
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/Sm8eAa8k15JJfXftH3mQrjphKQ0.mft
File: Sm8eAa8k15JJfXftH3mQrjphKQ0.mft (raw, json)
Hash identifier: +wL46P2Q8MLLYr7z3fRHBe83IEqvRnDoDoG4UTMxG5E=
Subject key identifier: 0C:73:D0:45:AF:57:AE:BF:BF:32:65:AC:A0:1A:C6:0F:C1:D5:3A:82
Authority key identifier: 4A:6F:1E:01:AF:24:D7:92:49:7D:77:ED:1F:79:90:AE:3A:61:29:0D
Certificate issuer: /CN=4a6f1e01af24d792497d77ed1f7990ae3a61290d
Certificate serial: 0197B77CA54A6AFC04A8E4067A7F535B16AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm8eAa8k15JJfXftH3mQrjphKQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/Sm8eAa8k15JJfXftH3mQrjphKQ0.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 17:01:28 +0000
Manifest this update: Sat 28 Jun 2025 17:01:28 +0000
Manifest next update: Sun 29 Jun 2025 17:01:28 +0000
Files and hashes: 1: Sm8eAa8k15JJfXftH3mQrjphKQ0.crl (hash: x314tFH4vfgCErUQrWdi1o6/DFOHjsPmLR49pRI+ex4=)
2: ukp1qSkbacWgh99iGDLbhVTGpfE.roa (hash: VZyI94Eyjd6/U3vi8uEiKE4SlR4D8n4H4v7qeg38d2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/Sm8eAa8k15JJfXftH3mQrjphKQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/Sm8eAa8k15JJfXftH3mQrjphKQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sm8eAa8k15JJfXftH3mQrjphKQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:a5:4a:6a:fc:04:a8:e4:06:7a:7f:53:5b:16:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a6f1e01af24d792497d77ed1f7990ae3a61290d
Validity
Not Before: Jun 28 17:01:28 2025 GMT
Not After : Jun 29 17:01:28 2025 GMT
Subject: CN=0c73d045af57aebfbf3265aca01ac60fc1d53a82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f4:44:3c:af:cf:de:c5:6c:f5:c2:1d:0e:33:
2e:b3:2f:46:7e:ce:39:cd:17:0d:ff:22:f9:2e:8d:
23:16:f2:ba:08:30:ec:dd:13:74:b4:a4:32:d5:37:
c1:8c:1b:bb:98:fe:53:06:0f:77:7a:a6:07:bc:f3:
ec:12:82:0f:0c:b6:17:d7:59:77:e7:65:c0:41:7e:
a8:dc:e5:38:f0:13:50:9b:5e:ee:c1:a3:4a:0d:f7:
d7:9e:27:2f:92:53:bf:88:39:a9:06:bb:8a:fa:c2:
36:78:3c:54:08:18:89:ee:a0:fe:81:59:c5:23:c9:
e6:dd:c8:04:aa:75:64:0b:7b:54:b1:a7:cf:69:d9:
c3:f0:bc:59:f4:06:a2:63:e4:6f:77:48:68:00:4a:
4c:08:3a:d1:e5:76:7e:08:a1:d0:6d:f1:67:de:ef:
7c:6b:17:3b:8e:1a:61:d8:fb:78:69:4a:18:d7:42:
64:c9:d9:3c:ad:90:0c:45:2a:df:f5:71:ca:1a:c6:
42:46:a5:d2:80:b3:42:db:96:9a:35:b0:5b:1d:1c:
7c:2a:64:e1:b9:d2:79:ed:73:aa:9a:34:03:ce:8b:
60:ea:f2:d3:b5:4b:15:ac:23:2d:13:e1:af:5b:69:
28:ae:6b:cd:6b:2a:8d:00:28:50:53:12:2d:7a:a4:
7b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:73:D0:45:AF:57:AE:BF:BF:32:65:AC:A0:1A:C6:0F:C1:D5:3A:82
X509v3 Authority Key Identifier:
keyid:4A:6F:1E:01:AF:24:D7:92:49:7D:77:ED:1F:79:90:AE:3A:61:29:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm8eAa8k15JJfXftH3mQrjphKQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/Sm8eAa8k15JJfXftH3mQrjphKQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fc1adc-ccd8-4aa6-b54d-04d362a2858d/1/Sm8eAa8k15JJfXftH3mQrjphKQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:89:98:8c:0c:8d:93:48:f2:7c:3f:3b:0c:92:96:9d:54:f1:
2e:67:fb:2e:58:37:7a:d5:51:19:8a:79:f0:bf:e4:20:b4:07:
ef:26:90:19:38:e7:08:e1:7a:2e:a6:01:30:a3:e9:a1:2a:7d:
46:da:74:dc:df:47:a9:fa:41:a4:e0:9f:26:4b:fe:73:d5:14:
8e:c2:f4:59:c6:0c:a3:c0:70:6f:61:af:21:56:61:2f:20:8a:
e7:f2:46:fb:b7:21:07:e8:b0:03:6e:06:1d:86:df:51:08:b7:
76:a0:e8:46:95:0c:83:78:3e:9b:64:bb:a4:b6:d4:12:5b:55:
99:a7:8e:39:b8:57:e8:ed:d3:c4:0f:10:dd:7f:6f:01:d8:b6:
38:71:f4:b3:92:42:1c:47:3a:f0:b0:52:c7:26:31:77:ca:4f:
86:14:63:7c:8c:0f:7a:10:5a:1c:1f:90:15:0a:a0:16:f6:8e:
43:c4:c5:08:a5:8a:b5:af:54:3f:a5:52:b0:2c:08:df:56:f4:
87:3a:3b:0d:62:6f:eb:37:29:cc:cb:0c:ea:a6:1c:b4:2f:e6:
1d:41:b1:73:55:46:08:95:25:c1:f0:3b:da:71:a8:57:3f:00:
fc:09:92:b4:13:91:8f:88:0e:5d:61:27:c8:93:ad:b4:36:14:
5f:ee:8d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:00:25 2025 by rpki-client