Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.mft
File: smIHwyzpihrekiSGO0Y6gvj4aCs.mft (raw, json)
Hash identifier: pnMziKj/+OEPhvMLTiwrTz4PlOE8aYtm5V6T08hPTp0=
Subject key identifier: 5A:11:99:CB:88:4B:6E:85:79:49:77:38:1B:A6:FD:78:C3:9A:3C:B8
Authority key identifier: B2:62:07:C3:2C:E9:8A:1A:DE:92:24:86:3B:46:3A:82:F8:F8:68:2B
Certificate issuer: /CN=b26207c32ce98a1ade9224863b463a82f8f8682b
Certificate serial: 019A240A2482DE5F0D47316E675265510769
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/smIHwyzpihrekiSGO0Y6gvj4aCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.mft
Manifest number: 0189
Signing time: Mon 27 Oct 2025 05:00:35 +0000
Manifest this update: Mon 27 Oct 2025 05:00:35 +0000
Manifest next update: Tue 28 Oct 2025 05:00:35 +0000
Files and hashes: 1: smIHwyzpihrekiSGO0Y6gvj4aCs.crl (hash: QpggEoov/xV7lA2Mi1LZ/1Bky/1925zZ0yBIXt8Iadc=)
2: vfgaajpx_IwIslySYTAXUF8b2bQ.roa (hash: 5BG+nyK3l0jI+maIom4ahnVVqUeZ02d+C1Q9Lbzzldo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/smIHwyzpihrekiSGO0Y6gvj4aCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:0a:24:82:de:5f:0d:47:31:6e:67:52:65:51:07:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b26207c32ce98a1ade9224863b463a82f8f8682b
Validity
Not Before: Oct 27 05:00:35 2025 GMT
Not After : Oct 28 05:00:35 2025 GMT
Subject: CN=5a1199cb884b6e85794977381ba6fd78c39a3cb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:95:79:60:5f:9b:52:c5:e1:48:0e:d2:bf:db:
c0:8d:ee:13:53:7f:79:ff:0a:15:a6:79:05:4c:7d:
b4:40:a8:cf:48:14:20:cb:43:3d:af:6c:b2:93:39:
fd:cf:45:3f:f0:62:6e:0b:9f:12:f5:f0:b9:59:a6:
43:38:8f:6a:09:f1:d5:50:d7:26:f2:5e:81:fb:d9:
8c:a7:b1:1d:8e:39:52:71:e4:6c:f4:72:3f:a9:f2:
23:6f:ad:0f:ad:5e:7b:26:fb:a3:1e:51:a1:1c:73:
70:69:02:c7:9f:01:aa:9d:32:9c:a9:95:ec:64:b4:
f0:b4:52:36:0e:1e:e1:6e:8f:1c:f9:24:b2:f3:be:
b0:92:9d:1f:f8:bf:50:a6:c5:81:ee:5b:cd:72:99:
5c:43:1c:16:ba:9c:62:17:2f:19:ed:1c:0b:5d:e6:
ca:3d:eb:06:bb:6b:8c:73:f0:1d:31:12:50:ce:e6:
e1:34:79:10:dd:30:37:c5:7c:65:fb:70:fd:9a:a6:
c6:61:4e:2f:91:d1:f4:09:63:ae:9e:a4:cd:81:d7:
dc:05:d8:cb:0d:84:23:96:ec:23:c2:8b:ca:53:55:
d9:60:54:fd:98:0f:4d:4c:e3:bc:23:b3:29:30:e9:
7d:5b:54:fe:4f:59:26:44:21:24:1e:fb:03:03:4f:
19:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:11:99:CB:88:4B:6E:85:79:49:77:38:1B:A6:FD:78:C3:9A:3C:B8
X509v3 Authority Key Identifier:
keyid:B2:62:07:C3:2C:E9:8A:1A:DE:92:24:86:3B:46:3A:82:F8:F8:68:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/smIHwyzpihrekiSGO0Y6gvj4aCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/90199b-fb6d-48f7-b550-b7738a0befaf/1/smIHwyzpihrekiSGO0Y6gvj4aCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:30:a8:61:57:76:d8:0d:72:43:a0:f5:43:3f:a4:51:ab:bc:
00:30:1f:d3:df:96:28:98:f8:3d:91:60:93:58:eb:bc:ee:77:
ab:e4:67:ea:f7:f0:94:85:a1:40:3b:2a:63:c1:63:3a:d4:15:
18:6d:ac:b3:40:7b:8e:06:17:f6:1e:ed:2c:08:59:48:d3:88:
7e:2b:b5:75:30:b2:c1:49:11:a3:8f:0a:5f:38:82:cc:20:09:
19:bf:0b:7b:62:ca:68:5a:26:5d:e5:a2:d0:c6:20:1e:f6:02:
ee:9a:82:98:84:df:e1:b3:0c:e6:4e:87:c8:5d:ff:3e:67:dc:
34:04:e2:1a:1f:66:e6:d3:3a:29:c7:9f:8b:5b:09:6a:aa:a8:
87:c0:fa:1a:7c:95:57:69:16:5b:cd:5a:73:41:f0:ce:eb:0b:
80:1f:df:35:7e:1e:06:78:53:3b:a1:96:79:ad:ba:6d:90:2e:
fa:40:bd:85:ae:de:97:cf:b7:1a:41:02:fc:58:77:48:c1:f5:
b7:e0:4b:4a:f3:4a:08:8a:91:00:c3:50:89:07:c6:75:12:8f:
f3:35:9f:19:f1:e5:18:b6:f1:97:97:aa:4b:77:f5:98:08:e6:
52:9a:04:e0:7d:ee:7b:66:83:4a:47:3b:06:a5:b6:47:df:f5:
5e:45:9e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:09:18 2025 by rpki-client