Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft
File: SM83s2Rv2pPL3QuKrM__MTpvcY8.mft (raw, json)
Hash identifier: ktGzhwelKucuaUVPXVsxP7Jp29kBdzLlpb2xQxvbCcA=
Subject key identifier: 49:59:CA:F5:94:A7:78:FC:1E:FF:A0:00:B7:43:14:21:6B:65:16:F8
Authority key identifier: 48:CF:37:B3:64:6F:DA:93:CB:DD:0B:8A:AC:CF:FF:31:3A:6F:71:8F
Certificate issuer: /CN=48cf37b3646fda93cbdd0b8aaccfff313a6f718f
Certificate serial: 01975948A69A30F9FB7BCE6EF6A1BEF9344E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SM83s2Rv2pPL3QuKrM__MTpvcY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft
Manifest number: 151D
Signing time: Tue 10 Jun 2025 10:00:22 +0000
Manifest this update: Tue 10 Jun 2025 10:00:22 +0000
Manifest next update: Wed 11 Jun 2025 10:00:22 +0000
Files and hashes: 1: Os6xDD1H4LsrEU2Pwmq0YT-o8IM.roa (hash: 9WTAK5WFdauUxfw4Aw74xq8JjOOgRjy/Qe/px+Cijao=)
2: SM83s2Rv2pPL3QuKrM__MTpvcY8.crl (hash: PqsbIZRnqBbz6qNv/fP1pVc7jgRe4gWiFqu0UiMB0rI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SM83s2Rv2pPL3QuKrM__MTpvcY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 10:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:48:a6:9a:30:f9:fb:7b:ce:6e:f6:a1:be:f9:34:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48cf37b3646fda93cbdd0b8aaccfff313a6f718f
Validity
Not Before: Jun 10 10:00:22 2025 GMT
Not After : Jun 11 10:00:22 2025 GMT
Subject: CN=4959caf594a778fc1effa000b74314216b6516f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8d:83:eb:94:71:3f:ee:78:8a:e9:20:1b:98:
bb:ca:ce:f7:a9:08:53:27:cb:ea:28:ee:c1:66:5e:
57:7e:26:2b:db:95:fe:7c:8d:03:43:52:62:61:8a:
56:bd:5e:52:d8:b0:a3:05:ed:8b:82:76:a1:bd:e8:
13:1e:36:31:98:9a:69:ee:4a:71:d4:fd:0e:9b:ca:
04:5a:1d:77:2b:aa:6a:9e:36:ea:b8:ce:79:5e:23:
69:cf:ee:8a:55:7a:80:1b:a6:5c:fd:0d:0f:b1:77:
f9:71:c3:0a:e3:5a:5a:0b:38:28:3b:3b:7f:1e:64:
86:21:db:fe:de:e7:c2:3e:c5:d3:6a:d8:fc:4e:5d:
0e:34:6a:41:2b:05:ec:57:a6:9d:ee:cc:2a:e3:26:
86:d4:7d:a4:46:b2:de:86:f4:97:be:2a:9e:e6:a0:
12:3a:37:02:c8:98:04:d2:f5:a4:0f:5c:3a:05:8e:
11:d1:83:84:cc:bd:07:57:01:33:cb:9f:47:76:86:
46:03:7e:d2:43:80:b0:fb:fb:94:5d:f8:a3:0e:b1:
8b:b2:ee:4f:68:4e:ac:43:24:be:6a:21:ce:cf:26:
30:ed:da:37:bd:59:4a:04:e4:b5:16:ee:0d:a2:2b:
d2:4a:ac:98:74:92:79:e5:20:f1:25:ec:f3:8b:99:
e1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:59:CA:F5:94:A7:78:FC:1E:FF:A0:00:B7:43:14:21:6B:65:16:F8
X509v3 Authority Key Identifier:
keyid:48:CF:37:B3:64:6F:DA:93:CB:DD:0B:8A:AC:CF:FF:31:3A:6F:71:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SM83s2Rv2pPL3QuKrM__MTpvcY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:08:4c:51:d4:49:09:a3:84:6f:65:22:5e:7f:d2:02:f6:05:
9e:6b:f8:12:fd:57:db:81:8a:d8:99:e6:bc:cc:3a:63:4a:30:
24:60:f3:2a:3c:f7:ac:1a:49:68:aa:a4:b4:7a:12:74:59:7c:
9b:ce:12:e7:54:19:c3:67:9c:82:d2:5a:e3:ca:6b:68:bd:e3:
7c:e8:62:98:03:44:d9:aa:70:2a:b6:82:e6:44:f2:d2:25:25:
3e:a2:ab:bb:d6:61:a9:27:53:b7:68:18:03:28:78:a6:24:38:
3d:e5:f1:61:8f:d4:94:58:63:6c:79:f4:c7:cd:04:a3:a8:1c:
3e:1c:91:72:92:fa:b7:23:36:8c:68:69:69:d4:b8:f5:e7:b0:
cd:53:ce:02:78:06:11:da:ba:7a:a8:20:c8:23:e3:31:0c:36:
d7:f1:f2:6e:9e:b9:03:4f:2a:91:d9:2e:83:db:71:df:f3:8d:
e6:9c:65:18:ec:04:6e:87:5e:5e:73:69:da:20:df:94:84:e4:
78:dc:e6:19:97:eb:ed:33:39:74:7e:f2:55:23:66:5d:89:7a:
d9:13:59:30:99:94:0e:0f:bc:c4:23:d0:23:a4:a6:74:50:4d:
a5:b8:bf:1f:23:ce:3f:0b:8c:37:3e:60:7c:08:92:75:46:b4:
07:1e:43:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 15:54:17 2025 by rpki-client