Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.mft
File: SMOd4l_6fq8CsqbYws9uLOtWK_M.mft (raw, json)
Hash identifier: KkdRa1qx5lGKZy0wTcSe2U4G5V1il5s//Hm7dh46rGc=
Subject key identifier: 87:50:13:0F:3B:D7:14:02:2D:FB:98:4C:69:61:27:9C:55:E4:64:9B
Authority key identifier: 48:C3:9D:E2:5F:FA:7E:AF:02:B2:A6:D8:C2:CF:6E:2C:EB:56:2B:F3
Certificate issuer: /CN=48c39de25ffa7eaf02b2a6d8c2cf6e2ceb562bf3
Certificate serial: 0199FB4629F52E9DCD87D21A3F036CAF6336
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SMOd4l_6fq8CsqbYws9uLOtWK_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.mft
Manifest number: 133E
Signing time: Sun 19 Oct 2025 07:01:43 +0000
Manifest this update: Sun 19 Oct 2025 07:01:43 +0000
Manifest next update: Mon 20 Oct 2025 07:01:43 +0000
Files and hashes: 1: JtwVZJ2q-er-ZyfG4We1Ih9BT0U.roa (hash: xnd0jnisgvFr2C1BnV+wtzkH+5RWNTZh9FBZUZ5Hu3E=)
2: SMOd4l_6fq8CsqbYws9uLOtWK_M.crl (hash: mUvHLrvHcKqjkfUb3WS+dgCwM0qSU4GlrCnHvKBankU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/SMOd4l_6fq8CsqbYws9uLOtWK_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:29:f5:2e:9d:cd:87:d2:1a:3f:03:6c:af:63:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48c39de25ffa7eaf02b2a6d8c2cf6e2ceb562bf3
Validity
Not Before: Oct 19 07:01:43 2025 GMT
Not After : Oct 20 07:01:43 2025 GMT
Subject: CN=8750130f3bd714022dfb984c6961279c55e4649b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b6:7a:0f:56:aa:4c:0a:ed:84:f9:df:ff:33:
fd:d7:2a:ed:c5:d7:67:dd:f6:5e:f4:2b:34:bc:41:
9a:0e:66:3c:1d:82:33:6b:a8:a9:7f:77:ca:cc:c1:
9b:4d:28:ad:a6:c2:b8:46:eb:8d:f0:16:fd:94:2e:
23:5d:75:43:5a:22:c4:c2:06:6c:01:2e:a1:c7:b3:
49:3b:19:af:a2:04:23:8f:63:41:33:73:98:2d:39:
b7:0b:4d:9a:c3:d6:e7:21:8c:2a:95:9b:7e:f7:e0:
28:57:d8:c7:48:32:c6:56:fa:38:6c:d8:e8:6d:93:
32:4e:ee:aa:c1:33:20:f9:e5:4d:01:5b:b7:5b:13:
ab:2d:f6:f2:e6:4d:d0:1b:78:a2:6e:38:ab:c1:b8:
2e:e8:df:18:a6:b3:45:65:f3:09:95:6e:16:50:62:
40:a1:c5:cd:c7:cd:77:64:69:5d:73:81:59:b2:6f:
eb:6b:93:e1:62:c4:0b:eb:8c:ba:62:1e:b0:6b:9d:
7b:0b:ec:41:96:a0:a4:fb:31:11:a8:05:07:b9:ae:
b2:22:d3:57:a9:80:71:c7:1d:90:ce:85:68:96:e0:
c6:16:cc:4b:e0:f0:a5:29:6d:cf:07:54:12:0e:fd:
6a:71:c7:f5:73:72:f8:c1:bc:10:bb:d8:85:89:65:
e1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:50:13:0F:3B:D7:14:02:2D:FB:98:4C:69:61:27:9C:55:E4:64:9B
X509v3 Authority Key Identifier:
keyid:48:C3:9D:E2:5F:FA:7E:AF:02:B2:A6:D8:C2:CF:6E:2C:EB:56:2B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SMOd4l_6fq8CsqbYws9uLOtWK_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9bcbaf-4993-4d08-b9a8-0355ef11589c/1/SMOd4l_6fq8CsqbYws9uLOtWK_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:a4:31:31:10:b7:4b:74:84:7b:94:38:ab:ca:06:81:7f:ae:
bd:c0:94:28:48:14:52:e9:9b:b8:37:b5:9e:c9:d0:d7:c3:62:
f4:fa:d0:45:fa:af:d5:ab:c2:a9:91:3f:76:e4:97:10:31:49:
04:cd:3a:16:38:b5:64:3e:c8:cc:be:16:31:fa:3b:85:20:df:
40:f7:f7:a2:dd:51:a0:68:85:a9:c2:eb:98:24:b7:1f:50:2b:
ed:9f:ac:6d:56:f0:59:a2:e3:2c:b6:da:40:7e:14:70:58:1f:
74:e1:24:0a:24:8c:4f:de:68:4b:e4:bd:a9:29:fa:dc:09:26:
ff:78:c6:78:11:af:e6:a5:e4:14:d5:ee:e4:58:fe:3f:36:ea:
78:59:a6:4a:63:26:9c:62:38:d1:3f:49:e4:1e:88:12:e9:fb:
60:d9:77:a9:ca:f9:7c:15:19:b2:14:c8:eb:d9:96:ca:db:b2:
b9:9a:3e:3f:b4:ea:e6:67:92:a3:68:0d:d9:78:ca:1e:87:7b:
2c:da:26:9e:bc:0e:93:b4:e4:9d:24:72:ae:59:5f:64:2c:16:
0e:7e:09:1d:93:c5:7d:db:01:14:d4:f0:26:a8:48:c9:6d:07:
5a:ac:4a:cf:ce:b9:02:7d:2f:e2:48:13:77:37:be:28:43:cb:
c6:62:bd:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:13 2025 by rpki-client