Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.mft
File: SMMR7eKLkvXGGpEr4GA5SYsjQio.mft (raw, json)
Hash identifier: J7cTXdk/ZEPvsI7z9E6ZdI4G8pyGMrmZP6nKK8n4kyQ=
Subject key identifier: 00:02:CB:81:3B:5C:15:A6:01:D2:EB:01:55:33:27:E1:7D:0A:39:08
Authority key identifier: 48:C3:11:ED:E2:8B:92:F5:C6:1A:91:2B:E0:60:39:49:8B:23:42:2A
Certificate issuer: /CN=48c311ede28b92f5c61a912be06039498b23422a
Certificate serial: 0196A6C1B803A14E366E8D761ED749EC361B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SMMR7eKLkvXGGpEr4GA5SYsjQio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.mft
Manifest number: 0612
Signing time: Tue 06 May 2025 18:00:35 +0000
Manifest this update: Tue 06 May 2025 18:00:35 +0000
Manifest next update: Wed 07 May 2025 18:00:35 +0000
Files and hashes: 1: SMMR7eKLkvXGGpEr4GA5SYsjQio.crl (hash: d4ksACVIWOySCEX43c2pfiNZPehKp5jHBc22Pc9dp30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.mft
rsync://rpki.ripe.net/repository/DEFAULT/SMMR7eKLkvXGGpEr4GA5SYsjQio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:c1:b8:03:a1:4e:36:6e:8d:76:1e:d7:49:ec:36:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48c311ede28b92f5c61a912be06039498b23422a
Validity
Not Before: May 6 18:00:35 2025 GMT
Not After : May 7 18:00:35 2025 GMT
Subject: CN=0002cb813b5c15a601d2eb01553327e17d0a3908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:96:d9:cb:aa:e7:60:c1:bc:98:55:1d:d0:b4:
e4:8a:e7:51:8c:41:a9:da:02:99:ff:c8:4f:f3:8d:
74:ac:08:a4:9e:f8:0e:18:a9:04:ee:70:5f:8e:db:
b1:2c:00:72:51:3f:2f:e9:56:d9:56:d2:73:db:2d:
25:0c:07:2a:ff:86:98:85:32:21:e5:86:74:98:89:
b2:5c:de:70:6f:8e:b6:1b:36:96:66:1c:2f:de:b9:
86:3b:fa:f6:fd:b4:09:99:0e:f0:87:92:84:98:e6:
8e:4a:16:36:96:49:3c:f8:d7:e2:51:83:18:99:cc:
8c:85:97:36:45:2b:78:48:25:3f:50:f1:46:a2:66:
a4:46:d2:45:cf:a5:6c:ad:58:db:6a:f6:f6:7e:c2:
8e:58:21:c6:65:96:a1:14:51:b2:0b:45:a8:4a:12:
f5:f3:2e:7c:8d:ac:f9:46:f1:72:bb:1a:7a:05:90:
f7:5d:6a:7b:b9:ed:a2:92:fc:e4:22:f9:da:b3:be:
63:17:5e:99:6b:0c:f3:c1:63:e7:4a:6a:0d:b5:8a:
3e:22:6f:8c:26:e1:0b:c0:4d:ea:80:d8:2a:b0:89:
46:c9:fe:93:e6:86:99:88:fb:68:8a:87:1e:6e:17:
cd:1b:9e:56:10:67:f1:08:c2:cf:4f:77:64:41:47:
14:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:02:CB:81:3B:5C:15:A6:01:D2:EB:01:55:33:27:E1:7D:0A:39:08
X509v3 Authority Key Identifier:
keyid:48:C3:11:ED:E2:8B:92:F5:C6:1A:91:2B:E0:60:39:49:8B:23:42:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SMMR7eKLkvXGGpEr4GA5SYsjQio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:da:5e:e3:f2:16:6f:08:61:70:45:9f:2d:44:77:07:f6:0a:
95:fc:a1:d6:9e:8d:51:4c:d6:c2:6a:6c:7b:04:4b:e6:14:f5:
ae:29:68:1b:fd:ae:92:cb:52:b6:2c:7e:7f:2f:65:5f:fa:44:
9e:0f:2a:70:19:4b:b8:42:f0:43:13:54:2b:4a:08:a9:99:81:
0e:bb:86:95:73:c0:52:28:0c:21:70:dc:f5:ee:56:4b:b7:e2:
a0:cf:3f:0f:19:c1:9a:b0:26:14:bd:69:a1:d8:0a:64:51:e9:
17:97:b9:41:13:88:2b:40:25:fd:3f:cf:41:43:29:24:d1:06:
6e:49:05:dd:a9:fc:a5:cb:c9:dc:a9:34:2b:7b:1f:9a:8b:9a:
27:27:78:ae:59:b9:84:7b:77:cf:d5:9e:c3:88:6d:a2:a0:68:
ab:92:20:ac:8f:a9:c1:d1:48:f2:14:df:4e:ea:61:24:13:b0:
68:6f:aa:d8:31:13:9d:e1:59:71:38:ad:6b:b5:9d:04:24:a9:
f0:d1:e1:89:ab:72:cc:56:65:63:44:55:a3:1a:ea:2f:26:a6:
b5:07:d9:2a:ae:10:13:e9:0e:6a:a8:af:1c:16:84:f0:a2:bd:
ce:74:d3:43:9f:4a:37:e2:28:e8:3f:62:8a:8e:17:69:ed:80:
d0:a8:06:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 20:28:44 2025 by rpki-client