Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.mft
File: SmPcZ1Ooy9dLdEUsFTbzfZxNxww.mft (raw, json)
Hash identifier: f4sPUmlf/MTaA0MoQZaTNgRqpOfeDJJMLyyJtr4o26Q=
Subject key identifier: F5:9D:D0:E6:D3:5D:A5:7F:2E:A0:BB:E4:9E:32:EE:0D:7D:43:17:99
Authority key identifier: 4A:63:DC:67:53:A8:CB:D7:4B:74:45:2C:15:36:F3:7D:9C:4D:C7:0C
Certificate issuer: /CN=4a63dc6753a8cbd74b74452c1536f37d9c4dc70c
Certificate serial: 0198D6CD04220F712C77AA736018045CA00B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.mft
Manifest number: 0B0D
Signing time: Sat 23 Aug 2025 12:00:16 +0000
Manifest this update: Sat 23 Aug 2025 12:00:16 +0000
Manifest next update: Sun 24 Aug 2025 12:00:16 +0000
Files and hashes: 1: SmPcZ1Ooy9dLdEUsFTbzfZxNxww.crl (hash: +Z/asS2bRSQ/HmY/nHnlq8iLEiSaayjRkBkFUKBz9KY=)
2: XWgrA6JE6hMs-fYR5JSr732MBIw.roa (hash: +T0dpzBRYum3dH9uf73tvrJYycbYVgdyC2zBV2vtA1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.mft
rsync://rpki.ripe.net/repository/DEFAULT/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:04:22:0f:71:2c:77:aa:73:60:18:04:5c:a0:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a63dc6753a8cbd74b74452c1536f37d9c4dc70c
Validity
Not Before: Aug 23 12:00:16 2025 GMT
Not After : Aug 24 12:00:16 2025 GMT
Subject: CN=f59dd0e6d35da57f2ea0bbe49e32ee0d7d431799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:1c:25:38:8d:4d:49:90:ea:3c:6a:b0:1c:c9:
29:c1:07:ca:76:13:4a:e5:d1:fb:fb:38:ec:ab:06:
a0:8a:2f:df:e7:db:6e:74:11:e6:93:a1:ee:c8:8b:
cc:7d:c5:f5:fe:30:9b:46:d8:eb:14:11:22:ce:99:
ee:9b:e2:3f:ae:80:87:56:15:a3:14:26:06:6e:80:
1d:ba:e6:e2:28:6d:54:2e:b1:47:a7:06:f9:e3:b7:
d4:62:71:7d:02:4b:df:bf:5a:b5:ba:39:4b:4f:3a:
e0:d0:59:ae:7c:a9:52:dc:7b:5f:cf:55:18:e5:f1:
f2:2c:e9:13:e2:60:b9:ba:74:b5:26:c5:37:ac:b0:
d3:33:06:41:54:0a:46:ad:e2:7e:75:a5:75:39:e8:
00:e4:7f:67:37:ee:fe:b9:ac:90:c6:30:49:d6:57:
f1:a2:91:38:6b:32:f9:0b:29:31:b3:eb:21:56:d5:
c4:0a:06:6a:68:16:38:e1:6f:a0:ea:5c:23:de:a5:
cf:b4:3f:1a:7b:e3:b5:08:e5:7d:af:59:bb:91:3d:
f1:be:34:4a:b9:5d:e7:33:db:46:bc:e7:30:4b:68:
85:83:2c:79:d6:ae:5d:a0:a4:35:1b:2f:4e:4e:d5:
72:ed:01:0e:77:5f:73:06:8a:db:97:1d:93:b8:e8:
66:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:9D:D0:E6:D3:5D:A5:7F:2E:A0:BB:E4:9E:32:EE:0D:7D:43:17:99
X509v3 Authority Key Identifier:
keyid:4A:63:DC:67:53:A8:CB:D7:4B:74:45:2C:15:36:F3:7D:9C:4D:C7:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:de:34:00:eb:c8:3a:6a:88:c8:10:1e:a5:af:fe:a5:6a:f7:
