Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.mft
File: SMMR7eKLkvXGGpEr4GA5SYsjQio.mft (raw, json)
Hash identifier: 8ipubZA5xU1FqM7K/i7X5oHHl3MMQ1wTWogyXCYVcfE=
Subject key identifier: 25:B9:46:28:BC:F1:0E:5C:83:FA:21:BC:46:3F:72:80:BE:29:DD:E0
Authority key identifier: 48:C3:11:ED:E2:8B:92:F5:C6:1A:91:2B:E0:60:39:49:8B:23:42:2A
Certificate issuer: /CN=48c311ede28b92f5c61a912be06039498b23422a
Certificate serial: 0197B70F6E13A2141D9B505994C271A99492
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SMMR7eKLkvXGGpEr4GA5SYsjQio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.mft
Manifest number: 069F
Signing time: Sat 28 Jun 2025 15:02:11 +0000
Manifest this update: Sat 28 Jun 2025 15:02:11 +0000
Manifest next update: Sun 29 Jun 2025 15:02:11 +0000
Files and hashes: 1: SMMR7eKLkvXGGpEr4GA5SYsjQio.crl (hash: ivp0wm6NgUW6lQdb8tJoce2960UQsNkg7PTfv8pI2H0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.mft
rsync://rpki.ripe.net/repository/DEFAULT/SMMR7eKLkvXGGpEr4GA5SYsjQio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:6e:13:a2:14:1d:9b:50:59:94:c2:71:a9:94:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48c311ede28b92f5c61a912be06039498b23422a
Validity
Not Before: Jun 28 15:02:11 2025 GMT
Not After : Jun 29 15:02:11 2025 GMT
Subject: CN=25b94628bcf10e5c83fa21bc463f7280be29dde0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:20:a0:1d:20:e3:63:db:15:f9:c7:2b:d2:6d:
7f:b7:67:35:78:40:d4:d7:73:5f:ed:58:9f:33:b7:
15:02:67:8c:14:2c:b4:42:1a:7f:9d:b0:7d:4e:3f:
f8:a7:72:13:a0:7e:c3:5e:46:31:3a:7a:c8:96:12:
2a:f3:a1:b6:fc:3e:c8:68:cb:42:ed:1a:73:c2:99:
95:26:5f:1b:55:f7:40:79:49:29:d5:7b:a5:63:ab:
1a:0b:00:a4:72:27:97:30:e6:11:eb:5c:d7:d4:ae:
80:68:ae:a1:83:d9:d2:36:b1:74:76:c2:92:99:00:
14:42:bd:e2:73:0e:bc:a4:4a:10:7d:3b:f8:81:df:
5f:dc:55:2d:c5:2d:34:ad:15:07:6b:26:08:5b:54:
23:d8:55:b4:ce:cd:7b:d7:8a:4c:38:2a:37:c7:08:
32:3a:ad:35:33:34:5e:80:4b:6f:23:10:ff:db:9d:
2a:92:b1:c5:cd:7f:2b:13:26:ab:0d:62:d1:b3:00:
e0:c5:ef:b8:c6:0c:2e:de:57:36:42:a6:58:2e:9d:
1e:e7:b5:4c:2a:26:94:63:8c:a7:76:81:9e:32:10:
22:e0:08:fc:01:fb:66:4a:42:ae:4b:c8:fc:63:01:
20:19:72:72:ef:38:07:26:9b:d2:88:9e:e9:9b:8b:
46:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:B9:46:28:BC:F1:0E:5C:83:FA:21:BC:46:3F:72:80:BE:29:DD:E0
X509v3 Authority Key Identifier:
keyid:48:C3:11:ED:E2:8B:92:F5:C6:1A:91:2B:E0:60:39:49:8B:23:42:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SMMR7eKLkvXGGpEr4GA5SYsjQio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:e8:60:07:a0:89:a5:81:45:51:0a:d8:26:68:5e:c6:b6:26:
54:2c:29:d9:36:ba:04:77:11:d7:8c:16:da:73:ed:72:0a:99:
1c:54:de:4f:7f:4d:91:29:ac:40:6a:86:88:5e:29:15:44:de:
fd:60:3d:97:78:be:2e:b9:da:19:b8:4e:97:4f:f6:b2:fe:59:
76:58:98:08:4f:63:9f:6e:78:73:a1:c7:c9:16:2e:dd:8f:02:
94:a4:8a:e4:dc:ec:41:78:be:d4:3a:12:06:58:54:f7:ba:62:
8b:6a:4f:c2:4a:0b:d0:17:b9:99:d7:96:c4:b8:75:4f:17:2a:
b0:97:60:5b:b0:04:30:a1:0d:34:cc:f2:c6:c5:0a:d5:84:85:
c1:e8:97:9c:eb:7b:04:9c:b5:29:a6:ae:33:25:d6:ff:72:16:
a3:ee:fe:6a:88:ce:a8:9c:25:0e:6d:4c:18:a4:ca:8d:27:26:
28:e0:db:d4:fb:91:c9:8c:ed:b1:cd:9c:10:1f:0a:bd:73:ad:
7d:58:c4:98:f2:47:d4:c3:b6:c7:87:83:cf:52:7e:d6:47:19:
f2:5f:0d:6b:46:16:f7:52:2d:bd:f2:2f:55:4c:71:83:3f:22:
9b:0a:8b:d0:b5:45:74:00:07:24:31:12:ef:6c:a5:ca:45:a5:
8f:bc:5b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:35:33 2025 by rpki-client