Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.mft
File: SMMR7eKLkvXGGpEr4GA5SYsjQio.mft (raw, json)
Hash identifier: ptSreALmnYDOYW3uXGoS9vcGU+KMwohN8jo4IcwF4Wo=
Subject key identifier: A5:CF:67:06:61:17:F7:E9:BA:7B:E7:81:A4:9D:67:60:60:B5:68:BE
Authority key identifier: 48:C3:11:ED:E2:8B:92:F5:C6:1A:91:2B:E0:60:39:49:8B:23:42:2A
Certificate issuer: /CN=48c311ede28b92f5c61a912be06039498b23422a
Certificate serial: 0198D4E07E3E2486C75AD68205688EF4777A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SMMR7eKLkvXGGpEr4GA5SYsjQio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.mft
Manifest number: 0733
Signing time: Sat 23 Aug 2025 03:02:18 +0000
Manifest this update: Sat 23 Aug 2025 03:02:18 +0000
Manifest next update: Sun 24 Aug 2025 03:02:18 +0000
Files and hashes: 1: SMMR7eKLkvXGGpEr4GA5SYsjQio.crl (hash: HuD/T+lAECxQZagmc9hdlErFOISXQSBvKKR+h6Q4WXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.mft
rsync://rpki.ripe.net/repository/DEFAULT/SMMR7eKLkvXGGpEr4GA5SYsjQio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:7e:3e:24:86:c7:5a:d6:82:05:68:8e:f4:77:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48c311ede28b92f5c61a912be06039498b23422a
Validity
Not Before: Aug 23 03:02:18 2025 GMT
Not After : Aug 24 03:02:18 2025 GMT
Subject: CN=a5cf67066117f7e9ba7be781a49d676060b568be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bd:3e:4c:f1:65:d0:d9:09:64:ee:68:3d:a2:
83:a6:6b:09:33:43:47:c3:22:ef:c8:2c:8e:8b:e0:
ec:c4:e3:fa:a8:00:8b:03:ad:78:9f:c5:8c:eb:08:
16:03:53:3e:61:f2:00:ea:bf:99:54:3f:f7:08:01:
00:ea:11:61:0f:7d:72:75:59:87:63:2b:d0:b5:53:
01:80:d2:45:bf:3f:24:da:f7:14:25:0d:38:87:45:
79:92:04:49:ae:32:eb:ae:74:08:db:81:c1:c9:ce:
85:af:94:62:38:47:4c:c4:40:74:63:98:90:3f:19:
f7:8d:cd:19:1f:08:a7:e9:b0:20:cf:d9:e1:98:df:
18:b7:38:a5:71:75:2f:91:6d:3f:59:a5:8c:ad:8a:
83:8b:a8:71:af:43:3a:b8:b5:4c:ba:50:67:f1:a6:
ce:79:02:66:d4:01:98:39:af:f4:04:5c:e7:8a:fd:
3c:b6:1d:cc:17:9a:7c:e9:6a:1e:47:9f:63:c9:df:
9d:9f:c9:84:57:53:6f:7e:a8:ec:8a:d0:ff:5b:7e:
c9:7a:3a:38:d0:e5:81:38:32:51:41:2a:78:8e:64:
6b:b5:71:40:f5:36:ca:b0:f0:7c:9d:7c:07:c8:25:
b5:99:a4:33:c9:e8:e4:8b:f3:c0:2d:fd:81:1f:5b:
90:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:CF:67:06:61:17:F7:E9:BA:7B:E7:81:A4:9D:67:60:60:B5:68:BE
X509v3 Authority Key Identifier:
keyid:48:C3:11:ED:E2:8B:92:F5:C6:1A:91:2B:E0:60:39:49:8B:23:42:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SMMR7eKLkvXGGpEr4GA5SYsjQio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1f676a-c521-4fc9-b54b-7ae8b7066719/1/SMMR7eKLkvXGGpEr4GA5SYsjQio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:f5:a9:10:ee:19:21:b5:32:c8:de:e6:ec:e5:29:9f:5d:82:
