Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.mft
File: smu0Mz7-nhTEgxsFghQW5cVb30I.mft (raw, json)
Hash identifier: UMe6u1UaDpM8Kkt6dSJxe7MhqmExNG9eQa2f0A3hXEI=
Subject key identifier: B1:37:EA:F2:5E:2B:B6:8C:DD:0C:C2:45:A8:3E:D4:79:32:21:70:11
Authority key identifier: B2:6B:B4:33:3E:FE:9E:14:C4:83:1B:05:82:14:16:E5:C5:5B:DF:42
Certificate issuer: /CN=b26bb4333efe9e14c4831b05821416e5c55bdf42
Certificate serial: 0197C0B6793DCEB67920EC940FFE786B527F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/smu0Mz7-nhTEgxsFghQW5cVb30I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.mft
Manifest number: 1072
Signing time: Mon 30 Jun 2025 12:01:13 +0000
Manifest this update: Mon 30 Jun 2025 12:01:13 +0000
Manifest next update: Tue 01 Jul 2025 12:01:13 +0000
Files and hashes: 1: F_5jyI70I8rVjTf2ep027mY2RmU.roa (hash: P/CUUf/qaBdESN8cQx3ZzCN3CEChdcz8YXHGB8DZwPM=)
2: smu0Mz7-nhTEgxsFghQW5cVb30I.crl (hash: AzhH5QSQ9mX8oPnQm8JJV36jTnWChMnPTdt0c3Xrs3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.mft
rsync://rpki.ripe.net/repository/DEFAULT/smu0Mz7-nhTEgxsFghQW5cVb30I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 12:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:b6:79:3d:ce:b6:79:20:ec:94:0f:fe:78:6b:52:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b26bb4333efe9e14c4831b05821416e5c55bdf42
Validity
Not Before: Jun 30 12:01:13 2025 GMT
Not After : Jul 1 12:01:13 2025 GMT
Subject: CN=b137eaf25e2bb68cdd0cc245a83ed47932217011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0d:0b:dc:05:33:37:af:b1:9e:24:a1:e1:7c:
02:f8:8f:3d:e7:34:ee:fe:90:b7:df:eb:d9:52:1d:
d2:87:4c:03:0b:8b:06:d7:a0:cc:8d:b8:79:df:ae:
6d:5e:28:fc:d3:70:01:ca:1f:a1:50:06:51:77:aa:
18:44:4b:d6:96:c6:09:68:2e:db:cd:33:1b:77:96:
30:df:b2:08:9e:f0:d1:de:0c:00:8d:40:13:79:20:
2d:c4:5a:5d:c9:31:a2:ac:12:51:df:7a:a0:36:2d:
6a:07:20:f1:48:18:d5:95:ef:c8:4f:42:5e:47:dd:
45:4e:f2:f2:b0:90:20:1e:d6:e9:1f:fa:9b:2b:1b:
15:e0:1c:80:28:d9:9b:2e:44:3d:35:70:b4:fc:43:
61:49:98:20:fd:11:a4:b5:3f:f4:d7:46:82:73:c4:
ce:88:f1:4b:c0:65:49:7c:a4:e9:4a:2b:da:c6:a4:
22:88:63:c5:64:75:89:21:32:36:c6:91:d2:2f:a5:
f5:48:c8:5c:e9:08:bf:af:d7:fc:dd:0f:ae:e7:eb:
25:78:0f:08:a5:10:d2:9c:cb:c6:02:5c:ca:51:26:
de:49:0a:b2:e5:61:75:a2:a4:b1:e0:9a:8a:27:a8:
16:69:84:28:cd:9e:99:57:ca:f9:e8:3a:cb:8a:f5:
35:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:37:EA:F2:5E:2B:B6:8C:DD:0C:C2:45:A8:3E:D4:79:32:21:70:11
X509v3 Authority Key Identifier:
