Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.mft
File: smu0Mz7-nhTEgxsFghQW5cVb30I.mft (raw, json)
Hash identifier: mZWdmRfPDYZrUCt4aDWqznI4cq2qEvG8rKHcNZZ59F8=
Subject key identifier: D0:99:2E:04:22:8B:85:C5:DD:0C:A1:4F:99:3E:C2:91:B5:E1:18:3D
Authority key identifier: B2:6B:B4:33:3E:FE:9E:14:C4:83:1B:05:82:14:16:E5:C5:5B:DF:42
Certificate issuer: /CN=b26bb4333efe9e14c4831b05821416e5c55bdf42
Certificate serial: 0199FC583E399C3A15C81CA2B826CA5AC20B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/smu0Mz7-nhTEgxsFghQW5cVb30I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.mft
Manifest number: 119A
Signing time: Sun 19 Oct 2025 12:01:05 +0000
Manifest this update: Sun 19 Oct 2025 12:01:05 +0000
Manifest next update: Mon 20 Oct 2025 12:01:05 +0000
Files and hashes: 1: F_5jyI70I8rVjTf2ep027mY2RmU.roa (hash: P/CUUf/qaBdESN8cQx3ZzCN3CEChdcz8YXHGB8DZwPM=)
2: smu0Mz7-nhTEgxsFghQW5cVb30I.crl (hash: WYQ88WO6/lEFZFGCzxsLLrgZF7FehO5r8YC4McQEYPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.mft
rsync://rpki.ripe.net/repository/DEFAULT/smu0Mz7-nhTEgxsFghQW5cVb30I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:3e:39:9c:3a:15:c8:1c:a2:b8:26:ca:5a:c2:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b26bb4333efe9e14c4831b05821416e5c55bdf42
Validity
Not Before: Oct 19 12:01:05 2025 GMT
Not After : Oct 20 12:01:05 2025 GMT
Subject: CN=d0992e04228b85c5dd0ca14f993ec291b5e1183d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:be:fe:5a:0e:c5:b4:bf:90:0c:3f:48:f6:b2:
ce:3c:79:4d:d5:1e:6c:82:5d:e7:eb:34:34:c5:15:
ce:1e:36:2d:af:f7:9c:57:d7:e7:17:d2:2e:72:df:
25:fa:9c:1f:3e:23:0f:ad:34:12:c7:cc:c8:7e:5d:
f8:bb:36:2c:ea:c9:d8:24:a5:d7:66:5b:ae:64:74:
3a:83:44:e8:c7:e0:cd:9d:68:b2:07:c4:ac:d5:a8:
2a:2b:5b:f0:c0:eb:ba:95:11:51:f3:78:ce:6b:30:
3e:84:b9:bf:28:de:f7:dd:ec:3c:5c:21:e8:e7:de:
10:2b:3b:f8:20:1c:83:f7:7c:ce:6d:b9:db:cc:90:
d9:79:cd:77:e5:ad:e1:29:c0:75:2f:e9:8b:ac:2f:
0b:72:b9:20:68:28:19:59:65:61:e6:7d:b4:68:8a:
ea:0a:1f:d8:9b:89:90:4c:ed:91:ac:9a:25:e6:2b:
bf:d5:9f:89:ec:09:7b:02:8e:a9:98:0f:73:a8:84:
56:83:22:34:7c:f5:c8:fc:50:6a:a1:cc:56:1c:eb:
ef:c9:1c:b5:aa:f1:78:72:f3:29:57:ec:4a:19:4a:
57:6f:ac:fc:2d:c6:49:7a:9b:ba:53:3c:91:b7:e9:
12:cd:ba:56:0b:88:ed:71:59:00:1d:40:39:6e:b1:
57:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:99:2E:04:22:8B:85:C5:DD:0C:A1:4F:99:3E:C2:91:B5:E1:18:3D
X509v3 Authority Key Identifier:
keyid:B2:6B:B4:33:3E:FE:9E:14:C4:83:1B:05:82:14:16:E5:C5:5B:DF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/smu0Mz7-nhTEgxsFghQW5cVb30I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:a3:1b:ac:2c:a3:f7:b4:9d:e7:0d:5a:31:44:b2:de:48:d8:
d9:05:ae:03:bc:41:88:ac:b2:f1:d0:d5:ba:fc:85:c9:bb:50:
bd:7c:69:8b:1c:2c:46:5f:27:10:85:4f:e3:cf:4c:0f:b2:01:
24:88:61:be:58:d0:d8:d3:1b:d2:af:27:25:a1:b8:ab:67:00:
b0:98:6b:94:8a:af:00:89:40:b1:21:9e:97:52:7d:29:00:3f:
ca:d9:fd:13:59:9f:85:a5:88:cb:53:0e:52:90:e5:0f:3b:c6:
bd:ea:d2:dc:30:13:e2:72:52:6e:df:f6:5f:40:f4:69:b1:0b:
fd:44:0d:a2:65:21:0b:14:8f:11:96:01:e9:61:1c:ab:32:a5:
6d:76:4b:f1:3e:34:70:db:b1:f3:c8:27:4b:65:87:ef:87:90:
85:31:4c:58:39:ad:60:9c:bb:73:2f:9e:3c:d0:52:11:e7:d3:
69:1c:a3:1d:25:84:3a:e0:4b:78:4d:a4:c7:56:00:f7:9f:94:
cb:48:ab:2e:fa:65:32:e0:4a:66:8a:15:53:02:03:17:65:b1:
62:c4:0f:db:3e:45:af:2d:c4:04:3c:50:1c:d3:70:23:9f:e1:
ee:e1:6f:fc:83:42:4d:3e:99:cb:ba:04:a5:84:82:87:70:ff:
a4:c1:8d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:58:45 2025 by rpki-client