnjE952IcMdo7pcMzrvQYXhujcvgNCXb7oAkCCHMj3T9rua1T4fD
OuEFPNK/aOjaH91ibtcRPcv6vuLZWqmVsOT9P7Gm1nGVTBlXleBqXL5TPmqem50n
JeuV3FPytkjhYNnqc8o4fihEz8O5F181KF1+t/gFZskSCUSWpeHNjHuSr/7ebg/Y
CJ0MoS/FCwA18H3Isg27y1UJVH+LbEb/rBpp7z4v7fgr//mm4TPZcTCBwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJjnM35XMSya18yd3Gs1NbasjCuqMB8GA1UdIwQY
MBaAFEpjteJKbO3tvS/o9m15erPY6qTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU21PMTRrcHM3ZTI5TC1qMmJYbDZzOWpxcE1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC82NGRhYmMtNjU2NC00Y2EwLTgwMmYt
Y2E5NzkwMDgwNzE2LzEvU21PMTRrcHM3ZTI5TC1qMmJYbDZzOWpxcE1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC82NGRhYmMtNjU2NC00Y2EwLTgwMmYtY2E5NzkwMDgwNzE2
LzEvU21PMTRrcHM3ZTI5TC1qMmJYbDZzOWpxcE1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEvY1tZSM
eXWYdL0kFOHv6RyCBehV1fgFWHIQnEQsdF7WXYsfc9+fvWLES+nTMO47BD7qSxJ2
uGiELCrs84f8pJlKEGyRBjCEOuLU+kfJSvsJbem8d+77bTxf/11UwkiHz9T85Ya2
8RjepNO8a365GaCm1zgcUM44CTLJUBdk94wVj2A6srAhYVrjHmAT4NGDTnuu20Co
y9C/LZ2wRkTdRc+XqgNGz+Z+SQizbp4Ow48zMqD5ud9S6Hb6uEMee+hlR61dP9LN
0jjZilaAxFlXq/cF6e9YMpBg3MG0UAKfWPuRDUW2B0GJlEvacyB6JwhZGnrCVZR9
En7sPhUexjB4bA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:20 2025 by rpki-client