Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.mft
File: sMXmrlmHEAZksjA0zvxy1H-PS5s.mft (raw, json)
Hash identifier: 5cvmsX0VuKteBj0B2Eud8vsfaSPK1BEizUuSSx7rTO0=
Subject key identifier: 28:D0:A4:C4:2E:C5:DF:70:6B:F9:B4:25:31:0F:08:53:8E:60:9F:88
Authority key identifier: B0:C5:E6:AE:59:87:10:06:64:B2:30:34:CE:FC:72:D4:7F:8F:4B:9B
Certificate issuer: /CN=b0c5e6ae5987100664b23034cefc72d47f8f4b9b
Certificate serial: 019A73A69D40848D5AFCDBE8EA9A70B6F43D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMXmrlmHEAZksjA0zvxy1H-PS5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 16:01:30 +0000
Manifest this update: Tue 11 Nov 2025 16:01:30 +0000
Manifest next update: Wed 12 Nov 2025 16:01:30 +0000
Files and hashes: 1: Xpu5z6C93G9BRUn-gmewTXpV4p4.roa (hash: HRJgPQbn7ofu1m7IlOj+BpfT6NzW9G/pwBr/coPVab0=)
2: sMXmrlmHEAZksjA0zvxy1H-PS5s.crl (hash: I6xzlIVL92x7/5oH2qgx1xmOilLtFq2USloNVu+WY3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/sMXmrlmHEAZksjA0zvxy1H-PS5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:a6:9d:40:84:8d:5a:fc:db:e8:ea:9a:70:b6:f4:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c5e6ae5987100664b23034cefc72d47f8f4b9b
Validity
Not Before: Nov 11 16:01:30 2025 GMT
Not After : Nov 12 16:01:30 2025 GMT
Subject: CN=28d0a4c42ec5df706bf9b425310f08538e609f88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:3f:8c:ec:9b:bc:1c:8d:5b:43:f4:1e:7c:b3:
a4:23:c7:93:0c:a7:8c:32:7b:e7:ac:cc:d1:88:17:
8f:88:07:0a:74:80:c1:19:3f:39:af:c6:9c:cd:e3:
fe:7e:dc:c8:42:30:b8:f4:4e:ab:4b:ec:75:39:5a:
fd:97:3b:17:32:f0:6e:60:10:44:7e:12:96:b1:ed:
60:96:f0:fc:13:c6:3a:d8:da:f7:a0:ee:61:26:28:
7c:a9:bb:71:2a:32:dd:46:2b:2f:ab:48:4f:af:f7:
33:35:ec:a2:22:24:23:c4:3c:cd:69:a0:92:1a:d9:
ea:a5:b6:dd:94:df:15:26:f3:e7:4c:b6:ef:5a:a6:
51:f4:e4:9f:03:3d:69:ac:86:95:fb:33:c8:8e:4c:
63:80:74:a1:cd:e4:bf:de:83:08:9e:9b:c5:2c:3d:
be:08:d8:3f:5c:74:0f:93:52:05:9b:a1:c5:30:2c:
95:34:54:45:1f:6c:d3:53:11:03:e7:dd:d2:0a:de:
c1:a7:b8:02:6c:8d:3f:ce:50:c2:a6:a6:6a:4b:e5:
84:26:65:bf:97:ba:d4:c2:3c:a2:95:48:81:75:a9:
e5:36:21:84:d1:14:4d:22:a2:1e:d9:cf:f6:77:c6:
24:86:ad:0d:54:2e:09:e6:bb:5c:29:a1:c0:f9:49:
fe:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:D0:A4:C4:2E:C5:DF:70:6B:F9:B4:25:31:0F:08:53:8E:60:9F:88
X509v3 Authority Key Identifier:
keyid:B0:C5:E6:AE:59:87:10:06:64:B2:30:34:CE:FC:72:D4:7F:8F:4B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMXmrlmHEAZksjA0zvxy1H-PS5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:3a:d7:93:a3:88:86:fd:c1:1a:23:cb:4f:9d:4b:3e:93:dc:
74:ab:17:2e:ae:44:51:fd:a5:58:c6:31:37:d8:21:16:9a:9e:
ad:7d:9c:ab:e5:d5:c4:a1:16:0d:60:16:6d:1b:fa:a4:fe:79:
8d:3f:a3:64:cf:16:d5:e7:f1:4a:61:a6:5f:23:ba:8a:7a:22:
3c:54:a6:ec:4e:fd:c4:b5:49:37:33:c8:35:f4:67:cd:62:c4:
19:42:f8:a5:36:80:91:4f:1b:8c:a2:35:a6:01:1c:6f:e1:35:
2d:c3:82:f0:da:d6:23:3b:71:c9:22:36:02:ea:93:ac:5d:e9:
76:33:d5:b2:7e:4c:87:39:5b:16:41:68:80:b1:92:3c:d2:5d:
47:25:82:dc:98:19:89:3e:c1:95:08:c2:5b:39:c6:cb:cf:05:
bb:90:bc:70:39:5a:94:bf:6e:57:04:a6:85:97:b1:07:aa:67:
f0:81:c9:34:e0:11:6e:36:37:af:5a:44:3d:53:2a:36:29:09:
10:b6:1e:1b:e0:0b:93:2d:df:c3:51:a4:33:d1:bd:75:64:e5:
ba:7b:be:2a:54:f7:36:f2:db:0a:ae:f0:0a:f8:30:17:bd:05:
ff:22:74:7b:ba:21:f7:f6:2c:93:d7:2b:7a:dd:b1:df:b5:45:
24:59:68:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:39:11 2025 by rpki-client