bd:55:b8:36:2e:1e:d0:64:4e:f9:86:58:d5:3b:0e:2d:e3:a1:
43:8a:01:ff:b5:0f:47:f4:bc:e4:b8:88:88:0e:86:fc:c6:1d:
1b:bb:79:d3:64:7b:df:e9:24:81:1c:b6:f0:14:ba:43:ec:99:
84:04:a0:58:47:b5:fc:d8:2c:2b:b7:da:ab:6d:df:06:26:83:
87:6c:07:66:91:3d:d5:a2:99:3e:5a:c0:f8:6e:9c:ef:20:81:
97:67:71:14:9b:1d:20:c2:e6:bd:c6:a8:85:2f:1e:13:64:79:
32:92:0d:9c:41:e0:bb:ea:87:09:41:0c:ee:d9:6b:41:a2:32:
89:71:60:fe:e1:08:e9:50:07:33:89:bc:55:7e:7c:12:01:78:
0d:56:c8:92:98:2a:fd:62:27:22:31:4e:2a:7f:f6:e2:6d:11:
95:e3:2c:a8:87:99:6c:48:57:2f:5a:66:b4:66:97:cf:6a:d9:
fc:fa:ea:97:14:db:09:2d:fb:17:7e:4a:1a:fc:2d:84:b9:08:
73:e6:d3:a4:7f:58:98:1c:35:81:57:cc:b6:d5:af:23:97:d8:
53:a3:ba:c5:9f:e3:37:d9:eb:ba:86:1f:8a:b2:95:04:8f:19:
c7:d4:a3:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWzQQiD3Esd6pzYBgEXKALMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNjNkYzY3NTNhOGNiZDc0Yjc0NDUyYzE1MzZmMzdkOWM0
ZGM3MGMwHhcNMjUwODIzMTIwMDE2WhcNMjUwODI0MTIwMDE2WjAzMTEwLwYDVQQD
EyhmNTlkZDBlNmQzNWRhNTdmMmVhMGJiZTQ5ZTMyZWUwZDdkNDMxNzk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8BwlOI1NSZDqPGqwHMkpwQfKdhNK
5dH7+zjsqwagii/f59tudBHmk6HuyIvMfcX1/jCbRtjrFBEizpnum+I/roCHVhWj
FCYGboAduubiKG1ULrFHpwb547fUYnF9Akvfv1q1ujlLTzrg0FmufKlS3Htfz1UY
5fHyLOkT4mC5unS1JsU3rLDTMwZBVApGreJ+daV1OegA5H9nN+7+uayQxjBJ1lfx
opE4azL5Cykxs+shVtXECgZqaBY44W+g6lwj3qXPtD8ae+O1COV9r1m7kT3xvjRK
uV3nM9tGvOcwS2iFgyx51q5doKQ1Gy9OTtVy7QEOd19zBorblx2TuOhmpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPWd0ObTXaV/LqC75J4y7g19QxeZMB8GA1UdIwQY
MBaAFEpj3GdTqMvXS3RFLBU2832cTccMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU21QY1oxT295OWRMZEVVc0ZUYnpmWnhOeHd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni80ZjAzMzUtZTg2MC00NjE5LTkzODAt
ZTM0MWIwZjkxNWQzLzEvU21QY1oxT295OWRMZEVVc0ZUYnpmWnhOeHd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni80ZjAzMzUtZTg2MC00NjE5LTkzODAtZTM0MWIwZjkxNWQz
LzEvU21QY1oxT295OWRMZEVVc0ZUYnpmWnhOeHd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsd40AOvI
OmqIyBAepa/+pWr3vVW4Ni4e0GRO+YZY1TsOLeOhQ4oB/7UPR/S85LiIiA6G/MYd
G7t502R73+kkgRy28BS6Q+yZhASgWEe1/NgsK7faq23fBiaDh2wHZpE91aKZPlrA
+G6c7yCBl2dxFJsdIMLmvcaohS8eE2R5MpINnEHgu+qHCUEM7tlrQaIyiXFg/uEI
6VAHM4m8VX58EgF4DVbIkpgq/WInIjFOKn/24m0RleMsqIeZbEhXL1pmtGaXz2rZ
/PrqlxTbCS37F35KGvwthLkIc+bTpH9YmBw1gVfMttWvI5fYU6O6xZ/jN9nruoYf
irKVBI8Zx9SjEg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:44:43 2025 by rpki-client