Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/458282-5405-4b17-997d-7cd59619c0d6/1/SMdByd9bLkiZO5GDt5_zRrQxk4E.mft
File: SMdByd9bLkiZO5GDt5_zRrQxk4E.mft (raw, json)
Hash identifier: qw8kMu+IavJ5M7TyD8eZ2we4pjKBWlIU/6nYJcnL4Y0=
Subject key identifier: B7:5F:5B:8D:51:0D:3F:16:54:78:03:15:94:88:BE:F0:52:E4:D7:69
Authority key identifier: 48:C7:41:C9:DF:5B:2E:48:99:3B:91:83:B7:9F:F3:46:B4:31:93:81
Certificate issuer: /CN=48c741c9df5b2e48993b9183b79ff346b4319381
Certificate serial: 019A7225D6E5D82E2A1DD7F8718E5ACA4BD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SMdByd9bLkiZO5GDt5_zRrQxk4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/458282-5405-4b17-997d-7cd59619c0d6/1/SMdByd9bLkiZO5GDt5_zRrQxk4E.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 09:01:13 +0000
Manifest this update: Tue 11 Nov 2025 09:01:13 +0000
Manifest next update: Wed 12 Nov 2025 09:01:13 +0000
Files and hashes: 1: SMdByd9bLkiZO5GDt5_zRrQxk4E.crl (hash: kA/hYEmE2nsqZ8sPZDAPNP2hkI//mzPWdlS8JsPUj+s=)
2: joaFEW-NdPhZyszfRS8lbScgqm0.roa (hash: 0utj+sPXgGZYWSm41u/aEZLOVRC1lSd5e6cU8LiAr60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/458282-5405-4b17-997d-7cd59619c0d6/1/SMdByd9bLkiZO5GDt5_zRrQxk4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/458282-5405-4b17-997d-7cd59619c0d6/1/SMdByd9bLkiZO5GDt5_zRrQxk4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/SMdByd9bLkiZO5GDt5_zRrQxk4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:d6:e5:d8:2e:2a:1d:d7:f8:71:8e:5a:ca:4b:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48c741c9df5b2e48993b9183b79ff346b4319381
Validity
Not Before: Nov 11 09:01:13 2025 GMT
Not After : Nov 12 09:01:13 2025 GMT
Subject: CN=b75f5b8d510d3f16547803159488bef052e4d769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:07:af:a2:4d:26:ba:a4:39:74:29:84:47:61:
58:7d:6a:a0:3e:0b:ea:07:c9:b3:fb:ad:a4:0f:f9:
01:29:9a:4c:d3:4f:12:ae:a3:05:c5:c2:44:fe:5f:
07:3c:1d:2a:f6:59:a0:4f:36:0f:22:58:f9:7c:37:
20:22:a5:15:3f:6a:33:38:5f:c4:46:52:25:10:90:
b0:94:53:fd:19:eb:ca:01:71:ba:ec:26:8e:14:f6:
31:f4:dd:b2:52:f1:76:c5:9e:6f:92:f8:89:57:9a:
4b:7a:c3:f2:cb:18:03:b0:c8:39:3a:8c:09:4d:37:
77:03:d1:bb:9d:dd:7d:d7:af:42:35:cb:72:b5:5a:
de:32:83:cc:50:20:34:de:54:f1:bd:c3:d1:95:e5:
04:64:99:32:61:1a:56:fb:5f:b2:3b:f6:4b:47:77:
3e:5b:0e:03:b2:0b:9d:40:32:80:f5:7d:d6:cc:85:
d1:38:6c:86:78:6d:a5:7b:1d:94:08:87:e4:ce:20:
9c:43:a9:53:3c:01:c6:17:60:03:d4:ec:6a:2a:27:
8b:08:5c:1c:70:80:e3:49:e5:82:64:c9:bc:13:38:
98:3b:45:b0:6c:82:a5:98:85:30:04:4a:89:1d:22:
70:6c:a0:39:c4:74:87:d3:d7:ea:1b:0e:af:f8:11:
1e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:5F:5B:8D:51:0D:3F:16:54:78:03:15:94:88:BE:F0:52:E4:D7:69
X509v3 Authority Key Identifier:
