Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/Sm8eAa8k15JJfXftH3mQrjphKQ0.mft
File: Sm8eAa8k15JJfXftH3mQrjphKQ0.mft (raw, json)
Hash identifier: RoE1CYKL1vzE8V28fcg6vGL2F6rE9FJ2MCh70W3KUts=
Subject key identifier: 42:4D:D5:70:42:76:CB:31:70:94:BB:E5:B4:40:D6:6A:1E:E2:59:5F
Authority key identifier: 4A:6F:1E:01:AF:24:D7:92:49:7D:77:ED:1F:79:90:AE:3A:61:29:0D
Certificate issuer: /CN=4a6f1e01af24d792497d77ed1f7990ae3a61290d
Certificate serial: 0198D73BD525EBA2E175CEBCE3D61EE4E56B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm8eAa8k15JJfXftH3mQrjphKQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/Sm8eAa8k15JJfXftH3mQrjphKQ0.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 14:01:19 +0000
Manifest this update: Sat 23 Aug 2025 14:01:19 +0000
Manifest next update: Sun 24 Aug 2025 14:01:19 +0000
Files and hashes: 1: Sm8eAa8k15JJfXftH3mQrjphKQ0.crl (hash: M3oeDSMT8uqBi9lluLvYJsYLJbErNkDax+kaoxAB2DQ=)
2: ukp1qSkbacWgh99iGDLbhVTGpfE.roa (hash: VZyI94Eyjd6/U3vi8uEiKE4SlR4D8n4H4v7qeg38d2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/Sm8eAa8k15JJfXftH3mQrjphKQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/Sm8eAa8k15JJfXftH3mQrjphKQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sm8eAa8k15JJfXftH3mQrjphKQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:d5:25:eb:a2:e1:75:ce:bc:e3:d6:1e:e4:e5:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a6f1e01af24d792497d77ed1f7990ae3a61290d
Validity
Not Before: Aug 23 14:01:19 2025 GMT
Not After : Aug 24 14:01:19 2025 GMT
Subject: CN=424dd5704276cb317094bbe5b440d66a1ee2595f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:df:a7:d5:fc:47:db:07:5f:ac:ed:0c:34:2d:
ee:f3:b7:cb:a9:b1:b7:04:4d:96:b8:b6:6d:e2:c3:
62:d8:ff:79:0f:6d:95:48:9b:28:a8:da:f4:ce:23:
79:cc:24:1b:eb:e1:0c:a7:f1:cc:d9:0c:7f:a3:91:
77:6a:e6:74:9f:11:90:f5:83:2d:6e:22:21:2d:54:
80:5a:1d:88:2f:d9:0e:28:18:7a:41:02:55:42:6f:
29:00:c0:c4:e7:f0:2e:27:e6:34:95:45:fd:a5:f0:
91:da:fa:d6:fe:e7:53:8e:62:3e:f1:7e:d4:5b:ae:
17:01:90:75:6a:0e:e8:8c:99:03:a4:aa:5c:13:d9:
a8:32:80:91:d2:5e:6d:61:b9:5b:8c:c7:25:60:b5:
2f:f1:af:c0:70:bd:1c:91:1b:63:66:cd:ef:9b:1c:
a6:54:e7:e8:ee:9d:5b:24:0f:a5:fe:e8:53:a1:bc:
83:38:a2:14:c6:07:b6:d6:d6:86:21:1b:37:34:21:
c6:e5:ca:ec:e7:80:86:ac:c8:38:2d:2c:32:32:6e:
15:da:9d:3e:57:65:1d:b3:d6:ea:b3:0d:1c:02:51:
5b:8f:02:0a:4d:76:bd:f0:80:fc:82:f4:aa:52:09:
9f:fb:46:6d:b3:09:13:b0:cc:92:22:0b:48:0a:6c:
a2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:4D:D5:70:42:76:CB:31:70:94:BB:E5:B4:40:D6:6A:1E:E2:59:5F
X509v3 Authority Key Identifier:
keyid:4A:6F:1E:01:AF:24:D7:92:49:7D:77:ED:1F:79:90:AE:3A:61:29:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm8eAa8k15JJfXftH3mQrjphKQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/Sm8eAa8k15JJfXftH3mQrjphKQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/Sm8eAa8k15JJfXftH3mQrjphKQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:89:35:77:86:8a:ad:c0:15:b6:99:9a:03:08:54:4c:2d:6c:
69:2b:37:bb:89:2d:87:fc:a1:dc:36:e5:26:01:aa:d9:b7:59:
29:10:65:06:69:b9:fd:2c:0e:f6:4b:ce:89:0a:fa:04:11:82:
42:3b:00:b6:8b:6f:be:64:e6:9a:7b:bd:1d:34:75:72:e2:89:
40:12:5e:27:a0:58:65:54:a5:e6:89:26:7c:e7:6b:00:1f:cc:
36:05:9d:ba:95:45:86:ed:8b:f5:03:7f:1c:df:20:a1:e6:5f:
fe:b8:7e:62:b2:ee:3b:41:02:c7:7c:1c:87:81:f9:cf:56:52:
d7:88:56:6b:c1:03:53:41:87:40:81:4c:d3:af:17:72:9a:78:
b3:df:ca:10:ba:88:4b:78:42:fe:a6:53:c3:e5:a9:65:4a:c7:
38:58:64:cd:90:dd:7f:2b:e0:bb:32:88:05:97:83:b3:a4:5b:
2e:ad:fb:5f:80:f9:62:d2:4c:cd:0c:32:f4:67:6c:4a:5d:3d:
7b:0c:37:d9:38:b6:eb:f2:38:f7:cc:a9:e4:54:96:18:77:8e:
00:a4:f2:b8:e8:cf:37:e5:02:85:a8:3c:bf:70:1b:b4:8c:54:
0d:4c:78:d2:01:d2:c8:36:dc:93:27:1a:72:4f:d6:d6:e1:fc:
41:8e:80:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:53:59 2025 by rpki-client