Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft
File: SM83s2Rv2pPL3QuKrM__MTpvcY8.mft (raw, json)
Hash identifier: Ux2jchfUYtF37VoIyqccE7lNNBAjL7DNJN17GxJhto0=
Subject key identifier: 0F:D2:BB:4A:56:60:FB:21:CA:D2:20:92:3D:90:18:B2:2B:77:C6:D3
Authority key identifier: 48:CF:37:B3:64:6F:DA:93:CB:DD:0B:8A:AC:CF:FF:31:3A:6F:71:8F
Certificate issuer: /CN=48cf37b3646fda93cbdd0b8aaccfff313a6f718f
Certificate serial: 019A0110ED9A4063A61C49497E85FCAC1D78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SM83s2Rv2pPL3QuKrM__MTpvcY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft
Manifest number: 167D
Signing time: Mon 20 Oct 2025 10:01:17 +0000
Manifest this update: Mon 20 Oct 2025 10:01:17 +0000
Manifest next update: Tue 21 Oct 2025 10:01:17 +0000
Files and hashes: 1: Os6xDD1H4LsrEU2Pwmq0YT-o8IM.roa (hash: 9WTAK5WFdauUxfw4Aw74xq8JjOOgRjy/Qe/px+Cijao=)
2: SM83s2Rv2pPL3QuKrM__MTpvcY8.crl (hash: q5JzNgu2xJlVZ2XojoFPWY4s5lDTDTeYBK0hxEBai9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SM83s2Rv2pPL3QuKrM__MTpvcY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:10:ed:9a:40:63:a6:1c:49:49:7e:85:fc:ac:1d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48cf37b3646fda93cbdd0b8aaccfff313a6f718f
Validity
Not Before: Oct 20 10:01:17 2025 GMT
Not After : Oct 21 10:01:17 2025 GMT
Subject: CN=0fd2bb4a5660fb21cad220923d9018b22b77c6d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2d:32:a7:a8:e4:3f:2b:3e:ab:aa:c8:2d:9c:
d6:b9:99:42:ee:37:cd:e3:e6:99:b3:80:d3:49:a6:
23:a6:89:6d:1d:0e:06:5a:f7:e6:5c:45:6b:91:cf:
46:b4:95:ff:8e:45:09:c5:1e:ac:b7:d8:95:97:1f:
2b:c2:b3:20:c1:22:97:22:5c:81:df:0f:ec:4c:08:
eb:76:72:4d:33:60:48:37:90:46:49:b9:ef:aa:d7:
54:c1:bf:c8:c9:79:fd:b1:1f:cc:0c:3f:46:cf:c8:
4f:e7:2c:06:58:7a:c6:3f:54:be:23:e0:c3:69:89:
21:16:9d:d2:e3:55:bc:62:6c:dd:8e:4a:d5:fd:0b:
7a:da:c4:e6:e6:95:6e:4e:56:0d:8f:22:6f:ce:3f:
39:05:46:1c:13:5f:80:4f:f8:40:87:df:c9:a0:bd:
9d:12:43:18:ed:3c:4b:c5:36:a5:5e:72:c1:aa:2f:
79:98:d5:c8:3e:bd:80:0e:a2:ce:0b:62:b3:95:9e:
0e:e5:44:a0:3b:26:e1:3d:f7:2c:78:d6:38:84:4a:
a3:e2:f3:d1:19:31:25:52:1c:de:03:ad:40:d1:7a:
c8:fd:b7:df:51:60:2e:e6:7d:ab:35:39:c0:f9:39:
f3:0e:bf:45:f8:f2:dc:83:ae:71:7c:34:74:42:f6:
c9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D2:BB:4A:56:60:FB:21:CA:D2:20:92:3D:90:18:B2:2B:77:C6:D3
X509v3 Authority Key Identifier:
keyid:48:CF:37:B3:64:6F:DA:93:CB:DD:0B:8A:AC:CF:FF:31:3A:6F:71:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SM83s2Rv2pPL3QuKrM__MTpvcY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:5e:41:8b:51:f6:0d:96:6a:81:a0:0d:f2:8a:41:60:f7:d2:
