Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft
File: SM83s2Rv2pPL3QuKrM__MTpvcY8.mft (raw, json)
Hash identifier: CzhPDiSDPnyH+123r42hiihOYpoPAmBvgrQ9Az+627Q=
Subject key identifier: D6:BC:DC:91:A1:F7:42:D5:C7:47:0C:B1:B8:EA:88:29:B7:7E:FC:8F
Authority key identifier: 48:CF:37:B3:64:6F:DA:93:CB:DD:0B:8A:AC:CF:FF:31:3A:6F:71:8F
Certificate issuer: /CN=48cf37b3646fda93cbdd0b8aaccfff313a6f718f
Certificate serial: 019A73017A17672D17C8DB7526CEFDB0753F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SM83s2Rv2pPL3QuKrM__MTpvcY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft
Manifest number: 16B8
Signing time: Tue 11 Nov 2025 13:01:07 +0000
Manifest this update: Tue 11 Nov 2025 13:01:07 +0000
Manifest next update: Wed 12 Nov 2025 13:01:07 +0000
Files and hashes: 1: Os6xDD1H4LsrEU2Pwmq0YT-o8IM.roa (hash: 9WTAK5WFdauUxfw4Aw74xq8JjOOgRjy/Qe/px+Cijao=)
2: SM83s2Rv2pPL3QuKrM__MTpvcY8.crl (hash: mGI8CeBEpdVHxfG9Klhpxb36uIRHQBrkkodoxeTgBYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SM83s2Rv2pPL3QuKrM__MTpvcY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:7a:17:67:2d:17:c8:db:75:26:ce:fd:b0:75:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48cf37b3646fda93cbdd0b8aaccfff313a6f718f
Validity
Not Before: Nov 11 13:01:07 2025 GMT
Not After : Nov 12 13:01:07 2025 GMT
Subject: CN=d6bcdc91a1f742d5c7470cb1b8ea8829b77efc8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:42:58:40:d6:61:95:13:cd:ba:a6:a7:df:fb:
84:1f:de:0a:25:33:07:65:48:63:9e:bc:c5:cb:84:
95:15:ba:c3:ad:fe:bd:72:ed:16:85:79:97:ca:61:
9a:a2:09:75:e7:e9:78:37:b3:42:68:24:cc:7f:07:
41:d6:99:51:a2:67:68:12:c9:73:9d:8e:97:57:60:
fc:c0:08:6f:14:a6:3d:2d:40:48:f0:97:c0:9a:af:
e1:bd:00:c2:e7:15:5d:86:4d:d5:f8:54:d4:fc:f9:
31:5c:e4:f4:0b:94:62:56:de:68:c2:fc:40:39:fa:
ce:98:19:f3:89:16:c8:74:e2:a8:56:e0:c8:6d:da:
82:30:4e:e8:bd:00:8b:e7:c1:82:fd:87:1a:be:3a:
ea:91:10:9e:ec:83:03:4a:52:f7:91:bb:bd:fb:f4:
ec:88:aa:ab:0c:f6:4b:e7:79:ec:ad:cc:4e:46:8c:
62:0b:c3:07:4f:0a:17:f4:f7:0f:ed:ab:47:0b:1c:
a4:16:06:9c:22:40:01:44:a5:87:21:b7:3f:f5:f7:
bd:f3:32:9a:a1:9c:a7:03:76:8c:0f:3b:9c:da:c3:
7b:c8:c0:24:98:0c:7a:12:a5:4d:8b:42:17:43:79:
76:80:75:93:5c:5e:8f:5d:80:24:65:71:61:a5:a9:
5d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:BC:DC:91:A1:F7:42:D5:C7:47:0C:B1:B8:EA:88:29:B7:7E:FC:8F
X509v3 Authority Key Identifier:
keyid:48:CF:37:B3:64:6F:DA:93:CB:DD:0B:8A:AC:CF:FF:31:3A:6F:71:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SM83s2Rv2pPL3QuKrM__MTpvcY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:b9:8a:71:b4:31:b2:27:79:d1:b3:80:32:cc:a4:33:87:aa:
25:16:aa:8e:83:cf:6a:83:e5:03:ec:13:ef:22:d5:16:a2:3a:
a2:0d:6b:d8:c9:be:83:1b:20:9a:d9:d4:90:f0:00:17:69:7a:
ff:c9:d9:65:96:48:13:e1:bb:24:96:2d:0a:87:30:2d:eb:61:
ab:ff:ea:ce:8a:c7:00:4c:f0:fd:8b:51:85:a0:ab:55:8b:eb:
fd:33:95:cc:71:c0:f8:9b:a6:65:48:eb:0e:f4:8a:8a:d6:bd:
3d:67:f6:d3:6f:8a:3f:29:44:17:8e:83:cd:92:e1:76:df:9e:
18:0e:22:80:6f:9c:2f:13:64:67:20:56:d2:fc:35:82:73:04:
75:c9:29:29:5e:5b:76:b0:23:ea:f8:b2:4b:da:46:f9:2f:32:
6e:10:71:6c:f7:fa:32:29:35:4d:b2:16:28:23:b7:40:de:82:
f6:8f:bc:48:0f:f7:e4:5e:74:5d:9d:b8:0c:a7:ad:97:33:8a:
69:45:e4:d4:4c:5a:93:f1:16:35:1a:3b:80:8d:28:07:0e:fb:
dc:f1:25:57:81:95:ca:8b:df:48:74:3c:d8:2b:4e:77:80:9e:
81:fd:23:fc:d7:c4:c9:23:27:39:34:57:9e:72:dc:9e:f1:d4:
71:ef:48:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:50:54 2025 by rpki-client