keyid:B2:6B:B4:33:3E:FE:9E:14:C4:83:1B:05:82:14:16:E5:C5:5B:DF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/smu0Mz7-nhTEgxsFghQW5cVb30I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:98:6f:f4:11:82:9d:83:65:92:dc:81:13:4b:e0:90:01:7f:
dd:42:91:9f:c5:a6:ad:db:c6:03:ac:95:0f:cd:a0:d7:8f:57:
87:9c:28:67:aa:dc:ac:b5:40:25:e6:2b:18:5a:a2:f2:89:6f:
d9:8c:cc:1f:00:31:bb:db:25:a4:7d:5c:d1:1e:5c:43:21:94:
58:78:e1:e7:e9:79:a2:5b:92:7f:da:f7:1f:5b:1e:9d:f7:a9:
fb:b1:21:66:c7:04:20:bf:42:8a:8a:72:81:a1:1e:c8:28:71:
33:d9:8a:46:07:5e:3d:e3:df:9f:da:eb:50:3c:04:5a:0f:81:
35:73:88:4c:67:66:34:c1:8a:6a:1c:4f:06:2d:53:5a:32:ba:
c3:c0:c5:99:8c:22:8c:f6:f9:57:2b:d2:4b:3a:ca:df:b0:b2:
e1:9e:e1:88:ec:e0:17:8b:0c:8d:7d:90:62:ec:28:ea:00:97:
5f:7f:23:c3:90:94:27:bd:d9:17:0e:92:b6:c4:f0:d2:c9:77:
29:a2:fb:32:b3:ef:a6:0a:0d:9b:d3:6a:9c:d6:2f:63:9f:6a:
3e:cb:bb:98:2a:13:96:46:93:ac:e0:f1:9b:1f:87:9b:21:34:
87:2d:2a:c4:e0:77:39:ab:f3:56:84:9b:ac:03:bc:6b:32:e7:
4c:55:16:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfAtnk9zrZ5IOyUD/54a1J/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyNmJiNDMzM2VmZTllMTRjNDgzMWIwNTgyMTQxNmU1YzU1
YmRmNDIwHhcNMjUwNjMwMTIwMTEzWhcNMjUwNzAxMTIwMTEzWjAzMTEwLwYDVQQD
EyhiMTM3ZWFmMjVlMmJiNjhjZGQwY2MyNDVhODNlZDQ3OTMyMjE3MDExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQ0L3AUzN6+xniSh4XwC+I895zTu
/pC33+vZUh3Sh0wDC4sG16DMjbh5365tXij803AByh+hUAZRd6oYREvWlsYJaC7b
zTMbd5Yw37IInvDR3gwAjUATeSAtxFpdyTGirBJR33qgNi1qByDxSBjVle/IT0Je
R91FTvLysJAgHtbpH/qbKxsV4ByAKNmbLkQ9NXC0/ENhSZgg/RGktT/010aCc8TO
iPFLwGVJfKTpSivaxqQiiGPFZHWJITI2xpHSL6X1SMhc6Qi/r9f83Q+u5+sleA8I
pRDSnMvGAlzKUSbeSQqy5WF1oqSx4JqKJ6gWaYQozZ6ZV8r56DrLivU1wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLE36vJeK7aM3QzCRag+1HkyIXARMB8GA1UdIwQY
MBaAFLJrtDM+/p4UxIMbBYIUFuXFW99CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc211ME16Ny1uaFRFZ3hzRmdoUVc1Y1ZiMzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9hZDEzMDEtMTQ5Yy00YzIxLTk4YjMt
NDQ2YTg5MTNkNGI4LzEvc211ME16Ny1uaFRFZ3hzRmdoUVc1Y1ZiMzBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS9hZDEzMDEtMTQ5Yy00YzIxLTk4YjMtNDQ2YTg5MTNkNGI4
LzEvc211ME16Ny1uaFRFZ3hzRmdoUVc1Y1ZiMzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALphv9BGC
nYNlktyBE0vgkAF/3UKRn8WmrdvGA6yVD82g149Xh5woZ6rcrLVAJeYrGFqi8olv
2YzMHwAxu9slpH1c0R5cQyGUWHjh5+l5oluSf9r3H1senfep+7EhZscEIL9Ciopy
gaEeyChxM9mKRgdePePfn9rrUDwEWg+BNXOITGdmNMGKahxPBi1TWjK6w8DFmYwi
jPb5VyvSSzrK37Cy4Z7hiOzgF4sMjX2QYuwo6gCXX38jw5CUJ73ZFw6StsTw0sl3
KaL7MrPvpgoNm9NqnNYvY59qPsu7mCoTlkaTrODxmx+HmyE0hy0qxOB3OavzVoSb
rAO8azLnTFUWAw==
-----END CERTIFICATE-----
Generated at Mon Jun 30 21:46:50 2025 by rpki-client