09:8b:7f:1a:64:b8:38:dc:63:68:ae:a6:a2:91:ea:37:c7:c7:
82:21:8c:2a:e3:12:cc:98:4c:4c:06:e3:d4:1b:fc:fe:d5:73:
46:91:bb:0e:04:c2:f5:c9:21:5b:20:be:63:f6:a1:de:66:b1:
be:17:df:a6:ff:6c:6f:5e:b5:d6:aa:ac:4e:ca:d1:57:1d:62:
96:8d:99:04:e3:7f:46:fd:d8:7e:5a:61:1f:68:26:44:a6:db:
8e:d5:46:50:b8:12:6c:19:0e:3d:b8:ac:c6:9b:a6:8c:a4:23:
7d:ad:e2:69:87:94:2f:0b:35:83:d4:76:62:e6:19:fd:aa:ae:
d3:db:b5:ab:44:87:ef:2e:ca:05:63:c4:46:3a:ce:26:10:11:
f3:9d:11:df:f3:14:c7:61:84:60:41:a8:2b:fd:bd:60:a9:c2:
fc:32:8c:c0:f8:35:5e:8f:79:c2:9e:fe:c8:b9:bf:ee:dc:20:
ec:0b:92:d6:c2:87:82:f5:1b:d5:2b:20:49:34:65:18:61:46:
97:b0:8d:e3:66:60:a1:fc:f4:be:08:26:af:5e:5d:4d:46:77:
e1:8f:39:1b:20:70:ef:1f:ef:c6:c8:0d:7e:8e:81:d6:b5:16:
b1:8f:43:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoBEO2aQGOmHElJfoX8rB14MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4Y2YzN2IzNjQ2ZmRhOTNjYmRkMGI4YWFjY2ZmZjMxM2E2
ZjcxOGYwHhcNMjUxMDIwMTAwMTE3WhcNMjUxMDIxMTAwMTE3WjAzMTEwLwYDVQQD
EygwZmQyYmI0YTU2NjBmYjIxY2FkMjIwOTIzZDkwMThiMjJiNzdjNmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwS0yp6jkPys+q6rILZzWuZlC7jfN
4+aZs4DTSaYjpoltHQ4GWvfmXEVrkc9GtJX/jkUJxR6st9iVlx8rwrMgwSKXIlyB
3w/sTAjrdnJNM2BIN5BGSbnvqtdUwb/IyXn9sR/MDD9Gz8hP5ywGWHrGP1S+I+DD
aYkhFp3S41W8YmzdjkrV/Qt62sTm5pVuTlYNjyJvzj85BUYcE1+AT/hAh9/JoL2d
EkMY7TxLxTalXnLBqi95mNXIPr2ADqLOC2KzlZ4O5USgOybhPfcseNY4hEqj4vPR
GTElUhzeA61A0XrI/bffUWAu5n2rNTnA+TnzDr9F+PLcg65xfDR0QvbJZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA/Su0pWYPshytIgkj2QGLIrd8bTMB8GA1UdIwQY
MBaAFEjPN7Nkb9qTy90LiqzP/zE6b3GPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU004M3MyUnYycFBMM1F1S3JNX19NVHB2Y1k4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8yMGQ1OTMtNzIzZi00OTYzLTkwMWQt
MTdlMzE1ODk1NGRhLzEvU004M3MyUnYycFBMM1F1S3JNX19NVHB2Y1k4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS8yMGQ1OTMtNzIzZi00OTYzLTkwMWQtMTdlMzE1ODk1NGRh
LzEvU004M3MyUnYycFBMM1F1S3JNX19NVHB2Y1k4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHF5Bi1H2
DZZqgaAN8opBYPfSCYt/GmS4ONxjaK6mopHqN8fHgiGMKuMSzJhMTAbj1Bv8/tVz
RpG7DgTC9ckhWyC+Y/ah3maxvhffpv9sb1611qqsTsrRVx1ilo2ZBON/Rv3Yflph
H2gmRKbbjtVGULgSbBkOPbisxpumjKQjfa3iaYeULws1g9R2YuYZ/aqu09u1q0SH
7y7KBWPERjrOJhAR850R3/MUx2GEYEGoK/29YKnC/DKMwPg1Xo95wp7+yLm/7twg
7AuS1sKHgvUb1SsgSTRlGGFGl7CN42Zgofz0vggmr15dTUZ34Y85GyBw7x/vxsgN
fo6B1rUWsY9DFQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:43:40 2025 by rpki-client