Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.mft
File: sMXmrlmHEAZksjA0zvxy1H-PS5s.mft (raw, json)
Hash identifier: 0hwGo0MWGHh5LNWU4O7+x0Nvaw4DWamMVa1DqANF96s=
Subject key identifier: 6E:A4:AF:34:65:AB:E0:74:01:FB:DC:44:99:12:A6:A3:B4:BC:36:10
Authority key identifier: B0:C5:E6:AE:59:87:10:06:64:B2:30:34:CE:FC:72:D4:7F:8F:4B:9B
Certificate issuer: /CN=b0c5e6ae5987100664b23034cefc72d47f8f4b9b
Certificate serial: 0199FDDA7E6F7847147E55D3288109BE82E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMXmrlmHEAZksjA0zvxy1H-PS5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 19:02:58 +0000
Manifest this update: Sun 19 Oct 2025 19:02:58 +0000
Manifest next update: Mon 20 Oct 2025 19:02:58 +0000
Files and hashes: 1: Xpu5z6C93G9BRUn-gmewTXpV4p4.roa (hash: HRJgPQbn7ofu1m7IlOj+BpfT6NzW9G/pwBr/coPVab0=)
2: sMXmrlmHEAZksjA0zvxy1H-PS5s.crl (hash: LeMtOUfenzE/KmcWa8LVMb4Rv+3Q96YcwRYb4Uoe3qs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/sMXmrlmHEAZksjA0zvxy1H-PS5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:7e:6f:78:47:14:7e:55:d3:28:81:09:be:82:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c5e6ae5987100664b23034cefc72d47f8f4b9b
Validity
Not Before: Oct 19 19:02:58 2025 GMT
Not After : Oct 20 19:02:58 2025 GMT
Subject: CN=6ea4af3465abe07401fbdc449912a6a3b4bc3610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:26:19:8b:8e:00:5b:08:2c:cb:4a:fc:b2:90:
26:62:dd:d3:f2:ac:da:cd:9c:17:67:4b:22:ac:d6:
1a:12:f7:04:7e:d2:09:38:75:d0:57:89:a1:d6:3f:
4a:c7:f8:b0:00:62:65:28:53:ab:c7:6d:80:3b:c9:
06:cd:7a:d1:0a:db:de:22:50:3f:09:27:0f:36:5f:
96:30:a2:2c:25:37:5d:7a:ea:83:88:c2:fb:15:8e:
59:0a:be:0a:13:ae:69:d0:16:d7:8a:6c:61:a3:41:
61:48:75:af:7a:8b:d2:d6:d8:26:2b:09:ed:b9:04:
c8:8e:51:65:a7:27:96:8e:01:bf:4b:35:2b:33:12:
55:8c:09:35:ea:fe:5b:28:d9:e8:6e:3c:87:b6:1e:
bf:45:eb:bf:f6:48:6a:a4:43:63:5d:ee:f8:f6:7f:
23:77:4f:4c:aa:af:cb:fb:6a:02:2f:d4:0a:23:ca:
fd:f5:87:e5:9a:f9:f9:b5:f5:14:be:47:33:3a:d4:
1c:78:1f:e4:f1:70:5d:46:8d:5e:bb:63:b2:7c:63:
0a:19:b6:22:ff:22:d6:07:0a:c0:56:0b:95:b6:88:
0b:c7:97:e9:50:10:f6:a6:b1:82:e7:e3:ff:04:7c:
2b:72:7a:15:40:1a:cb:74:59:1e:e0:45:df:1c:39:
06:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:A4:AF:34:65:AB:E0:74:01:FB:DC:44:99:12:A6:A3:B4:BC:36:10
X509v3 Authority Key Identifier:
keyid:B0:C5:E6:AE:59:87:10:06:64:B2:30:34:CE:FC:72:D4:7F:8F:4B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMXmrlmHEAZksjA0zvxy1H-PS5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:a0:61:83:24:af:c7:86:67:7c:df:15:5d:be:80:b6:4c:f8:
e3:44:d5:da:f8:19:4d:e0:29:ff:28:d7:a6:39:ef:87:84:cc:
b3:bf:06:26:f3:4d:d7:41:3c:c8:c5:fb:de:e7:9f:43:c6:ec:
90:91:80:08:ab:cc:17:19:b8:23:be:08:7a:45:65:d8:13:62:
dd:21:54:64:ee:23:58:0d:e9:4c:e3:1a:97:04:b8:5a:01:97:
82:ed:3b:f4:bb:14:9f:1a:e5:1a:58:35:a2:53:66:14:72:49:
f4:12:50:3b:35:82:ab:50:3a:0f:a7:37:ca:21:73:03:54:48:
3c:bd:21:08:35:ec:2a:fb:5f:c6:52:8d:ef:20:5e:34:db:4b:
c3:7d:b8:6a:c2:0f:c0:1a:2a:e7:36:f1:02:17:44:55:ca:2f:
46:03:41:28:34:8a:b2:95:09:4d:e2:6c:c6:25:b0:8e:a0:bb:
40:5c:b3:00:5d:ea:06:54:a3:25:1b:0c:95:59:05:a3:8d:a6:
f3:7b:eb:f0:9a:d6:4b:0f:ec:0a:99:30:16:bb:e4:14:bb:43:
eb:9a:96:54:c2:51:16:db:c7:37:a0:c8:b4:99:1c:f9:67:66:
2d:67:33:7a:1f:83:2a:4f:ea:8f:28:e8:9a:0c:5f:33:74:db:
07:1d:c8:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:04:14 2025 by rpki-client