Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.mft
File: sMmblRxqb2rcyGjYhalArfAFGhk.mft (raw, json)
Hash identifier: tV2T/kH6XLuNJeTDp4zETpI2N5P3qiNsHQRkOhIku5w=
Subject key identifier: 4C:CC:7D:F1:A8:19:E0:D6:03:45:55:83:E9:F8:81:F0:C9:55:7D:25
Authority key identifier: B0:C9:9B:95:1C:6A:6F:6A:DC:C8:68:D8:85:A9:40:AD:F0:05:1A:19
Certificate issuer: /CN=b0c99b951c6a6f6adcc868d885a940adf0051a19
Certificate serial: 019A02C7DD67B156B349ED14C837F0B5618B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMmblRxqb2rcyGjYhalArfAFGhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.mft
Manifest number: 0D77
Signing time: Mon 20 Oct 2025 18:00:44 +0000
Manifest this update: Mon 20 Oct 2025 18:00:44 +0000
Manifest next update: Tue 21 Oct 2025 18:00:44 +0000
Files and hashes: 1: S5idv9RUVm_2J5GgNAX09HgvY7U.roa (hash: 4OYpTkc09pdm5hRENjZ+uPkWTS9n8ZtkwbMJqCtcIGQ=)
2: sMmblRxqb2rcyGjYhalArfAFGhk.crl (hash: Etz85pBiKkI83DoQIMm/u9ugWpL/Ss9DsIy4hw092KM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sMmblRxqb2rcyGjYhalArfAFGhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:c7:dd:67:b1:56:b3:49:ed:14:c8:37:f0:b5:61:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c99b951c6a6f6adcc868d885a940adf0051a19
Validity
Not Before: Oct 20 18:00:44 2025 GMT
Not After : Oct 21 18:00:44 2025 GMT
Subject: CN=4ccc7df1a819e0d603455583e9f881f0c9557d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c7:94:c5:cf:3c:b2:8a:31:30:13:36:46:bd:
24:35:76:e5:91:2b:6b:b9:b2:0a:62:1e:70:f8:e5:
cd:62:1c:03:b5:68:d8:8f:9e:52:fd:80:b4:27:2d:
e3:50:93:31:b7:87:36:c7:16:39:c1:cf:1d:03:30:
d6:7c:1a:56:f3:8e:10:7a:b1:65:fc:f7:e4:f2:e8:
67:a5:71:c9:25:65:6a:54:b2:bf:43:05:64:4c:45:
2f:fe:1e:d0:5e:9d:e2:34:f3:a1:34:d4:fb:ab:7b:
37:6c:9e:28:02:e6:97:15:30:bb:bc:be:57:65:cd:
1d:fa:64:47:de:36:d6:3f:71:df:31:d7:17:00:c0:
89:7d:83:84:6a:ae:3a:7e:d5:84:b1:ee:6f:7e:a2:
e9:b0:31:95:5d:fc:7a:96:d5:72:08:11:53:03:f1:
52:52:6a:3c:6e:77:39:d4:ac:7c:62:2e:3e:aa:0e:
d1:58:b7:79:c9:b2:a8:45:79:b6:15:f1:fc:ae:a4:
a2:c9:34:22:0f:71:7a:23:ce:d9:e0:1d:83:88:fd:
0b:09:16:78:84:ad:9f:23:a7:34:a9:a9:01:ed:73:
1b:9d:d8:94:08:ff:55:aa:c7:ad:02:b9:e0:50:52:
d7:d2:b5:48:b9:6c:0f:db:f9:57:0d:8b:7b:a7:4a:
d0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:CC:7D:F1:A8:19:E0:D6:03:45:55:83:E9:F8:81:F0:C9:55:7D:25
X509v3 Authority Key Identifier:
keyid:B0:C9:9B:95:1C:6A:6F:6A:DC:C8:68:D8:85:A9:40:AD:F0:05:1A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMmblRxqb2rcyGjYhalArfAFGhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:85:c6:51:0c:bb:cc:97:ae:be:01:f3:7c:21:b0:e5:12:68:
