Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/458282-5405-4b17-997d-7cd59619c0d6/1/SMdByd9bLkiZO5GDt5_zRrQxk4E.mft
File: SMdByd9bLkiZO5GDt5_zRrQxk4E.mft (raw, json)
Hash identifier: ifmgLVybxzhnxRpaOqZgm48uabBe13xAkRhAin3ONXA=
Subject key identifier: 9F:BA:BA:02:08:37:FC:4E:C9:54:8E:15:90:AF:28:E0:37:51:33:7A
Authority key identifier: 48:C7:41:C9:DF:5B:2E:48:99:3B:91:83:B7:9F:F3:46:B4:31:93:81
Certificate issuer: /CN=48c741c9df5b2e48993b9183b79ff346b4319381
Certificate serial: 0199221E9A14B788171D35147283CE600BBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SMdByd9bLkiZO5GDt5_zRrQxk4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/458282-5405-4b17-997d-7cd59619c0d6/1/SMdByd9bLkiZO5GDt5_zRrQxk4E.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 03:00:54 +0000
Manifest this update: Sun 07 Sep 2025 03:00:54 +0000
Manifest next update: Mon 08 Sep 2025 03:00:54 +0000
Files and hashes: 1: SMdByd9bLkiZO5GDt5_zRrQxk4E.crl (hash: KjVzd4A8EQRBcO/BZOZKbXJNlslgYfg6ooag+1H/cko=)
2: joaFEW-NdPhZyszfRS8lbScgqm0.roa (hash: 0utj+sPXgGZYWSm41u/aEZLOVRC1lSd5e6cU8LiAr60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/458282-5405-4b17-997d-7cd59619c0d6/1/SMdByd9bLkiZO5GDt5_zRrQxk4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/458282-5405-4b17-997d-7cd59619c0d6/1/SMdByd9bLkiZO5GDt5_zRrQxk4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/SMdByd9bLkiZO5GDt5_zRrQxk4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:9a:14:b7:88:17:1d:35:14:72:83:ce:60:0b:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48c741c9df5b2e48993b9183b79ff346b4319381
Validity
Not Before: Sep 7 03:00:54 2025 GMT
Not After : Sep 8 03:00:54 2025 GMT
Subject: CN=9fbaba020837fc4ec9548e1590af28e03751337a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e5:89:36:da:aa:ce:fe:a7:a3:f4:00:1b:bf:
05:b7:b3:07:82:8a:6a:08:f0:f0:fc:e7:ac:00:26:
af:9b:05:3d:4a:44:8b:dd:e1:59:80:1c:c4:48:15:
73:7c:e9:ec:16:b0:45:a0:15:97:e7:c0:70:cb:9e:
54:54:d0:89:75:ae:86:82:b6:bc:31:aa:67:a7:de:
5d:8f:32:ec:49:19:b9:5f:0c:2b:c3:9d:5d:3e:69:
83:26:dc:19:cc:e6:40:36:60:49:94:b4:32:d6:eb:
53:44:e3:f4:15:dd:19:f1:9e:7e:b1:1d:9a:8e:0f:
46:c4:64:84:9c:31:74:e4:55:eb:83:64:f3:66:fe:
5a:b7:a3:25:e4:2a:c6:3d:d5:a4:52:6f:be:76:10:
d5:ca:dc:57:5b:10:bd:22:78:a3:9a:6a:ac:a0:e9:
aa:b5:94:06:7a:40:13:2b:33:58:a4:91:4a:a9:c9:
d2:6b:db:7f:37:36:82:66:3d:59:0d:8c:7d:c7:b7:
a3:53:8b:6c:be:9c:3a:58:34:f8:00:95:1c:0f:48:
08:cc:ba:78:3b:f4:18:2a:fc:b9:92:c0:f0:0d:8e:
91:d0:1e:82:f8:74:bd:b3:b3:3d:b4:0d:77:7d:5d:
98:71:f5:dc:b7:74:10:da:2f:f0:29:d9:8b:19:cb:
93:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:BA:BA:02:08:37:FC:4E:C9:54:8E:15:90:AF:28:E0:37:51:33:7A
X509v3 Authority Key Identifier:
