Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.mft
File: SMOd4l_6fq8CsqbYws9uLOtWK_M.mft (raw, json)
Hash identifier: XIUzgE1LOm8tbd5n5mvwi0cYAn57o7mJLk/2T5NZkBc=
Subject key identifier: 97:8C:AB:48:4C:71:33:F3:CB:BE:B0:FE:64:EF:40:45:8D:6B:CF:5A
Authority key identifier: 48:C3:9D:E2:5F:FA:7E:AF:02:B2:A6:D8:C2:CF:6E:2C:EB:56:2B:F3
Certificate issuer: /CN=48c39de25ffa7eaf02b2a6d8c2cf6e2ceb562bf3
Certificate serial: 019A71137851411E3BE1530E66A39F73365F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SMOd4l_6fq8CsqbYws9uLOtWK_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.mft
Manifest number: 137B
Signing time: Tue 11 Nov 2025 04:01:32 +0000
Manifest this update: Tue 11 Nov 2025 04:01:32 +0000
Manifest next update: Wed 12 Nov 2025 04:01:32 +0000
Files and hashes: 1: JtwVZJ2q-er-ZyfG4We1Ih9BT0U.roa (hash: xnd0jnisgvFr2C1BnV+wtzkH+5RWNTZh9FBZUZ5Hu3E=)
2: SMOd4l_6fq8CsqbYws9uLOtWK_M.crl (hash: HehN/T7EqeOMHq2MJ/vLybput7gfwhM02ziYQc9U7KI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/SMOd4l_6fq8CsqbYws9uLOtWK_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:78:51:41:1e:3b:e1:53:0e:66:a3:9f:73:36:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48c39de25ffa7eaf02b2a6d8c2cf6e2ceb562bf3
Validity
Not Before: Nov 11 04:01:32 2025 GMT
Not After : Nov 12 04:01:32 2025 GMT
Subject: CN=978cab484c7133f3cbbeb0fe64ef40458d6bcf5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c1:d3:7b:cc:9e:60:37:c7:5c:19:67:93:c0:
4b:c1:8f:8a:ac:58:d4:b0:ac:a1:06:02:17:e4:cc:
7b:05:1b:77:18:54:f8:a8:d0:aa:ef:a6:5c:15:77:
59:0e:22:a8:4f:28:79:e7:eb:4f:e9:81:26:08:94:
11:01:aa:52:d6:2d:92:42:c2:88:cc:0c:bb:d2:9d:
e7:91:34:01:ac:72:4d:39:92:9b:e1:3c:eb:ce:6e:
f1:c6:67:1a:22:5c:ad:69:53:21:9f:76:99:f3:dd:
46:bf:f9:24:0a:72:34:64:ba:cc:3e:b8:12:e1:fc:
8b:94:d0:63:ef:b6:8e:ac:24:ad:8d:a4:79:ac:ec:
02:7b:95:46:2e:6a:ef:01:9e:c6:5f:40:81:91:77:
d6:5b:0d:1f:a6:39:e9:95:c0:25:d9:d4:a7:ea:37:
80:5b:50:f3:3b:05:ea:e4:6d:32:4e:8b:0f:0a:92:
a9:3b:02:11:89:69:75:37:db:80:7e:b8:87:df:00:
0d:f5:1a:7c:dc:25:98:4f:a3:78:9d:81:e3:3f:b0:
c3:c1:8c:26:bb:c4:1e:ac:06:ad:1a:61:dd:44:a2:
72:7f:69:e6:eb:2a:ff:e1:df:6e:7c:61:5a:dc:32:
7b:8b:db:11:06:2b:b1:a7:b1:0c:14:a9:b7:15:d5:
66:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:8C:AB:48:4C:71:33:F3:CB:BE:B0:FE:64:EF:40:45:8D:6B:CF:5A
X509v3 Authority Key Identifier:
keyid:48:C3:9D:E2:5F:FA:7E:AF:02:B2:A6:D8:C2:CF:6E:2C:EB:56:2B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SMOd4l_6fq8CsqbYws9uLOtWK_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:a6:13:06:b4:af:2b:a1:d1:2e:50:51:87:28:4a:a6:f0:87:
48:15:ed:82:2b:21:f5:48:42:6c:b3:1c:25:79:bd:5e:89:b7:
b8:f6:6b:eb:8a:bb:c8:6c:ec:84:f6:a2:2e:30:2d:f7:87:26:
f7:74:b8:ae:4b:5f:7d:8b:4c:3f:af:0c:ed:51:8d:fe:56:bb:
a5:be:c3:fc:24:ea:54:74:0e:4e:31:5d:2b:71:e9:13:e3:c3:
c7:53:12:6c:bd:4d:f1:a4:b9:52:0b:b0:96:bc:43:2c:11:f1:
98:e7:d5:98:97:61:19:ee:36:47:42:0d:11:dc:4e:8e:6d:cf:
24:5f:46:f0:67:33:11:2f:77:93:73:b9:8e:a0:4d:af:8a:2c:
69:27:e8:a9:9f:d2:dd:aa:27:f6:a0:43:30:44:56:7a:f9:39:
95:10:ff:a2:41:6f:c0:c9:21:3d:21:5b:f6:00:31:7f:3e:28:
cf:c3:ef:83:87:8f:79:c2:95:f0:de:41:10:34:a6:8e:c0:54:
0f:08:50:de:95:e1:79:60:03:e8:1d:70:14:ca:59:14:02:95:
c1:c4:f0:63:f2:d5:5e:1c:f2:30:63:43:79:6d:2b:b4:39:15:
88:1f:85:74:74:99:ba:f4:dd:98:f5:90:7b:d0:be:c1:5f:83:
0e:7d:b0:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:01 2025 by rpki-client