Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft
File: SM83s2Rv2pPL3QuKrM__MTpvcY8.mft (raw, json)
Hash identifier: syGNJBEa/YDiiszlOUGVY/YuFRDEaNTvlGsZvLdauNA=
Subject key identifier: B9:C4:96:5D:7A:9C:51:FA:74:8E:95:B0:30:04:96:F9:99:3E:08:98
Authority key identifier: 48:CF:37:B3:64:6F:DA:93:CB:DD:0B:8A:AC:CF:FF:31:3A:6F:71:8F
Certificate issuer: /CN=48cf37b3646fda93cbdd0b8aaccfff313a6f718f
Certificate serial: 01985DFF7E49826D03512002120FB25A0259
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SM83s2Rv2pPL3QuKrM__MTpvcY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft
Manifest number: 15A4
Signing time: Thu 31 Jul 2025 01:01:21 +0000
Manifest this update: Thu 31 Jul 2025 01:01:21 +0000
Manifest next update: Fri 01 Aug 2025 01:01:21 +0000
Files and hashes: 1: Os6xDD1H4LsrEU2Pwmq0YT-o8IM.roa (hash: 9WTAK5WFdauUxfw4Aw74xq8JjOOgRjy/Qe/px+Cijao=)
2: SM83s2Rv2pPL3QuKrM__MTpvcY8.crl (hash: ilz8EB/gbp33k7UKBh8HkjNN58+sUlnQdb+FCKMOwNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SM83s2Rv2pPL3QuKrM__MTpvcY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 Aug 2025 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5d:ff:7e:49:82:6d:03:51:20:02:12:0f:b2:5a:02:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48cf37b3646fda93cbdd0b8aaccfff313a6f718f
Validity
Not Before: Jul 31 01:01:21 2025 GMT
Not After : Aug 1 01:01:21 2025 GMT
Subject: CN=b9c4965d7a9c51fa748e95b0300496f9993e0898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:37:91:93:f5:56:ca:80:f1:42:d6:a3:c0:e7:
56:8c:55:16:d1:54:91:7f:5d:7b:c7:2f:62:31:06:
ba:a9:46:c3:7d:4c:df:d1:58:5f:34:17:5f:b3:f0:
f3:ae:3f:03:be:f8:04:15:21:a3:37:b3:e8:48:e2:
93:fd:0e:75:48:16:09:8d:79:88:1c:56:ca:57:45:
26:08:c9:4c:58:ec:e2:fb:7a:63:86:20:eb:6a:8f:
43:d5:7f:4c:28:f9:4e:cb:e3:f7:1c:96:d9:90:07:
be:06:40:20:ed:c5:d8:e2:1c:e1:0a:f4:dd:68:44:
1b:b3:76:69:33:3c:36:c2:0b:3f:ce:46:ee:69:c8:
a6:16:a6:0c:82:98:99:e0:94:f2:25:dc:f9:9b:00:
a5:43:90:8a:45:b5:71:2b:a9:7c:51:99:37:ae:04:
bc:07:6b:6f:b2:53:c5:e4:74:c4:b4:3f:bd:c7:e5:
80:01:9e:62:4b:28:96:38:12:8c:4f:d7:14:58:d8:
ab:58:de:4c:e8:b7:7a:9f:e4:e1:25:9e:f1:cc:57:
94:78:3f:e5:c7:9d:1c:30:d2:d2:55:ff:ce:d2:c7:
76:67:72:e9:2c:f8:4f:5e:67:7e:d0:71:e4:17:97:
2a:51:7c:1d:fe:ea:6c:6b:77:12:a8:44:ba:56:7d:
30:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:C4:96:5D:7A:9C:51:FA:74:8E:95:B0:30:04:96:F9:99:3E:08:98
X509v3 Authority Key Identifier:
keyid:48:CF:37:B3:64:6F:DA:93:CB:DD:0B:8A:AC:CF:FF:31:3A:6F:71:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SM83s2Rv2pPL3QuKrM__MTpvcY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:e9:12:38:3f:c1:fe:5d:42:cd:ff:ac:0d:23:05:04:b2:40:
44:1d:69:32:79:53:70:c6:fe:54:ee:31:14:82:a1:f8:36:c0:
b5:1a:6e:58:2a:77:df:38:9d:ee:b4:36:a1:35:7a:bd:57:4c:
40:28:91:76:cb:a4:ed:4e:fd:ed:06:25:13:52:54:ef:e8:bf:
19:88:58:e8:fd:1b:49:cd:f8:0a:61:ce:c6:dc:aa:46:4f:1c:
20:76:7c:ba:d0:52:34:71:0a:9c:95:78:53:54:88:66:e2:b9:
29:ff:22:87:28:ec:e4:6b:41:bd:47:8c:7d:b1:49:34:dc:84:
6a:10:09:cc:90:28:a2:f0:17:5e:83:a5:5f:9d:f0:e0:57:84:
c0:09:79:5f:12:db:43:aa:c3:90:38:07:bc:c3:f8:d6:4f:e3:
82:b0:d9:9a:9e:58:32:34:45:cf:b1:ca:87:8c:96:01:aa:b1:
f5:e2:70:9d:f5:74:26:4f:f3:b6:b3:c5:13:91:3c:38:71:f8:
c4:81:66:93:9a:15:6b:c8:11:93:1d:5b:97:25:24:95:2c:31:
d4:a7:be:56:7a:b8:6c:50:2e:3d:a5:9e:4e:f5:af:4d:8f:0e:
a1:d5:03:c9:41:23:cf:97:b9:86:15:b4:67:08:a1:c2:c3:74:
24:17:53:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 03:56:26 2025 by rpki-client