Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/ec8801-0a7c-487e-a103-525d7e22c788/1/smbm5NXff4olZUFEdV172ZLnNTk.mft
File: smbm5NXff4olZUFEdV172ZLnNTk.mft (raw, json)
Hash identifier: gc+fZtUIUrWIDDHt/6WKgPFdlIXO3SEZbRvKSGczELA=
Subject key identifier: 03:66:A7:0F:84:95:E8:7E:31:17:0B:64:53:A1:A2:1A:04:86:D4:F9
Authority key identifier: B2:66:E6:E4:D5:DF:7F:8A:25:65:41:44:75:5D:7B:D9:92:E7:35:39
Certificate issuer: /CN=b266e6e4d5df7f8a25654144755d7bd992e73539
Certificate serial: 0197B6A11EEC931DECA5F37470DAB7B1A729
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/smbm5NXff4olZUFEdV172ZLnNTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/ec8801-0a7c-487e-a103-525d7e22c788/1/smbm5NXff4olZUFEdV172ZLnNTk.mft
Manifest number: 08BE
Signing time: Sat 28 Jun 2025 13:01:41 +0000
Manifest this update: Sat 28 Jun 2025 13:01:41 +0000
Manifest next update: Sun 29 Jun 2025 13:01:41 +0000
Files and hashes: 1: 4UxBywVcvcMsb-HDJGoMszIr0uA.roa (hash: CPNjg2b32CAKEDe5pmcVPP+MsVRB7Gy+EYi43k44UBQ=)
2: smbm5NXff4olZUFEdV172ZLnNTk.crl (hash: 1A6sVKggZA+PYXurZ0/AhnsokMrDxydf1Cs4Qau/1ts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/ec8801-0a7c-487e-a103-525d7e22c788/1/smbm5NXff4olZUFEdV172ZLnNTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/ec8801-0a7c-487e-a103-525d7e22c788/1/smbm5NXff4olZUFEdV172ZLnNTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/smbm5NXff4olZUFEdV172ZLnNTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:1e:ec:93:1d:ec:a5:f3:74:70:da:b7:b1:a7:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b266e6e4d5df7f8a25654144755d7bd992e73539
Validity
Not Before: Jun 28 13:01:41 2025 GMT
Not After : Jun 29 13:01:41 2025 GMT
Subject: CN=0366a70f8495e87e31170b6453a1a21a0486d4f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e0:9b:2c:72:4e:05:88:66:5d:e3:2c:8e:cb:
a8:9d:9a:17:2d:0e:30:a3:0e:2c:c6:ac:27:0c:70:
62:1c:29:9b:09:8c:1e:6a:45:64:05:1c:54:4e:ae:
d0:07:8e:59:ff:77:b9:05:88:d9:b8:40:21:be:4f:
c7:64:fb:5b:17:67:6c:4f:6b:41:5d:d0:cd:ad:14:
e0:a1:2e:64:3e:0c:b3:24:b2:17:69:03:60:c1:1f:
e4:bc:0c:07:69:e5:15:48:92:e5:66:1c:98:36:e3:
c2:80:c4:94:0c:4a:ca:1c:f5:12:a6:42:f2:e1:4f:
17:1b:8e:72:14:91:14:4f:fc:56:42:8b:8b:23:6a:
42:44:c1:e0:ac:ac:1e:ed:e0:3d:f9:42:29:93:a6:
86:9d:8c:2a:72:90:98:42:66:7e:5e:4e:44:29:96:
74:d3:39:d3:6d:ef:4b:58:2a:4e:1e:e7:a7:9c:d1:
cd:96:55:74:aa:12:68:1a:fd:1a:e0:c2:b2:6a:28:
ef:c4:a3:44:ca:c0:8c:a1:54:d3:a3:ac:d3:55:d2:
09:25:d0:d2:6e:fb:3c:a1:c6:9d:ae:d1:cb:a8:bf:
a4:90:eb:26:71:a5:ce:57:4e:e6:85:31:0c:a1:04:
7c:a3:4c:7f:86:c8:e1:4e:2b:b8:cb:e9:1d:d7:0f:
a6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:66:A7:0F:84:95:E8:7E:31:17:0B:64:53:A1:A2:1A:04:86:D4:F9
X509v3 Authority Key Identifier:
keyid:B2:66:E6:E4:D5:DF:7F:8A:25:65:41:44:75:5D:7B:D9:92:E7:35:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/smbm5NXff4olZUFEdV172ZLnNTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ec8801-0a7c-487e-a103-525d7e22c788/1/smbm5NXff4olZUFEdV172ZLnNTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ec8801-0a7c-487e-a103-525d7e22c788/1/smbm5NXff4olZUFEdV172ZLnNTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:38:a7:0e:c6:25:02:3e:48:e0:24:ea:d4:7b:01:88:62:81:
80:63:f7:ad:56:a9:7b:f7:7c:be:bd:f5:33:7a:8e:5a:d7:f8:
ca:16:43:bd:d3:bd:1f:2e:2c:9c:02:2e:ff:13:85:9c:2c:5d:
ff:13:83:e9:75:de:31:ef:38:3d:04:3c:84:2e:e5:84:3c:b1:
d0:14:b4:d0:7b:b5:8d:46:b4:5d:4d:ed:c0:6f:e1:75:c7:99:
a1:4b:2e:26:52:06:92:f5:28:9d:2e:78:c6:c5:1f:d3:44:11:
05:b4:d9:1d:41:0c:81:33:2e:cb:37:c2:2f:e7:97:dc:25:1d:
31:9a:bb:b7:e7:1e:59:aa:fb:e2:85:1a:64:14:b0:74:d9:89:
70:38:8a:b6:fd:ad:84:bb:c1:40:17:01:80:78:ee:7b:fa:e3:
df:fe:96:2b:2a:dc:57:b6:41:56:76:9d:f4:49:ad:07:42:3f:
27:62:28:8f:49:d9:ab:93:ef:36:42:bb:bf:c1:f9:c7:7e:37:
cf:c3:f5:c8:b4:db:01:65:f8:ad:24:42:79:23:b6:88:ee:a5:
97:60:d4:97:87:c7:ed:5d:94:ea:4e:62:7b:8b:ef:f8:51:bc:
e0:e9:93:2e:ac:a7:4b:88:67:e8:13:95:6c:4c:c2:e9:1f:eb:
cc:ff:2c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:28:06 2025 by rpki-client