Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/SmDzjPNvzJvFEyk1ErRrkR7fWsU.mft
File: SmDzjPNvzJvFEyk1ErRrkR7fWsU.mft (raw, json)
Hash identifier: Y10QB/ocPB/6GFYVMyvKv6MUAcBYfIivz+i2vfeudv0=
Subject key identifier: CD:03:77:57:35:4D:AB:69:FC:78:EE:9F:4C:9D:B9:EA:71:29:D0:54
Authority key identifier: 4A:60:F3:8C:F3:6F:CC:9B:C5:13:29:35:12:B4:6B:91:1E:DF:5A:C5
Certificate issuer: /CN=4a60f38cf36fcc9bc513293512b46b911edf5ac5
Certificate serial: 0199FDDA11BA80139337FD027CB3F7F9085E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmDzjPNvzJvFEyk1ErRrkR7fWsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/SmDzjPNvzJvFEyk1ErRrkR7fWsU.mft
Manifest number: 0ED6
Signing time: Sun 19 Oct 2025 19:02:30 +0000
Manifest this update: Sun 19 Oct 2025 19:02:30 +0000
Manifest next update: Mon 20 Oct 2025 19:02:30 +0000
Files and hashes: 1: SmDzjPNvzJvFEyk1ErRrkR7fWsU.crl (hash: KHU/rZzUGKWAGgWGCWtjuQr+ihWz+LrdojTFyJz5RHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/SmDzjPNvzJvFEyk1ErRrkR7fWsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/SmDzjPNvzJvFEyk1ErRrkR7fWsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SmDzjPNvzJvFEyk1ErRrkR7fWsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:11:ba:80:13:93:37:fd:02:7c:b3:f7:f9:08:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a60f38cf36fcc9bc513293512b46b911edf5ac5
Validity
Not Before: Oct 19 19:02:30 2025 GMT
Not After : Oct 20 19:02:30 2025 GMT
Subject: CN=cd037757354dab69fc78ee9f4c9db9ea7129d054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:08:b5:f6:3e:47:dc:7c:d2:81:d1:85:d2:4f:
af:ae:7f:3a:29:f7:f7:7a:8c:ae:94:0b:c1:89:f3:
c8:1f:17:33:8d:a4:2c:f9:57:3e:20:fc:40:a2:33:
09:5d:50:54:fa:20:6b:0b:c2:be:aa:1e:38:76:0f:
b2:4b:40:11:7b:2f:cb:01:ce:b7:31:69:53:9c:7c:
2e:9a:69:ab:59:f8:f6:42:eb:5e:d3:c4:46:e8:21:
b2:53:73:1f:f9:d2:43:6a:2c:85:31:13:dc:a0:0a:
a6:01:4c:32:16:8c:77:f1:b0:8f:f0:ab:e9:03:d6:
a0:3c:ff:ac:3c:aa:a5:3e:3c:1c:04:8a:f8:15:af:
8f:99:6e:83:f4:6b:c5:8e:b1:7a:33:2c:1a:4f:f6:
5f:08:56:62:c8:77:58:1e:47:d4:22:ea:80:22:52:
b3:05:8c:04:ed:4e:f6:7b:dc:9c:c2:0a:a3:c3:18:
2d:1b:2f:25:b5:df:4f:a9:b9:1b:43:00:32:1b:e4:
09:01:9a:27:db:5c:e1:58:d0:c6:e4:7f:72:ac:e9:
30:25:e7:07:3b:22:81:df:1d:b4:32:ff:4f:8b:1e:
e0:7a:75:32:4d:49:9b:0a:e5:1d:dd:b3:d0:1a:7e:
00:9e:9a:7a:c3:c4:a6:8e:fa:9e:ed:d4:a8:3a:cb:
22:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:03:77:57:35:4D:AB:69:FC:78:EE:9F:4C:9D:B9:EA:71:29:D0:54
X509v3 Authority Key Identifier:
keyid:4A:60:F3:8C:F3:6F:CC:9B:C5:13:29:35:12:B4:6B:91:1E:DF:5A:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmDzjPNvzJvFEyk1ErRrkR7fWsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/SmDzjPNvzJvFEyk1ErRrkR7fWsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/SmDzjPNvzJvFEyk1ErRrkR7fWsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:fd:2a:2f:45:e3:53:6a:25:d5:87:f8:8a:1c:36:ea:4d:b4:
23:f9:64:62:41:9d:7b:48:35:78:73:5a:c4:b5:dc:2f:67:46:
83:a8:a7:80:fa:13:d6:b9:08:6e:7d:ec:e2:27:b7:c3:d9:11:
62:7d:34:52:14:c0:01:a4:f4:4b:06:99:97:c4:32:be:d6:83:
c2:32:d9:16:1b:ee:36:67:af:8e:3b:77:92:d8:75:27:cf:10:
ee:5a:7f:65:4f:66:8a:87:4c:00:8b:9b:e4:c4:31:97:11:34:
e6:e4:09:bb:bc:46:54:10:de:61:3a:da:7e:d6:d7:c4:e7:99:
0c:a7:f8:16:b8:ed:2f:b4:30:10:cf:fe:18:d1:60:cf:bc:54:
9f:46:43:52:48:11:67:84:0b:28:ad:3f:4f:19:80:cc:35:9d:
33:4b:ef:e3:2c:4e:2c:70:54:e6:d6:4b:c7:4e:fe:98:6f:6c:
48:0a:4b:71:f6:2c:a3:ef:ae:bb:99:88:73:8f:43:f5:d3:4a:
5e:7d:8c:f2:1b:2c:aa:ab:7c:cd:63:2f:08:ef:79:87:74:f2:
2e:35:7c:80:67:70:00:6d:ff:87:dc:74:b2:b8:ce:a7:27:d4:
25:e9:8b:b5:a9:e9:35:8a:5f:8f:d6:66:bd:b9:62:15:ee:59:
37:a4:a1:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:23:49 2025 by rpki-client