Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.mft
File: sMmblRxqb2rcyGjYhalArfAFGhk.mft (raw, json)
Hash identifier: B31xM2A0pa9QvAA/W6dnc8MkoqF0cMFM5gMX3C/NJQo=
Subject key identifier: 3A:FF:8E:C0:A6:84:13:01:7A:93:A6:D2:F1:D3:11:FE:D7:75:9B:31
Authority key identifier: B0:C9:9B:95:1C:6A:6F:6A:DC:C8:68:D8:85:A9:40:AD:F0:05:1A:19
Certificate issuer: /CN=b0c99b951c6a6f6adcc868d885a940adf0051a19
Certificate serial: 0198D583DA4581B2A9AEE29BA4FE29109F9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMmblRxqb2rcyGjYhalArfAFGhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.mft
Manifest number: 0CDB
Signing time: Sat 23 Aug 2025 06:00:44 +0000
Manifest this update: Sat 23 Aug 2025 06:00:44 +0000
Manifest next update: Sun 24 Aug 2025 06:00:44 +0000
Files and hashes: 1: S5idv9RUVm_2J5GgNAX09HgvY7U.roa (hash: 4OYpTkc09pdm5hRENjZ+uPkWTS9n8ZtkwbMJqCtcIGQ=)
2: sMmblRxqb2rcyGjYhalArfAFGhk.crl (hash: DZ2RWd6Kos4SY0h3cB+St2VFVC7ZPTSyZ5LOeyWqrIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sMmblRxqb2rcyGjYhalArfAFGhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:da:45:81:b2:a9:ae:e2:9b:a4:fe:29:10:9f:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c99b951c6a6f6adcc868d885a940adf0051a19
Validity
Not Before: Aug 23 06:00:44 2025 GMT
Not After : Aug 24 06:00:44 2025 GMT
Subject: CN=3aff8ec0a68413017a93a6d2f1d311fed7759b31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:16:b3:f7:e1:36:f5:e9:ca:5d:b2:c0:a0:a6:
77:64:10:aa:30:20:3a:aa:e8:91:db:88:60:45:60:
4e:c9:67:c9:5c:cc:cc:9d:24:42:c5:be:fb:ff:50:
c9:77:2d:55:6d:6d:b1:a3:bb:e8:3c:91:04:dd:bb:
3c:97:10:e6:b8:b2:32:89:58:6e:6a:2c:89:53:06:
09:7d:7b:d2:0d:a9:2e:11:df:dc:18:c9:ba:9f:5e:
ef:2e:bf:a8:af:b1:8f:b8:e5:78:4b:93:74:68:e5:
ab:a5:9e:08:6e:48:02:36:5b:06:3c:01:8d:c3:17:
de:90:ec:a1:7d:75:d3:94:52:7a:13:4b:48:cb:ec:
eb:2c:94:04:f5:f6:f8:4d:8f:63:99:5f:af:fd:66:
7f:38:a8:28:85:d1:94:06:16:5b:6c:90:4d:30:a4:
fb:64:e8:9a:e9:7f:2c:ee:9b:63:d1:d6:88:5a:51:
47:c3:46:3c:55:94:d1:67:bb:25:d7:df:28:2f:86:
6f:d4:3a:3d:f4:01:fd:19:16:03:f4:d5:a8:1e:f7:
38:9b:0b:84:0d:68:76:2f:21:43:22:bd:58:a1:ca:
61:e8:93:fd:31:4f:93:c1:f7:39:20:00:eb:e5:eb:
82:78:f3:37:12:b7:02:bd:38:8b:e7:67:a0:74:f5:
f0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:FF:8E:C0:A6:84:13:01:7A:93:A6:D2:F1:D3:11:FE:D7:75:9B:31
X509v3 Authority Key Identifier:
keyid:B0:C9:9B:95:1C:6A:6F:6A:DC:C8:68:D8:85:A9:40:AD:F0:05:1A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMmblRxqb2rcyGjYhalArfAFGhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:7d:bf:db:b6:d0:64:86:21:bb:7c:f0:79:d7:2a:a8:35:82:
6f:32:3b:85:5a:fb:15:0f:2e:0c:be:27:67:cb:37:d9:c8:c0:
cb:1b:80:66:84:a3:04:8f:c2:ba:79:1e:3f:8c:f7:2c:c9:53:
ae:fc:65:32:14:b4:f9:4c:de:81:6a:09:06:79:99:9e:a9:cb:
7d:73:48:90:52:e5:ba:1f:4b:56:ea:06:73:83:fb:75:25:9d:
12:0b:29:4f:f5:04:0d:a9:73:e4:e4:8d:1b:1e:b7:5e:57:f5:
f4:0b:b6:7f:82:0d:a9:4d:43:c5:bd:1f:8c:59:50:c3:57:27:
f8:d8:65:99:6e:b1:e3:36:8b:9e:96:07:3f:2d:57:ca:b6:2b:
39:f4:10:3f:c2:df:32:1d:74:18:70:f8:94:e6:35:bf:de:44:
6a:a2:9d:92:27:77:f9:45:f8:ab:07:e7:90:5e:e7:63:38:18:
3c:31:00:64:86:1f:92:dc:de:7f:7b:9d:b7:42:19:2f:a5:57:
e4:cf:8f:2f:b2:ef:e0:c4:5d:44:56:ce:f8:ed:65:04:15:6b:
14:55:08:c6:36:d8:a8:01:40:f0:75:ac:8d:e0:cd:c0:62:42:
0b:12:6b:90:45:17:0d:ad:d4:e9:ad:f2:7f:0d:c3:50:21:4d:
41:c0:e8:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:30:20 2025 by rpki-client