Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.mft
File: sMXmrlmHEAZksjA0zvxy1H-PS5s.mft (raw, json)
Hash identifier: 1L8NR/yjZz3TDqjcwDYjLfelD8XfqcBqxwISMC3A+P4=
Subject key identifier: D3:18:06:BC:1A:49:16:C9:0F:4D:70:8F:7F:75:10:F9:F1:75:D7:7D
Authority key identifier: B0:C5:E6:AE:59:87:10:06:64:B2:30:34:CE:FC:72:D4:7F:8F:4B:9B
Certificate issuer: /CN=b0c5e6ae5987100664b23034cefc72d47f8f4b9b
Certificate serial: 019921B23B80F848C1866FE804CBFE929536
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMXmrlmHEAZksjA0zvxy1H-PS5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 01:02:32 +0000
Manifest this update: Sun 07 Sep 2025 01:02:32 +0000
Manifest next update: Mon 08 Sep 2025 01:02:32 +0000
Files and hashes: 1: Xpu5z6C93G9BRUn-gmewTXpV4p4.roa (hash: HRJgPQbn7ofu1m7IlOj+BpfT6NzW9G/pwBr/coPVab0=)
2: sMXmrlmHEAZksjA0zvxy1H-PS5s.crl (hash: P413VAjdWelpzoV0bTsQbFqTUUaZe5rsLMzhKrShM9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/sMXmrlmHEAZksjA0zvxy1H-PS5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:3b:80:f8:48:c1:86:6f:e8:04:cb:fe:92:95:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c5e6ae5987100664b23034cefc72d47f8f4b9b
Validity
Not Before: Sep 7 01:02:32 2025 GMT
Not After : Sep 8 01:02:32 2025 GMT
Subject: CN=d31806bc1a4916c90f4d708f7f7510f9f175d77d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bd:60:be:78:6e:71:f0:a7:9e:41:a1:1f:5a:
29:35:88:1f:a9:b2:6c:f2:5c:b5:f3:2b:4e:a3:5f:
a7:59:55:16:fe:43:b7:c2:ff:65:e6:f5:d1:7f:c0:
54:58:72:bb:25:42:db:ef:49:6f:a3:a1:ee:45:43:
6c:ab:0a:fd:9b:bb:3c:a5:71:ce:b8:df:50:e8:16:
0a:71:4b:8e:a1:55:b0:b6:0b:b5:aa:30:2e:53:d2:
96:3c:da:ea:e0:9f:c5:fe:67:f1:06:b2:3e:3c:81:
19:cf:61:f7:cd:0f:3d:a7:41:89:18:8f:55:1e:b4:
83:15:cd:af:33:a7:f9:e3:1c:28:d3:00:bd:3f:4b:
bd:33:46:60:83:58:21:2f:86:f3:c5:6c:66:c3:eb:
16:14:01:c9:49:ad:e8:cc:32:6f:a5:7b:b3:48:15:
f5:bf:45:c2:6b:c4:3e:1c:77:b8:ee:60:04:32:68:
a6:ae:ce:64:7c:e3:12:87:4f:6b:f7:0b:92:d7:14:
8a:2e:e8:31:2e:bb:3e:e1:67:31:61:96:7e:d5:79:
d0:cb:ae:4b:21:3e:3f:e0:9e:e5:0b:31:06:79:02:
97:b6:02:02:37:73:f7:e9:85:8c:7d:6d:d6:7e:63:
0e:5c:3a:d6:36:06:f4:2c:4f:f2:4b:8e:fe:b5:a4:
c5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:18:06:BC:1A:49:16:C9:0F:4D:70:8F:7F:75:10:F9:F1:75:D7:7D
X509v3 Authority Key Identifier:
keyid:B0:C5:E6:AE:59:87:10:06:64:B2:30:34:CE:FC:72:D4:7F:8F:4B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMXmrlmHEAZksjA0zvxy1H-PS5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:63:6e:70:7f:10:1e:9d:b9:f3:cf:40:75:ef:78:f4:0d:1a:
c0:53:c8:57:45:ab:21:6b:ac:03:56:c1:c6:d9:84:be:9f:84:
a3:4c:03:cc:30:f7:2c:f9:aa:0d:db:d4:44:87:fb:3a:84:f3:
ea:b9:3b:30:42:d5:57:0b:c1:4c:21:ee:c2:4d:ec:e2:9f:b7:
6e:f5:5b:af:e4:f4:55:a2:08:ea:1f:8e:48:3c:31:cd:da:5e:
6c:2b:31:c2:aa:6e:9e:f4:b1:fd:78:01:6e:dc:fe:3c:ad:94:
9a:12:18:12:eb:a6:4a:b8:4b:cb:7e:3d:1c:3c:5e:f2:12:9a:
64:3e:c5:8c:01:38:51:56:e6:98:58:a1:42:ee:32:cd:5f:45:
b6:14:e2:03:15:15:6c:9a:4a:85:9f:21:a8:ff:4a:36:1d:25:
ff:b3:93:1b:03:6f:7f:59:c4:f3:05:83:bb:95:66:50:4a:03:
20:32:f6:d9:c4:70:db:3e:d1:92:72:f1:10:29:e5:89:7b:2d:
10:cf:45:67:32:52:01:1f:5d:0e:99:43:8e:91:b2:65:ed:e8:
9f:ba:ab:c5:a2:1a:27:35:d7:1a:f4:3e:9c:21:52:81:fd:41:
74:9c:f6:51:28:27:9c:dc:89:f2:e2:59:25:8a:53:db:01:9c:
c2:20:8f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:07:30 2025 by rpki-client