Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.mft
File: smIHwyzpihrekiSGO0Y6gvj4aCs.mft (raw, json)
Hash identifier: wGX8JCma/+T8VN/BcU4zw9fS0KrjkEVtqwSeGySCY7E=
Subject key identifier: FB:FB:F2:4A:61:23:02:48:4B:46:4E:B2:6A:EF:18:66:F1:E7:63:68
Authority key identifier: B2:62:07:C3:2C:E9:8A:1A:DE:92:24:86:3B:46:3A:82:F8:F8:68:2B
Certificate issuer: /CN=b26207c32ce98a1ade9224863b463a82f8f8682b
Certificate serial: 019932A3A349F52CC7E62DA4B6EE0EF86FBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/smIHwyzpihrekiSGO0Y6gvj4aCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.mft
Manifest number: 010C
Signing time: Wed 10 Sep 2025 08:00:08 +0000
Manifest this update: Wed 10 Sep 2025 08:00:08 +0000
Manifest next update: Thu 11 Sep 2025 08:00:08 +0000
Files and hashes: 1: smIHwyzpihrekiSGO0Y6gvj4aCs.crl (hash: Zv11Rh0iNRztIWEJWDfBnxekYU5v/TBJp2aUc5gCGGk=)
2: vfgaajpx_IwIslySYTAXUF8b2bQ.roa (hash: 5BG+nyK3l0jI+maIom4ahnVVqUeZ02d+C1Q9Lbzzldo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/smIHwyzpihrekiSGO0Y6gvj4aCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:a3:a3:49:f5:2c:c7:e6:2d:a4:b6:ee:0e:f8:6f:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b26207c32ce98a1ade9224863b463a82f8f8682b
Validity
Not Before: Sep 10 08:00:08 2025 GMT
Not After : Sep 11 08:00:08 2025 GMT
Subject: CN=fbfbf24a612302484b464eb26aef1866f1e76368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d2:e4:9b:10:ab:46:6d:ab:05:48:91:ce:eb:
fc:bb:4c:f9:a2:e4:2c:a6:77:a7:d8:17:ab:26:4d:
7f:4b:71:83:d2:e7:3e:04:fe:c4:3d:40:77:fb:db:
9f:b4:d7:b5:5d:d6:39:83:6e:94:38:0d:60:19:38:
ac:ad:c3:55:57:e1:b6:1d:28:64:d4:8b:fc:1c:53:
f2:d0:7c:ae:c0:02:d5:96:14:24:50:0b:bd:93:9a:
ee:2a:45:36:ce:9b:83:04:a9:d6:85:4b:ae:7a:96:
18:23:cd:58:8c:6a:8f:6b:02:23:1b:35:6a:98:da:
74:44:e4:87:c0:50:c6:77:df:4d:b3:10:31:e3:a4:
34:ae:68:c6:bf:c7:20:a1:62:91:59:f5:97:80:ba:
b1:1d:93:90:bd:a7:a1:d4:5b:09:98:bb:12:c0:5c:
7a:54:f5:9b:ad:0f:4c:71:fd:8c:d8:26:80:28:54:
13:5e:d6:4c:bb:ad:30:d0:70:f7:6f:00:a5:15:3e:
3f:0e:55:ee:ee:25:d4:b3:39:71:5a:26:81:17:43:
42:91:5d:de:b6:c6:1a:e0:0a:cc:91:85:d3:6b:08:
9c:5e:0a:0f:89:20:0e:f5:a4:41:60:3d:53:90:e4:
89:e7:9d:1c:82:b1:99:37:3c:b1:e8:71:11:23:69:
6e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:FB:F2:4A:61:23:02:48:4B:46:4E:B2:6A:EF:18:66:F1:E7:63:68
X509v3 Authority Key Identifier:
keyid:B2:62:07:C3:2C:E9:8A:1A:DE:92:24:86:3B:46:3A:82:F8:F8:68:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/smIHwyzpihrekiSGO0Y6gvj4aCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:c3:14:04:f2:d0:d5:f4:74:72:55:f3:2a:dc:36:c4:66:af:
70:75:be:84:6f:35:cd:2a:df:24:35:d7:de:6f:c3:35:2b:29:
06:00:2d:ad:e7:e4:64:da:db:17:ea:f4:af:76:93:76:9d:6e:
e3:48:b8:26:f4:80:26:6d:8b:b9:c1:a5:87:95:8f:0d:0e:a8:
93:51:ee:00:7d:cb:18:09:f3:9f:a4:5a:d7:9f:25:ea:80:5c:
bf:aa:3a:26:c0:41:ba:c7:34:23:57:89:a0:1c:f7:fa:d2:51:
c4:90:da:f9:f6:ad:92:55:83:f8:16:be:55:3f:51:8b:90:f1:
ad:ba:d4:95:c5:4e:a3:18:3b:0d:fb:ed:11:af:9c:7f:12:9a:
22:06:d6:81:60:e3:bc:86:92:58:f4:c7:14:f1:21:44:c5:b2:
db:cd:73:29:58:db:6b:e2:f7:42:ed:0a:0e:e7:6b:80:5c:19:
15:2c:4e:a9:84:52:06:49:5a:85:e8:ba:06:f1:d9:45:a2:26:
f8:a3:77:29:28:15:d8:69:da:59:ca:ed:e0:a5:85:d4:c5:21:
b4:ea:3c:ed:fd:c4:1b:c9:6f:f9:fd:67:b3:15:48:df:f7:ba:
45:ae:df:d5:0a:5a:b9:e8:d4:47:47:80:2c:87:80:f4:38:33:
67:9d:62:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 12:00:07 2025 by rpki-client