f2:15:73:dd:f0:fb:bf:bb:22:42:e3:21:e8:ab:98:fb:05:6b:
25:9c:d2:5f:8e:c6:5c:e3:fb:44:1f:b3:d7:6f:93:99:d5:c8:
a7:f8:0e:af:44:96:4d:b1:3f:f3:b3:72:1b:10:49:99:fe:b6:
2b:b1:9e:49:29:cf:06:cd:2d:68:76:fe:ec:6b:56:9a:8c:84:
1e:70:91:2b:86:10:63:5a:62:65:9c:84:4e:81:2e:d0:70:59:
7c:86:bc:c4:9a:d3:0a:54:69:56:67:86:44:67:ac:68:86:c9:
c4:12:b5:87:8b:75:ce:63:fc:6a:18:d1:cb:f9:58:da:a8:f7:
f2:4b:53:5e:15:ac:b9:63:b5:b5:c4:d1:4b:b6:3f:7d:26:46:
57:53:bb:01:dc:9c:8c:e3:c8:97:3d:39:40:24:13:bb:01:10:
4e:b8:5e:96:a6:91:b1:ac:6d:c4:ed:34:3f:17:ad:54:5b:15:
03:8f:28:4d:f1:fc:6c:2b:92:19:f3:e6:bc:15:cb:47:0d:67:
b1:b1:2d:3e:0f:72:89:a1:ef:3f:08:eb:dd:29:00:5e:71:de:
53:ce:18:47:2c:1a:d9:e6:5d:15:dd:32:d4:d1:b9:bf:33:bf:
d3:de:ac:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoCx91nsVazSe0UyDfwtWGLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYzk5Yjk1MWM2YTZmNmFkY2M4NjhkODg1YTk0MGFkZjAw
NTFhMTkwHhcNMjUxMDIwMTgwMDQ0WhcNMjUxMDIxMTgwMDQ0WjAzMTEwLwYDVQQD
Eyg0Y2NjN2RmMWE4MTllMGQ2MDM0NTU1ODNlOWY4ODFmMGM5NTU3ZDI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8eUxc88sooxMBM2Rr0kNXblkStr
ubIKYh5w+OXNYhwDtWjYj55S/YC0Jy3jUJMxt4c2xxY5wc8dAzDWfBpW844QerFl
/Pfk8uhnpXHJJWVqVLK/QwVkTEUv/h7QXp3iNPOhNNT7q3s3bJ4oAuaXFTC7vL5X
Zc0d+mRH3jbWP3HfMdcXAMCJfYOEaq46ftWEse5vfqLpsDGVXfx6ltVyCBFTA/FS
Umo8bnc51Kx8Yi4+qg7RWLd5ybKoRXm2FfH8rqSiyTQiD3F6I87Z4B2DiP0LCRZ4
hK2fI6c0qakB7XMbndiUCP9VqsetArngUFLX0rVIuWwP2/lXDYt7p0rQowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEzMffGoGeDWA0VVg+n4gfDJVX0lMB8GA1UdIwQY
MBaAFLDJm5Ucam9q3Mho2IWpQK3wBRoZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc01tYmxSeHFiMnJjeUdqWWhhbEFyZkFGR2hrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8wYTdiYmYtYmYyMC00MTE0LTk3MmMt
M2U2OTU2ZWQyYzZhLzEvc01tYmxSeHFiMnJjeUdqWWhhbEFyZkFGR2hrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8wYTdiYmYtYmYyMC00MTE0LTk3MmMtM2U2OTU2ZWQyYzZh
LzEvc01tYmxSeHFiMnJjeUdqWWhhbEFyZkFGR2hrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh4XGUQy7
zJeuvgHzfCGw5RJo8hVz3fD7v7siQuMh6KuY+wVrJZzSX47GXOP7RB+z12+TmdXI
p/gOr0SWTbE/87NyGxBJmf62K7GeSSnPBs0taHb+7GtWmoyEHnCRK4YQY1piZZyE
ToEu0HBZfIa8xJrTClRpVmeGRGesaIbJxBK1h4t1zmP8ahjRy/lY2qj38ktTXhWs
uWO1tcTRS7Y/fSZGV1O7AdycjOPIlz05QCQTuwEQTrhelqaRsaxtxO00PxetVFsV
A48oTfH8bCuSGfPmvBXLRw1nsbEtPg9yiaHvPwjr3SkAXnHeU84YRywa2eZdFd0y
1NG5vzO/096sfA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 21:32:39 2025 by rpki-client