Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.mft
File: smu0Mz7-nhTEgxsFghQW5cVb30I.mft (raw, json)
Hash identifier: pmig2MmdyGIF1tiBW8LUroOyijZ2Zo/8PEIdYnRzIm0=
Subject key identifier: D2:21:34:A5:BF:03:E8:EB:7F:6D:8C:DC:FB:44:95:09:0F:92:E9:E6
Authority key identifier: B2:6B:B4:33:3E:FE:9E:14:C4:83:1B:05:82:14:16:E5:C5:5B:DF:42
Certificate issuer: /CN=b26bb4333efe9e14c4831b05821416e5c55bdf42
Certificate serial: 0198D4E00A3045AE380BDBA5D53FEA064724
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/smu0Mz7-nhTEgxsFghQW5cVb30I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.mft
Manifest number: 1101
Signing time: Sat 23 Aug 2025 03:01:49 +0000
Manifest this update: Sat 23 Aug 2025 03:01:49 +0000
Manifest next update: Sun 24 Aug 2025 03:01:49 +0000
Files and hashes: 1: F_5jyI70I8rVjTf2ep027mY2RmU.roa (hash: P/CUUf/qaBdESN8cQx3ZzCN3CEChdcz8YXHGB8DZwPM=)
2: smu0Mz7-nhTEgxsFghQW5cVb30I.crl (hash: SxjUOmbzMVg2VKgthHWDiw2YiC+nehgFPzImuwH5NtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.mft
rsync://rpki.ripe.net/repository/DEFAULT/smu0Mz7-nhTEgxsFghQW5cVb30I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:0a:30:45:ae:38:0b:db:a5:d5:3f:ea:06:47:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b26bb4333efe9e14c4831b05821416e5c55bdf42
Validity
Not Before: Aug 23 03:01:49 2025 GMT
Not After : Aug 24 03:01:49 2025 GMT
Subject: CN=d22134a5bf03e8eb7f6d8cdcfb4495090f92e9e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fc:97:d4:3d:bb:ca:ad:24:f2:53:fc:df:81:
06:ee:84:bd:e8:31:6d:27:11:ca:5c:91:c1:6c:8e:
29:94:6c:8b:90:d7:6b:b3:f2:ff:be:48:46:5c:dc:
5f:67:1a:93:c1:18:13:a5:82:c5:14:dd:2f:b7:50:
a4:29:a7:39:83:31:e7:78:8d:f7:3d:17:f1:b6:45:
6f:bd:7e:0a:0a:37:bf:68:46:59:9e:90:84:c7:82:
bf:49:46:5e:ca:e5:f8:60:85:f9:6d:0a:03:78:0a:
3f:11:70:53:ef:9e:90:d0:a9:0e:f3:26:58:65:b1:
6a:a0:68:d2:0f:db:7e:31:69:cf:16:5c:4a:bb:b1:
cf:7c:25:85:fb:54:e2:d4:1c:ad:65:69:00:d5:11:
46:79:46:37:cb:0e:a9:ee:6a:ea:7d:42:b6:6b:5b:
95:df:15:ba:ae:c8:37:f8:73:91:9b:02:5b:4d:0d:
50:51:9c:67:07:57:85:0f:75:f4:b2:95:03:5f:2e:
22:da:db:d2:ad:b0:18:df:5a:13:3d:b7:1d:32:95:
83:f9:4b:01:64:8f:bf:87:da:5f:83:1c:4c:33:f5:
47:7b:e8:81:74:41:f1:43:73:48:63:04:b8:9e:5a:
4c:02:59:93:9e:d2:4b:44:2d:48:16:0b:c6:bf:79:
83:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:21:34:A5:BF:03:E8:EB:7F:6D:8C:DC:FB:44:95:09:0F:92:E9:E6
X509v3 Authority Key Identifier:
keyid:B2:6B:B4:33:3E:FE:9E:14:C4:83:1B:05:82:14:16:E5:C5:5B:DF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/smu0Mz7-nhTEgxsFghQW5cVb30I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:7c:e7:d6:8d:c9:4f:8d:2c:83:69:d4:6b:ac:d7:b2:83:ed:
aa:7f:54:3f:69:b5:b9:18:ec:21:09:70:78:51:ee:be:9b:44:
41:0c:6b:62:9d:76:dc:32:ea:3b:40:fa:78:46:ba:a1:bc:7f:
cf:c3:9b:00:6f:7b:1c:2f:02:27:31:c6:c4:47:ad:d0:79:7f:
55:7c:24:9a:bc:45:08:24:29:df:70:89:96:7f:fc:a7:ac:0a:
25:57:ee:de:ac:49:29:dd:22:35:fe:a9:60:bc:bc:df:5b:e6:
5c:32:62:0d:b1:76:fc:54:20:55:66:f1:cd:ad:e5:15:a5:60:
c9:c7:aa:53:f0:88:48:b8:2d:91:e8:64:58:8b:fd:8e:8e:05:
a0:39:6d:e6:21:69:42:a1:f9:f4:89:66:98:94:7f:0b:d4:33:
26:f8:0f:ad:bc:74:b6:6f:1d:0b:5d:11:f0:54:f0:6e:b7:1a:
d9:6e:b6:db:d3:2a:a0:3a:23:9a:06:49:8b:21:97:f2:c9:be:
ea:0d:de:7f:b4:3b:03:7b:65:b5:04:81:5b:cf:35:d3:5d:e1:
89:7b:8b:d5:6f:b8:ec:da:93:fa:79:03:8d:82:a7:69:49:f5:
ef:b0:ee:fc:2b:f9:71:fe:21:c3:f6:3d:67:28:56:a8:59:fd:
86:5c:9b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:29:26 2025 by rpki-client