Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/444437-6843-4ad4-b764-79cc52c06d4f/1/szmLWx2aluQRW3vPb8pj-69jnKc.mft
File: szmLWx2aluQRW3vPb8pj-69jnKc.mft (raw, json)
Hash identifier: MLKkv4Lva+D/5AIVV9Po2F7atW38LZmBhaoEeDw/TVw=
Subject key identifier: 21:7D:24:0E:C8:1D:FC:7B:EC:02:F0:45:27:4D:53:06:48:91:BB:1C
Authority key identifier: B3:39:8B:5B:1D:9A:96:E4:11:5B:7B:CF:6F:CA:63:FB:AF:63:9C:A7
Certificate issuer: /CN=b3398b5b1d9a96e4115b7bcf6fca63fbaf639ca7
Certificate serial: 0199FDD9D3F93AA85B4C49A3858E5BC72B0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/szmLWx2aluQRW3vPb8pj-69jnKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/444437-6843-4ad4-b764-79cc52c06d4f/1/szmLWx2aluQRW3vPb8pj-69jnKc.mft
Manifest number: 11E0
Signing time: Sun 19 Oct 2025 19:02:15 +0000
Manifest this update: Sun 19 Oct 2025 19:02:15 +0000
Manifest next update: Mon 20 Oct 2025 19:02:15 +0000
Files and hashes: 1: 3Uvg-SGM_zlK_SKX6X83CL5pES4.roa (hash: txSz1BVeFo/z2vKlSjUFGN00mKoCcahrUY9+MYjGUZA=)
2: szmLWx2aluQRW3vPb8pj-69jnKc.crl (hash: YN6uYkAFjMTRcJj2DgJGkqd61gUpw6agouJRnR6hYOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/444437-6843-4ad4-b764-79cc52c06d4f/1/szmLWx2aluQRW3vPb8pj-69jnKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/444437-6843-4ad4-b764-79cc52c06d4f/1/szmLWx2aluQRW3vPb8pj-69jnKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/szmLWx2aluQRW3vPb8pj-69jnKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:d3:f9:3a:a8:5b:4c:49:a3:85:8e:5b:c7:2b:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3398b5b1d9a96e4115b7bcf6fca63fbaf639ca7
Validity
Not Before: Oct 19 19:02:15 2025 GMT
Not After : Oct 20 19:02:15 2025 GMT
Subject: CN=217d240ec81dfc7bec02f045274d53064891bb1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fc:b7:57:27:22:fc:a5:14:7b:29:8b:47:08:
06:95:e2:49:3e:75:d3:3f:57:3d:9c:df:3c:a6:fc:
e9:14:0d:65:ef:74:d9:ab:6e:1c:ba:fa:42:ef:11:
75:a5:1b:48:0e:bb:c8:90:64:73:ed:82:8f:5a:ef:
54:3d:66:2b:15:e5:73:c2:db:f5:b4:a9:e1:d1:ac:
f4:c4:2e:cb:58:44:73:a4:31:96:f3:fd:fd:e6:1d:
6d:fd:96:b0:61:f1:e4:fb:f2:ee:b2:2e:df:d1:cf:
90:58:cd:88:37:7f:3e:7d:bc:e4:90:68:25:61:66:
51:d1:17:46:e0:d5:ce:54:5f:ae:c7:f3:af:cd:13:
ea:c1:68:83:db:79:6a:45:ce:61:87:54:11:29:90:
bf:d8:14:73:25:8b:46:e7:15:f4:0b:aa:31:74:ff:
72:c2:d8:fa:2f:01:f8:6d:db:2d:bc:e2:32:59:70:
c6:ba:77:e7:5a:bd:fe:ca:6c:c3:a2:32:5e:05:17:
53:c9:b0:cf:c9:d0:7f:a7:95:61:65:53:32:74:0e:
3c:c6:aa:18:43:2d:51:d2:04:1a:eb:c8:70:69:b6:
49:98:bb:89:f9:27:3f:9d:df:39:e9:50:21:c3:97:
90:99:73:01:77:8c:ab:46:c5:fd:6a:7c:5c:ce:b6:
07:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:7D:24:0E:C8:1D:FC:7B:EC:02:F0:45:27:4D:53:06:48:91:BB:1C
X509v3 Authority Key Identifier:
keyid:B3:39:8B:5B:1D:9A:96:E4:11:5B:7B:CF:6F:CA:63:FB:AF:63:9C:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/szmLWx2aluQRW3vPb8pj-69jnKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/444437-6843-4ad4-b764-79cc52c06d4f/1/szmLWx2aluQRW3vPb8pj-69jnKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/444437-6843-4ad4-b764-79cc52c06d4f/1/szmLWx2aluQRW3vPb8pj-69jnKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:d2:a7:54:48:1b:09:0c:46:a8:1b:13:20:00:f0:4c:e4:bb:
d3:99:04:80:8e:ca:73:72:03:27:01:8c:78:15:54:5c:c8:24:
81:99:c7:f5:94:17:09:4e:dd:9a:25:16:eb:3b:4b:95:e8:ec:
bf:34:5f:07:22:5c:5c:5f:51:39:13:8b:37:ec:c3:31:95:40:
61:8f:b6:4b:1a:06:c0:f2:bc:20:68:81:a1:dd:be:42:c4:0a:
c2:ec:a3:97:9c:8a:e0:da:af:c1:e1:10:3b:72:d8:a5:cb:0e:
6e:a7:93:9e:d5:50:4b:4c:b4:3c:8c:a6:8d:84:32:39:a1:dc:
24:02:4d:2c:6f:64:8f:cc:0e:38:bc:1d:3b:04:63:97:80:80:
31:bc:0e:8e:4a:20:e0:bf:96:70:af:2d:fc:9a:96:02:dc:ff:
b1:17:1b:ec:db:2d:1e:b9:1a:a5:40:f6:ca:e7:a1:02:5b:06:
fa:49:a8:bd:06:35:19:82:74:5c:44:bd:ce:de:46:d9:2c:28:
00:e3:80:76:f6:ad:09:94:70:f2:b5:30:fb:0f:b4:0a:da:1f:
c9:91:e3:00:11:f5:08:3e:c7:2e:f4:87:39:c4:e1:f3:70:3f:
dd:a6:61:bf:a3:87:c2:56:48:d9:2b:1b:98:a0:b4:2e:dd:9e:
9d:ef:24:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:59:27 2025 by rpki-client