68:1a:c1:b2:7a:6b:76:81:e3:0f:f2:f0:1e:18:01:f2:48:d3:
1b:69:47:65:11:74:78:8e:02:79:1f:c8:ee:e6:20:d7:e5:66:
24:08:0b:58:a6:ba:a3:c2:ac:2b:0f:36:dc:d1:a5:21:05:9e:
d5:f5:5e:6f:d7:fb:b8:4d:76:b2:b6:fd:17:37:33:67:8f:6d:
d1:2b:ce:00:77:c8:89:a9:62:ff:de:c5:02:a1:cf:0a:85:6d:
7f:a8:b2:90:30:98:6e:b7:2d:e9:fa:53:f3:6f:e4:49:13:06:
5f:77:dd:00:bd:cc:8a:99:2e:b5:bd:65:06:44:c6:05:fe:bd:
08:3e:d6:4d:f5:cf:a8:76:c3:e5:1e:66:cf:99:eb:4b:f0:b6:
ab:a7:c1:55:97:7b:3e:0f:0e:a8:56:51:b5:78:44:5b:eb:b4:
fe:a7:c0:30:c0:a2:e4:9c:66:74:7e:b1:d0:f6:dd:b1:be:91:
85:cb:5f:e9:a3:95:84:68:2c:06:a1:c2:71:60:c1:69:6a:4a:
cc:69:0a:57:99:8d:c4:fb:dc:56:98:34:64:3b:bc:f4:aa:33:
89:ca:85:38:72:a6:a8:5d:52:2a:d4:d0:f9:61:ff:bb:24:fe:
68:30:c0:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4H4+JIbHWtaCBWiO9Hd6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4YzMxMWVkZTI4YjkyZjVjNjFhOTEyYmUwNjAzOTQ5OGIy
MzQyMmEwHhcNMjUwODIzMDMwMjE4WhcNMjUwODI0MDMwMjE4WjAzMTEwLwYDVQQD
EyhhNWNmNjcwNjYxMTdmN2U5YmE3YmU3ODFhNDlkNjc2MDYwYjU2OGJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwb0+TPFl0NkJZO5oPaKDpmsJM0NH
wyLvyCyOi+DsxOP6qACLA614n8WM6wgWA1M+YfIA6r+ZVD/3CAEA6hFhD31ydVmH
YyvQtVMBgNJFvz8k2vcUJQ04h0V5kgRJrjLrrnQI24HByc6Fr5RiOEdMxEB0Y5iQ
Pxn3jc0ZHwin6bAgz9nhmN8YtzilcXUvkW0/WaWMrYqDi6hxr0M6uLVMulBn8abO
eQJm1AGYOa/0BFzniv08th3MF5p86WoeR59jyd+dn8mEV1NvfqjsitD/W37Jejo4
0OWBODJRQSp4jmRrtXFA9TbKsPB8nXwHyCW1maQzyejki/PALf2BH1uQ3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKXPZwZhF/fpunvngaSdZ2BgtWi+MB8GA1UdIwQY
MBaAFEjDEe3ii5L1xhqRK+BgOUmLI0IqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU01NUjdlS0xrdlhHR3BFcjRHQTVTWXNqUWlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8xZjY3NmEtYzUyMS00ZmM5LWI1NGIt
N2FlOGI3MDY2NzE5LzEvU01NUjdlS0xrdlhHR3BFcjRHQTVTWXNqUWlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8xZjY3NmEtYzUyMS00ZmM5LWI1NGItN2FlOGI3MDY2NzE5
LzEvU01NUjdlS0xrdlhHR3BFcjRHQTVTWXNqUWlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0fWpEO4Z
IbUyyN7m7OUpn12CaBrBsnprdoHjD/LwHhgB8kjTG2lHZRF0eI4CeR/I7uYg1+Vm
JAgLWKa6o8KsKw823NGlIQWe1fVeb9f7uE12srb9FzczZ49t0SvOAHfIiali/97F
AqHPCoVtf6iykDCYbrct6fpT82/kSRMGX3fdAL3Mipkutb1lBkTGBf69CD7WTfXP
qHbD5R5mz5nrS/C2q6fBVZd7Pg8OqFZRtXhEW+u0/qfAMMCi5JxmdH6x0Pbdsb6R
hctf6aOVhGgsBqHCcWDBaWpKzGkKV5mNxPvcVpg0ZDu89KozicqFOHKmqF1SKtTQ
+WH/uyT+aDDAuQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:46:54 2025 by rpki-client