keyid:48:C7:41:C9:DF:5B:2E:48:99:3B:91:83:B7:9F:F3:46:B4:31:93:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SMdByd9bLkiZO5GDt5_zRrQxk4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/458282-5405-4b17-997d-7cd59619c0d6/1/SMdByd9bLkiZO5GDt5_zRrQxk4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/458282-5405-4b17-997d-7cd59619c0d6/1/SMdByd9bLkiZO5GDt5_zRrQxk4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:bc:e1:c5:54:7c:ee:e7:a8:89:b2:66:99:72:3f:67:13:5a:
a6:8a:f2:18:82:f4:c8:f1:c7:ef:cb:bf:0e:b6:c9:e8:d2:8a:
9e:4b:c9:cc:52:91:aa:ac:7e:02:b8:63:87:68:0a:86:95:24:
08:89:f5:ed:84:4a:0f:1c:3c:3d:fc:18:f7:3b:4a:de:94:19:
61:7e:0c:de:cf:0e:36:0a:c7:89:78:5c:65:20:7f:3b:5b:40:
24:bd:d7:c6:5c:80:07:95:ed:2b:e3:ca:bf:20:46:1e:a3:ab:
b6:b4:d1:9a:82:8f:1b:c3:d5:79:02:9a:6f:94:48:93:2f:48:
43:88:74:99:27:4c:b0:cf:65:37:27:e6:a1:37:bb:bb:a3:94:
10:16:15:fe:19:32:fe:ee:fd:8a:2e:b5:8c:f7:1f:a4:9c:30:
a2:59:c0:eb:19:6d:34:ed:ba:9a:a8:93:60:aa:26:31:89:1e:
ff:ef:b2:2d:98:dd:df:29:fd:db:99:4a:e8:28:21:47:26:63:
c9:4e:67:1d:d5:7a:1f:3f:f0:88:33:bf:d7:de:b9:27:b1:13:
2a:89:cf:57:3d:6e:4a:89:dc:f9:35:5f:5b:8f:5f:42:43:b6:
1d:ad:b3:41:47:de:71:75:0d:a4:14:53:64:f6:70:8a:47:10:
23:84:37:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiHpoUt4gXHTUUcoPOYAu8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4Yzc0MWM5ZGY1YjJlNDg5OTNiOTE4M2I3OWZmMzQ2YjQz
MTkzODEwHhcNMjUwOTA3MDMwMDU0WhcNMjUwOTA4MDMwMDU0WjAzMTEwLwYDVQQD
Eyg5ZmJhYmEwMjA4MzdmYzRlYzk1NDhlMTU5MGFmMjhlMDM3NTEzMzdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueWJNtqqzv6no/QAG78Ft7MHgopq
CPDw/OesACavmwU9SkSL3eFZgBzESBVzfOnsFrBFoBWX58Bwy55UVNCJda6Ggra8
Mapnp95djzLsSRm5Xwwrw51dPmmDJtwZzOZANmBJlLQy1utTROP0Fd0Z8Z5+sR2a
jg9GxGSEnDF05FXrg2TzZv5at6Ml5CrGPdWkUm++dhDVytxXWxC9InijmmqsoOmq
tZQGekATKzNYpJFKqcnSa9t/NzaCZj1ZDYx9x7ejU4tsvpw6WDT4AJUcD0gIzLp4
O/QYKvy5ksDwDY6R0B6C+HS9s7M9tA13fV2YcfXct3QQ2i/wKdmLGcuTKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ+6ugIIN/xOyVSOFZCvKOA3UTN6MB8GA1UdIwQY
MBaAFEjHQcnfWy5ImTuRg7ef80a0MZOBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU01kQnlkOWJMa2laTzVHRHQ1X3pSclF4azRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80NTgyODItNTQwNS00YjE3LTk5N2Qt
N2NkNTk2MTljMGQ2LzEvU01kQnlkOWJMa2laTzVHRHQ1X3pSclF4azRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC80NTgyODItNTQwNS00YjE3LTk5N2QtN2NkNTk2MTljMGQ2
LzEvU01kQnlkOWJMa2laTzVHRHQ1X3pSclF4azRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVbzhxVR8
7ueoibJmmXI/ZxNaporyGIL0yPHH78u/DrbJ6NKKnkvJzFKRqqx+Arhjh2gKhpUk
CIn17YRKDxw8PfwY9ztK3pQZYX4M3s8ONgrHiXhcZSB/O1tAJL3XxlyAB5XtK+PK
vyBGHqOrtrTRmoKPG8PVeQKab5RIky9IQ4h0mSdMsM9lNyfmoTe7u6OUEBYV/hky
/u79ii61jPcfpJwwolnA6xltNO26mqiTYKomMYke/++yLZjd3yn925lK6CghRyZj
yU5nHdV6Hz/wiDO/1965J7ETKonPVz1uSonc+TVfW49fQkO2Ha2zQUfecXUNpBRT
ZPZwikcQI4Q3Mw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:10 2025 by rpki-client