Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a62f06-d16d-4eb9-b5cf-40a4cfc9622c/1/SM-Wql6wd08Ne0JrMnQ1qHiOsYk.mft
File: SM-Wql6wd08Ne0JrMnQ1qHiOsYk.mft (raw, json)
Hash identifier: LseSu5MXWTOIG1woljA/J87DhcfUIz65AFvLYrcsm0k=
Subject key identifier: DB:20:16:FB:25:B3:07:99:52:08:98:0B:46:68:81:C9:CA:CC:0B:BE
Authority key identifier: 48:CF:96:AA:5E:B0:77:4F:0D:7B:42:6B:32:74:35:A8:78:8E:B1:89
Certificate issuer: /CN=48cf96aa5eb0774f0d7b426b327435a8788eb189
Certificate serial: 019A71B7F88018E651E1A4694BEAF0E848DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SM-Wql6wd08Ne0JrMnQ1qHiOsYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/a62f06-d16d-4eb9-b5cf-40a4cfc9622c/1/SM-Wql6wd08Ne0JrMnQ1qHiOsYk.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 07:01:13 +0000
Manifest this update: Tue 11 Nov 2025 07:01:13 +0000
Manifest next update: Wed 12 Nov 2025 07:01:13 +0000
Files and hashes: 1: SM-Wql6wd08Ne0JrMnQ1qHiOsYk.crl (hash: IBvqJGAOvbf25qiCwge8m1+OA/k7Q6gLY6Sr2HgI3Rw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/a62f06-d16d-4eb9-b5cf-40a4cfc9622c/1/SM-Wql6wd08Ne0JrMnQ1qHiOsYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/a62f06-d16d-4eb9-b5cf-40a4cfc9622c/1/SM-Wql6wd08Ne0JrMnQ1qHiOsYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/SM-Wql6wd08Ne0JrMnQ1qHiOsYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:f8:80:18:e6:51:e1:a4:69:4b:ea:f0:e8:48:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48cf96aa5eb0774f0d7b426b327435a8788eb189
Validity
Not Before: Nov 11 07:01:13 2025 GMT
Not After : Nov 12 07:01:13 2025 GMT
Subject: CN=db2016fb25b307995208980b466881c9cacc0bbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:48:c6:10:4d:58:e6:d3:1c:10:29:70:fd:7a:
2c:8e:30:1e:f3:52:ca:cf:18:c1:fd:11:8e:f0:d7:
49:f2:ba:bb:48:ce:16:a0:1e:8a:10:4f:4c:d4:7e:
f8:49:3c:ba:2c:75:e9:ad:4c:f7:96:bb:2e:bc:b1:
c5:8d:0c:df:53:4b:2e:c5:42:6a:b3:43:ed:f2:6a:
ba:83:de:66:7a:5c:4b:a4:f0:85:6e:83:48:21:44:
3e:f3:6e:d5:27:1d:4d:5a:a1:71:27:4e:e1:63:a1:
a8:40:4e:86:5b:0c:d6:e7:86:a3:1f:f6:c9:b7:af:
85:2d:45:48:73:3e:03:19:fa:94:8f:88:d1:4e:47:
2a:62:23:18:b3:6b:d5:2e:62:8f:f1:94:38:b9:27:
95:78:80:52:63:94:50:38:6b:04:a2:08:d3:ca:80:
a9:e5:db:37:46:dd:45:31:50:0a:3f:84:2e:ec:c0:
9b:6d:a0:e5:75:63:bd:c0:2c:5f:00:8a:58:42:b6:
24:34:01:33:6b:12:a0:bf:f8:e5:91:b8:5f:c5:3a:
d3:93:42:4b:5a:e0:37:44:1c:a7:9a:10:13:24:eb:
d9:f5:1f:15:59:9d:91:05:65:eb:6d:54:99:5c:46:
73:6a:36:45:ca:fd:68:b9:53:61:2c:5d:4c:43:fa:
1d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:20:16:FB:25:B3:07:99:52:08:98:0B:46:68:81:C9:CA:CC:0B:BE
X509v3 Authority Key Identifier:
keyid:48:CF:96:AA:5E:B0:77:4F:0D:7B:42:6B:32:74:35:A8:78:8E:B1:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SM-Wql6wd08Ne0JrMnQ1qHiOsYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a62f06-d16d-4eb9-b5cf-40a4cfc9622c/1/SM-Wql6wd08Ne0JrMnQ1qHiOsYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a62f06-d16d-4eb9-b5cf-40a4cfc9622c/1/SM-Wql6wd08Ne0JrMnQ1qHiOsYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:c9:8c:ec:0a:2b:f8:7e:0e:8e:ef:a8:25:b6:5c:27:fd:8c:
c2:66:20:84:aa:b1:91:0e:11:3a:6e:78:90:2e:cb:4d:2e:ae:
ed:0f:29:a1:ba:44:79:32:7a:96:7a:12:1d:cb:33:97:00:28:
6e:85:00:59:0a:0b:a1:a4:21:78:a8:4b:01:a2:0d:97:f7:fc:
a6:17:ea:3b:76:c3:e8:36:00:8c:ac:81:cf:69:0b:ca:40:2b:
5f:7c:d7:e3:76:1c:45:2e:b3:85:22:72:f3:77:f1:77:65:80:
f7:40:51:37:bd:0c:ff:4b:2d:ed:4a:2d:a1:08:e1:c5:94:15:
9b:f0:fd:7a:56:4f:17:a8:cb:58:9e:85:21:7b:fe:41:ab:55:
8a:be:06:4a:be:19:24:e4:20:ad:55:05:c7:96:58:36:4f:d3:
4a:5c:ec:b5:de:e5:03:60:3f:30:d7:31:86:62:d1:8a:78:18:
48:fc:45:a4:52:a8:9b:aa:f1:46:3f:18:47:79:81:cb:ff:20:
04:3e:e2:77:6b:a5:4d:29:15:46:ac:f3:2d:b2:ef:5c:5b:e9:
aa:32:77:3f:67:7e:8c:30:fa:cd:3d:e9:17:be:97:89:f1:d5:
59:32:e5:03:5a:82:de:db:07:c3:1a:df:a6:04:2c:cc:c3:dc:
82:a2:99:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:56:31 2025 by rpki-client