Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.mft
File: sMXmrlmHEAZksjA0zvxy1H-PS5s.mft (raw, json)
Hash identifier: +r1oEG/y7Lj/DMvYU+c4BH4ce9Rm/a2QxHCGKgWuSK0=
Subject key identifier: 7E:1C:54:75:54:B3:85:E5:94:25:1E:1C:84:98:93:06:87:AE:22:EE
Authority key identifier: B0:C5:E6:AE:59:87:10:06:64:B2:30:34:CE:FC:72:D4:7F:8F:4B:9B
Certificate issuer: /CN=b0c5e6ae5987100664b23034cefc72d47f8f4b9b
Certificate serial: 0198D6607D256EE1063547D3FE71E760D13A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMXmrlmHEAZksjA0zvxy1H-PS5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 10:01:44 +0000
Manifest this update: Sat 23 Aug 2025 10:01:44 +0000
Manifest next update: Sun 24 Aug 2025 10:01:44 +0000
Files and hashes: 1: Xpu5z6C93G9BRUn-gmewTXpV4p4.roa (hash: HRJgPQbn7ofu1m7IlOj+BpfT6NzW9G/pwBr/coPVab0=)
2: sMXmrlmHEAZksjA0zvxy1H-PS5s.crl (hash: QB8vxoGIrahqNKiHIlTtYr7VcIzFWDarG1wP7oEhjgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/sMXmrlmHEAZksjA0zvxy1H-PS5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:7d:25:6e:e1:06:35:47:d3:fe:71:e7:60:d1:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c5e6ae5987100664b23034cefc72d47f8f4b9b
Validity
Not Before: Aug 23 10:01:44 2025 GMT
Not After : Aug 24 10:01:44 2025 GMT
Subject: CN=7e1c547554b385e594251e1c8498930687ae22ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:05:04:b2:01:b6:cd:e3:01:62:ca:77:cb:ac:
c2:1d:3f:03:54:6b:24:a6:ff:df:f2:c9:88:6a:81:
0b:2d:52:ae:a4:da:a4:3d:24:c3:ae:e6:10:3a:28:
71:74:5f:9d:b8:be:59:fe:89:51:29:a7:83:45:fc:
9a:34:f4:e1:f5:d9:cf:af:72:c7:3c:b2:33:a3:b2:
9d:52:da:84:c5:37:6e:8a:a4:90:53:a3:d6:64:1e:
ea:1c:07:e0:34:93:d2:96:ad:e9:78:41:68:1f:69:
92:89:80:78:b4:6b:82:6d:4e:73:d5:6b:19:fa:4c:
7f:e0:10:df:80:09:17:7e:4f:b3:d5:98:fc:89:32:
08:86:fb:2e:40:5e:fb:a1:c6:79:2f:bb:ea:2a:a4:
54:de:51:be:84:79:42:30:52:8c:25:7f:26:97:5f:
50:19:38:a1:71:9f:b3:2b:1e:b3:75:9c:d8:fb:99:
95:ca:86:ba:d1:e1:ab:1a:b1:76:33:55:ef:68:23:
89:9e:10:db:f4:d3:50:65:bd:31:e8:8d:5f:c3:c8:
9c:d7:6b:ef:ba:1a:eb:d7:90:ed:6a:53:15:91:0d:
73:eb:c7:51:c0:cd:db:8c:0e:f9:cc:da:c7:59:fe:
fd:51:ba:87:03:b3:42:1d:1d:2b:47:be:b2:47:65:
3a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:1C:54:75:54:B3:85:E5:94:25:1E:1C:84:98:93:06:87:AE:22:EE
X509v3 Authority Key Identifier:
keyid:B0:C5:E6:AE:59:87:10:06:64:B2:30:34:CE:FC:72:D4:7F:8F:4B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMXmrlmHEAZksjA0zvxy1H-PS5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:df:1d:59:00:c0:91:b8:02:ae:11:16:59:d4:fe:c5:a6:e0:
94:8c:ac:de:53:22:4d:31:8e:2f:04:fd:b2:be:8e:56:6b:10:
88:0c:d7:16:a7:90:71:bd:1a:cb:8c:7a:3f:9d:b0:e3:39:22:
53:5a:5e:d0:3e:ad:68:ef:fb:c4:44:2c:55:1d:af:d7:11:79:
3a:f2:c5:3a:e2:57:9c:a0:c9:96:d5:aa:ab:2e:2b:7b:9d:1c:
e5:b1:88:16:97:38:5f:ba:e9:fe:2c:2f:10:e2:b9:e3:7f:63:
2f:8a:1e:c0:89:54:88:fb:94:3c:04:61:ba:da:0f:a1:c8:28:
8a:f2:4e:bd:45:10:c4:e3:1b:49:d2:1e:d9:3c:a9:d8:02:cb:
9c:16:b4:b4:57:a6:c1:97:db:4b:78:e7:fc:cb:50:ce:b4:eb:
6b:af:d2:38:05:64:d2:8c:f9:82:22:f2:ab:eb:ec:6c:96:ad:
34:09:77:7d:64:27:2b:9b:f8:79:f3:aa:2f:4c:73:e0:86:fd:
4e:de:88:85:88:85:d3:42:e0:2f:1d:5f:bc:8d:c5:28:11:57:
80:d8:df:aa:8c:da:b8:43:84:c4:d0:93:b9:90:59:bd:ae:1e:
78:ae:99:7a:7d:85:3c:7a:57:78:c6:92:b5:dc:f1:91:cf:97:
18:ac:bf:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:46:04 2025 by rpki-client