Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/SmDzjPNvzJvFEyk1ErRrkR7fWsU.mft
File: SmDzjPNvzJvFEyk1ErRrkR7fWsU.mft (raw, json)
Hash identifier: /LUYzq4sUGQ9jhDrDmtuYbhL/tYvS57FP0OAithoHNc=
Subject key identifier: 96:BE:52:FA:7B:C3:44:08:5F:79:F6:23:4F:90:43:65:45:B7:9E:03
Authority key identifier: 4A:60:F3:8C:F3:6F:CC:9B:C5:13:29:35:12:B4:6B:91:1E:DF:5A:C5
Certificate issuer: /CN=4a60f38cf36fcc9bc513293512b46b911edf5ac5
Certificate serial: 019A71B7CD12D9EC069B4541C5BA55A5CB8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmDzjPNvzJvFEyk1ErRrkR7fWsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/SmDzjPNvzJvFEyk1ErRrkR7fWsU.mft
Manifest number: 0F12
Signing time: Tue 11 Nov 2025 07:01:02 +0000
Manifest this update: Tue 11 Nov 2025 07:01:02 +0000
Manifest next update: Wed 12 Nov 2025 07:01:02 +0000
Files and hashes: 1: SmDzjPNvzJvFEyk1ErRrkR7fWsU.crl (hash: r0+qxfIotm52Th6+8Ls1X5T3qUOAC67+L49Wyku7yIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/SmDzjPNvzJvFEyk1ErRrkR7fWsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/SmDzjPNvzJvFEyk1ErRrkR7fWsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SmDzjPNvzJvFEyk1ErRrkR7fWsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:cd:12:d9:ec:06:9b:45:41:c5:ba:55:a5:cb:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a60f38cf36fcc9bc513293512b46b911edf5ac5
Validity
Not Before: Nov 11 07:01:02 2025 GMT
Not After : Nov 12 07:01:02 2025 GMT
Subject: CN=96be52fa7bc344085f79f6234f90436545b79e03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:40:72:ea:e1:94:2e:44:44:18:a8:81:33:9f:
fa:95:67:67:ea:b0:cb:64:6c:84:24:83:82:cd:4a:
49:43:44:04:64:de:98:ce:cd:fe:aa:70:c9:12:f1:
0a:e0:e5:9a:f0:28:9b:76:40:d3:f0:56:8a:86:4e:
81:8e:68:8d:4d:0d:6f:c3:8d:23:72:55:ec:6c:ed:
cf:5c:f4:7b:35:53:02:51:53:85:fb:3c:a5:39:e7:
42:cf:7f:cb:14:ac:cf:9a:4e:3d:79:db:8b:4e:b7:
83:29:de:1c:4e:77:43:06:ed:50:54:24:43:cc:0d:
e3:fd:fb:b1:68:5f:9c:22:b3:44:84:e0:9d:53:1e:
51:15:cc:ab:b1:e3:5b:59:71:4b:b9:2a:e5:bf:6f:
1f:a7:a3:8c:a6:93:5d:f9:5c:04:61:65:de:0e:d3:
b0:9b:dd:8a:e7:74:de:b9:ae:52:a3:21:44:24:f6:
ed:c6:5c:b9:28:30:d1:40:85:c7:29:c1:67:ae:56:
87:3f:0b:62:dd:82:61:d4:66:62:76:ca:a0:cd:03:
e0:39:95:bf:7f:2a:fc:25:09:03:3c:e0:50:61:4e:
b6:69:39:f3:95:f4:ef:3a:2d:5b:3f:f8:69:b2:38:
95:f3:e9:c7:ee:4b:a5:7b:c7:46:46:c4:d3:08:8f:
89:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:BE:52:FA:7B:C3:44:08:5F:79:F6:23:4F:90:43:65:45:B7:9E:03
X509v3 Authority Key Identifier:
keyid:4A:60:F3:8C:F3:6F:CC:9B:C5:13:29:35:12:B4:6B:91:1E:DF:5A:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmDzjPNvzJvFEyk1ErRrkR7fWsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/SmDzjPNvzJvFEyk1ErRrkR7fWsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/SmDzjPNvzJvFEyk1ErRrkR7fWsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:c1:94:81:8e:15:87:dc:ef:bb:83:26:af:37:45:9d:9b:d4:
8b:4e:3b:e8:fe:9d:5f:46:00:f7:ec:81:a7:1e:27:92:e1:41:
d1:53:34:a3:a1:03:8a:ab:ed:a4:40:62:f3:24:e8:31:bb:ba:
b3:25:a8:65:4f:f4:e9:34:94:80:fd:d2:45:36:4f:bf:88:0d:
e7:86:52:0c:26:96:f1:08:59:5c:a1:be:80:24:3b:64:c0:fb:
b6:e9:84:a6:ec:52:f7:db:28:c4:21:3e:da:2f:a6:c0:85:83:
b0:4c:39:62:9f:a6:55:36:f6:c3:91:fe:aa:46:d6:f1:3b:d0:
d8:f3:97:af:45:f3:76:2d:5c:6c:71:d8:d4:6a:41:93:e6:f6:
85:2e:4c:e7:48:3a:e7:7d:2a:e7:6b:3c:d8:37:90:a9:cf:50:
b1:21:d6:75:47:06:fc:61:2f:1f:49:ff:1a:48:4f:07:48:aa:
66:e3:83:a1:9a:e0:32:7b:90:8d:71:59:f9:cb:6d:13:f5:32:
b0:cc:7b:38:24:fc:69:67:4c:fc:02:db:8f:b6:8e:3a:c6:e9:
12:17:c5:b1:cd:fb:0d:10:dc:85:91:e6:65:5e:a8:34:ee:d2:
47:e1:1d:ee:35:8d:ff:72:d1:da:e8:65:ae:77:a4:04:03:da:
78:ad:6a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:30 2025 by rpki-client