Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft
File: SM83s2Rv2pPL3QuKrM__MTpvcY8.mft (raw, json)
Hash identifier: 3JwtTZWbNiJwwdLg726R0n/0g7tNwpJBkaKGWsTfayE=
Subject key identifier: CF:70:8D:69:9F:F4:30:A5:8F:1F:60:FD:8D:30:61:B2:7C:A1:AD:6D
Authority key identifier: 48:CF:37:B3:64:6F:DA:93:CB:DD:0B:8A:AC:CF:FF:31:3A:6F:71:8F
Certificate issuer: /CN=48cf37b3646fda93cbdd0b8aaccfff313a6f718f
Certificate serial: 01965A5E491327607B6779115E26F1AB33E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SM83s2Rv2pPL3QuKrM__MTpvcY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft
Manifest number: 1499
Signing time: Mon 21 Apr 2025 22:00:50 +0000
Manifest this update: Mon 21 Apr 2025 22:00:50 +0000
Manifest next update: Tue 22 Apr 2025 22:00:50 +0000
Files and hashes: 1: Os6xDD1H4LsrEU2Pwmq0YT-o8IM.roa (hash: 9WTAK5WFdauUxfw4Aw74xq8JjOOgRjy/Qe/px+Cijao=)
2: SM83s2Rv2pPL3QuKrM__MTpvcY8.crl (hash: w7JTHtw5SiCRawMl9YFxSfvzyCy/d8sRRYD1CLWn5ig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SM83s2Rv2pPL3QuKrM__MTpvcY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:5e:49:13:27:60:7b:67:79:11:5e:26:f1:ab:33:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48cf37b3646fda93cbdd0b8aaccfff313a6f718f
Validity
Not Before: Apr 21 22:00:50 2025 GMT
Not After : Apr 22 22:00:50 2025 GMT
Subject: CN=cf708d699ff430a58f1f60fd8d3061b27ca1ad6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f2:b2:5a:e5:ca:d3:31:e7:a7:43:cc:c2:2a:
a4:43:0a:d7:b4:96:a4:fc:41:bd:e2:d9:4a:0a:46:
1d:8b:a5:3c:37:2f:89:b5:b3:a7:d3:cc:0c:b7:7c:
41:5a:37:e0:c0:38:c0:e2:95:87:3e:47:1c:be:a5:
76:23:23:23:ab:0d:b8:cd:4c:aa:b0:a9:81:7b:b6:
dc:1e:7f:8f:13:64:2b:43:a7:45:89:5e:f5:1e:a2:
d1:cd:9a:0c:1f:4d:cc:2d:e3:18:a7:cb:63:cf:2a:
5d:48:38:9d:9a:dc:c0:ae:31:cf:a5:7e:25:de:49:
f2:7b:9f:94:e8:db:a6:7c:d6:57:55:4f:8b:f5:82:
4f:23:73:72:2a:c3:1d:9a:18:de:fb:3f:34:5b:ed:
d0:87:83:fd:ba:29:27:7c:ad:9b:7c:c4:f5:e4:de:
4d:01:0a:95:71:88:ac:9f:99:86:c3:d7:8f:23:b4:
5c:9f:02:7e:f5:b2:d4:46:89:15:59:b2:0d:04:a5:
d6:d3:d8:62:1a:95:95:61:57:7d:35:a1:b9:a6:03:
fe:92:13:80:aa:19:b6:0e:cb:82:48:31:5e:b3:aa:
ca:55:1e:44:16:bd:f6:57:e1:03:3a:54:90:4a:2f:
fb:95:df:cd:8e:b0:33:eb:b0:3a:08:ed:bb:a5:4e:
ea:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:70:8D:69:9F:F4:30:A5:8F:1F:60:FD:8D:30:61:B2:7C:A1:AD:6D
X509v3 Authority Key Identifier:
keyid:48:CF:37:B3:64:6F:DA:93:CB:DD:0B:8A:AC:CF:FF:31:3A:6F:71:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SM83s2Rv2pPL3QuKrM__MTpvcY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:21:ee:2e:0a:2d:fe:11:3b:8f:a2:c5:bb:27:e4:09:aa:ff:
c0:f6:e7:0a:5b:48:3f:8a:0f:ba:ad:88:8f:91:4f:f0:ed:ec:
bb:a5:b8:0b:1f:71:7c:27:81:11:ab:fe:3a:69:aa:1f:42:16:
ca:fd:c8:a4:cd:82:8d:54:b6:42:84:70:75:98:aa:a9:55:5e:
49:70:0d:76:78:9c:44:ea:a6:d9:d0:e1:df:31:9f:76:51:fe:
43:3c:66:b5:1c:a0:b9:c2:25:89:3d:55:32:2d:b8:dd:be:b5:
9b:a3:d0:0f:95:35:5b:de:80:3a:bd:0a:84:0b:ca:d5:31:f8:
9e:b6:f3:e2:74:41:71:d7:6d:99:9f:1a:ed:2e:ca:cb:92:ba:
d5:52:66:72:a1:e3:91:d3:35:82:86:44:d9:e9:e7:a0:3d:aa:
d5:0a:42:a5:42:17:69:ee:aa:df:e9:3f:05:94:47:3b:c2:f7:
7a:40:b8:3a:22:1b:ab:a8:a3:33:38:df:eb:8b:49:92:02:76:
b5:51:ec:81:d8:51:05:20:a8:8d:6a:4a:91:c7:73:42:7f:42:
88:0c:02:28:f6:e8:1d:ca:c8:9a:e1:f9:97:d0:32:73:70:b2:
39:4c:64:a7:65:97:f2:c9:65:de:04:4f:d1:b7:bd:54:3f:d9:
8e:4d:bd:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:19:37 2025 by rpki-client