Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.mft
File: SMOd4l_6fq8CsqbYws9uLOtWK_M.mft (raw, json)
Hash identifier: RwgZ6NoiKnFlaYuTYe8hgjaqaR/GCwA3UdCXK92bZBc=
Subject key identifier: 46:02:82:31:91:B0:68:0B:AF:DA:05:62:4E:DF:66:71:C3:14:28:1D
Authority key identifier: 48:C3:9D:E2:5F:FA:7E:AF:02:B2:A6:D8:C2:CF:6E:2C:EB:56:2B:F3
Certificate issuer: /CN=48c39de25ffa7eaf02b2a6d8c2cf6e2ceb562bf3
Certificate serial: 019922FA63597269EC96B60AED9B8D857F90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SMOd4l_6fq8CsqbYws9uLOtWK_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.mft
Manifest number: 12CE
Signing time: Sun 07 Sep 2025 07:00:58 +0000
Manifest this update: Sun 07 Sep 2025 07:00:58 +0000
Manifest next update: Mon 08 Sep 2025 07:00:58 +0000
Files and hashes: 1: JtwVZJ2q-er-ZyfG4We1Ih9BT0U.roa (hash: xnd0jnisgvFr2C1BnV+wtzkH+5RWNTZh9FBZUZ5Hu3E=)
2: SMOd4l_6fq8CsqbYws9uLOtWK_M.crl (hash: unfgfAjbE5peALg/e8zhdDj6PEu3ZNZIn0YmFdVHEEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/SMOd4l_6fq8CsqbYws9uLOtWK_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:63:59:72:69:ec:96:b6:0a:ed:9b:8d:85:7f:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48c39de25ffa7eaf02b2a6d8c2cf6e2ceb562bf3
Validity
Not Before: Sep 7 07:00:58 2025 GMT
Not After : Sep 8 07:00:58 2025 GMT
Subject: CN=4602823191b0680bafda05624edf6671c314281d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:39:a0:d0:6b:03:69:1c:04:c8:52:a4:0e:dd:
01:aa:14:d9:6d:80:a3:8b:a9:6d:76:08:05:16:b2:
3d:82:24:e7:64:43:38:9d:7e:28:1b:25:3b:3f:cc:
c2:ba:34:91:da:95:a8:c2:6d:70:94:34:18:f8:b3:
d1:7c:07:de:ae:71:d9:6f:fe:03:09:3f:77:e1:65:
0b:f6:14:86:e1:aa:14:97:09:12:b6:ed:fc:73:88:
11:47:a3:20:c7:81:8b:8a:fa:ea:e4:fe:ed:e7:8a:
d3:5c:0b:ed:d4:d6:3d:08:c9:bd:76:a9:c2:cc:11:
af:5e:57:de:26:4a:8b:2c:42:52:26:c8:e9:e5:d3:
6f:e2:ec:9b:d2:a5:9d:99:98:2c:c8:24:3f:76:02:
82:ee:0c:41:be:5f:91:62:e3:99:a6:0d:13:17:dc:
81:ef:f7:c7:d5:4a:49:8b:14:3a:19:a5:89:8c:33:
1a:7f:d9:eb:f1:a5:7a:51:1f:5a:a5:76:9b:84:4d:
f7:c7:e1:9b:d4:2c:3a:de:5c:dd:16:94:f8:c3:6e:
05:7d:9a:97:f5:c6:55:d2:99:a7:a8:c6:a2:e2:5e:
c1:e9:91:7c:8a:a8:cc:0e:0f:a8:9e:59:33:e8:c2:
7c:27:66:76:ff:0c:b2:88:51:3d:2c:73:de:7f:a1:
cc:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:02:82:31:91:B0:68:0B:AF:DA:05:62:4E:DF:66:71:C3:14:28:1D
X509v3 Authority Key Identifier:
keyid:48:C3:9D:E2:5F:FA:7E:AF:02:B2:A6:D8:C2:CF:6E:2C:EB:56:2B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SMOd4l_6fq8CsqbYws9uLOtWK_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:ee:c1:10:89:66:d8:15:78:77:32:1f:19:31:6b:0e:f6:a3:
f0:dd:da:d3:d9:21:db:21:54:9b:7d:2d:79:32:3b:3d:87:c0:
21:f9:fb:c7:67:86:c7:b7:1a:28:f0:a2:67:33:f4:b6:c3:1d:
77:a9:b2:88:1a:a2:c7:a3:6c:a5:e0:85:4d:80:2f:7b:b2:3f:
66:6a:02:76:75:16:f0:8d:75:f7:f3:e7:87:cc:27:76:ed:99:
08:e9:c4:a1:49:18:05:ec:cb:d7:07:54:42:c1:3c:63:cc:6b:
db:a7:01:f8:cf:ab:27:80:9f:bf:37:44:cd:7f:af:b7:d9:ed:
a0:bb:48:1f:b8:99:83:4e:4a:31:bd:54:90:01:a7:ff:40:b2:
57:cc:44:07:30:d6:66:14:95:e2:0c:3d:9f:5e:14:2e:6e:d6:
b6:5c:93:e9:e8:36:fb:fb:c0:a9:95:03:7d:5b:9a:b8:96:ab:
07:bf:9a:22:e1:0a:09:c4:59:7c:a5:26:11:49:3f:b2:32:92:
46:50:ba:4e:8f:40:98:84:80:9e:d8:29:42:a1:42:42:58:00:
90:98:7f:4f:ff:65:dc:3b:e8:8b:84:d4:d6:b7:78:5f:82:d6:
4c:7f:c8:7c:11:d7:3e:96:7a:7d:b9:3b:25:6a:15:5b:c5:05:
35:09:34:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:52:11 2025 by rpki-client