keyid:48:C7:41:C9:DF:5B:2E:48:99:3B:91:83:B7:9F:F3:46:B4:31:93:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SMdByd9bLkiZO5GDt5_zRrQxk4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/458282-5405-4b17-997d-7cd59619c0d6/1/SMdByd9bLkiZO5GDt5_zRrQxk4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/458282-5405-4b17-997d-7cd59619c0d6/1/SMdByd9bLkiZO5GDt5_zRrQxk4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:69:5f:a3:83:31:59:79:c9:33:c9:3f:ea:2a:30:e5:d6:a8:
a9:3d:3d:66:1b:58:94:85:4b:d5:cc:3b:64:ae:c5:2b:30:d4:
23:09:74:00:27:8c:4b:52:82:b0:bc:78:66:ff:82:3e:39:49:
dc:a4:27:fc:74:92:ec:3b:fd:6d:9b:4e:6c:76:8a:d4:a5:87:
57:6a:c8:4c:47:0d:f0:6b:0f:e3:b9:f7:d9:15:42:8b:03:7a:
4f:5b:55:a4:c2:2f:b8:f7:d3:87:76:71:61:00:49:46:78:13:
59:ce:c9:c3:64:8e:5d:d8:89:4e:0c:e5:99:a0:dd:87:7e:67:
0a:1d:34:ff:7d:90:bc:45:60:d4:fe:82:f4:32:d7:e1:cb:93:
aa:28:7a:cd:be:32:62:39:e6:51:b4:d2:df:a4:42:f4:32:40:
fb:10:ce:f9:d7:eb:ce:9b:46:3e:d0:6b:34:85:b4:6c:ca:e6:
15:fc:7d:31:02:3f:c2:5b:aa:ad:13:48:f1:58:2b:e6:e6:b4:
04:cd:55:43:86:2e:55:0a:ee:40:41:35:75:42:11:b8:a7:7b:
e1:76:d1:71:12:f8:bf:17:cf:b3:5f:9e:84:26:12:a9:47:a9:
3c:09:53:00:0e:44:b3:41:8c:e9:f0:52:5a:08:62:75:55:2c:
8d:28:04:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJdbl2C4qHdf4cY5aykvWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4Yzc0MWM5ZGY1YjJlNDg5OTNiOTE4M2I3OWZmMzQ2YjQz
MTkzODEwHhcNMjUxMTExMDkwMTEzWhcNMjUxMTEyMDkwMTEzWjAzMTEwLwYDVQQD
EyhiNzVmNWI4ZDUxMGQzZjE2NTQ3ODAzMTU5NDg4YmVmMDUyZTRkNzY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQevok0muqQ5dCmER2FYfWqgPgvq
B8mz+62kD/kBKZpM008SrqMFxcJE/l8HPB0q9lmgTzYPIlj5fDcgIqUVP2ozOF/E
RlIlEJCwlFP9GevKAXG67CaOFPYx9N2yUvF2xZ5vkviJV5pLesPyyxgDsMg5OowJ
TTd3A9G7nd19169CNctytVreMoPMUCA03lTxvcPRleUEZJkyYRpW+1+yO/ZLR3c+
Ww4DsgudQDKA9X3WzIXROGyGeG2lex2UCIfkziCcQ6lTPAHGF2AD1OxqKieLCFwc
cIDjSeWCZMm8EziYO0WwbIKlmIUwBEqJHSJwbKA5xHSH09fqGw6v+BEeKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLdfW41RDT8WVHgDFZSIvvBS5NdpMB8GA1UdIwQY
MBaAFEjHQcnfWy5ImTuRg7ef80a0MZOBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU01kQnlkOWJMa2laTzVHRHQ1X3pSclF4azRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80NTgyODItNTQwNS00YjE3LTk5N2Qt
N2NkNTk2MTljMGQ2LzEvU01kQnlkOWJMa2laTzVHRHQ1X3pSclF4azRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC80NTgyODItNTQwNS00YjE3LTk5N2QtN2NkNTk2MTljMGQ2
LzEvU01kQnlkOWJMa2laTzVHRHQ1X3pSclF4azRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI2lfo4Mx
WXnJM8k/6iow5daoqT09ZhtYlIVL1cw7ZK7FKzDUIwl0ACeMS1KCsLx4Zv+CPjlJ
3KQn/HSS7Dv9bZtObHaK1KWHV2rITEcN8GsP47n32RVCiwN6T1tVpMIvuPfTh3Zx
YQBJRngTWc7Jw2SOXdiJTgzlmaDdh35nCh00/32QvEVg1P6C9DLX4cuTqih6zb4y
YjnmUbTS36RC9DJA+xDO+dfrzptGPtBrNIW0bMrmFfx9MQI/wluqrRNI8Vgr5ua0
BM1VQ4YuVQruQEE1dUIRuKd74XbRcRL4vxfPs1+ehCYSqUepPAlTAA5Es0GM6fBS
WghidVUsjSgEHw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:42:47 2025 by rpki-client