Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft
File: SM83s2Rv2pPL3QuKrM__MTpvcY8.mft (raw, json)
Hash identifier: CzO2ec1Ze5pqfkOEALl1WiTYLudPoE6gpJF9bKAY4Qo=
Subject key identifier: DA:41:A9:02:C3:B9:88:A8:43:1A:D6:1C:E5:B2:D3:A2:FD:3E:3A:FE
Authority key identifier: 48:CF:37:B3:64:6F:DA:93:CB:DD:0B:8A:AC:CF:FF:31:3A:6F:71:8F
Certificate issuer: /CN=48cf37b3646fda93cbdd0b8aaccfff313a6f718f
Certificate serial: 01975F13F974A86C7B6E6AC9382CDF904F06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SM83s2Rv2pPL3QuKrM__MTpvcY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft
Manifest number: 1520
Signing time: Wed 11 Jun 2025 13:00:33 +0000
Manifest this update: Wed 11 Jun 2025 13:00:33 +0000
Manifest next update: Thu 12 Jun 2025 13:00:33 +0000
Files and hashes: 1: Os6xDD1H4LsrEU2Pwmq0YT-o8IM.roa (hash: 9WTAK5WFdauUxfw4Aw74xq8JjOOgRjy/Qe/px+Cijao=)
2: SM83s2Rv2pPL3QuKrM__MTpvcY8.crl (hash: x8fQiRu+9g5D1nro6Z5Vf4GaHoM6bhD6EIsziM3gUI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SM83s2Rv2pPL3QuKrM__MTpvcY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 13:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:13:f9:74:a8:6c:7b:6e:6a:c9:38:2c:df:90:4f:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48cf37b3646fda93cbdd0b8aaccfff313a6f718f
Validity
Not Before: Jun 11 13:00:33 2025 GMT
Not After : Jun 12 13:00:33 2025 GMT
Subject: CN=da41a902c3b988a8431ad61ce5b2d3a2fd3e3afe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:06:cb:c7:30:e6:a6:74:8c:3b:16:cb:0f:5a:
6d:1b:5d:42:4c:f2:da:d1:aa:da:1a:79:fb:73:dc:
ae:28:f7:d8:0c:2f:dd:29:ba:2b:9a:1b:72:d4:b1:
fc:ed:f7:65:d8:85:79:a8:80:c5:d0:53:10:19:a5:
d2:6b:92:12:3e:02:4a:97:fa:07:48:4d:13:0e:5b:
d9:b9:85:43:cf:49:51:a6:29:92:5a:29:ff:b4:9e:
f6:a2:52:c6:c3:24:ea:e0:0f:1d:ea:24:99:e0:9d:
b4:08:dc:28:98:64:90:87:3c:51:9f:b5:f0:ff:06:
0f:bb:3e:95:6b:ef:3c:b2:b9:db:ab:d0:46:07:a5:
17:c2:e6:9b:fd:a7:79:68:65:ea:f1:07:b0:85:1e:
f7:93:82:ca:24:72:bd:40:a5:e2:08:98:47:ec:57:
ea:de:15:47:cf:dd:f3:81:4e:e0:bb:9e:a3:8e:23:
e5:e5:d3:a9:23:ce:ec:c5:9c:c6:97:1b:be:6b:28:
71:13:30:0b:f4:52:24:52:fa:30:68:9f:20:6c:ca:
ea:f2:87:8c:e7:1d:36:0a:cd:b5:44:1d:1c:04:10:
23:7d:d8:79:c1:ad:be:66:d0:25:38:e5:2e:d0:78:
75:52:23:e6:54:79:27:cf:8d:63:16:30:20:55:05:
b7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:41:A9:02:C3:B9:88:A8:43:1A:D6:1C:E5:B2:D3:A2:FD:3E:3A:FE
X509v3 Authority Key Identifier:
keyid:48:CF:37:B3:64:6F:DA:93:CB:DD:0B:8A:AC:CF:FF:31:3A:6F:71:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SM83s2Rv2pPL3QuKrM__MTpvcY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:35:04:3d:93:51:08:5e:45:6e:99:cd:b3:fa:f2:6d:ef:e5:
c2:41:a5:c1:e3:8f:cf:f2:52:dd:ce:80:bb:04:42:4b:44:ba:
f7:5b:81:7d:81:e2:9c:55:d8:54:17:d9:ef:73:19:8c:da:51:
ec:fa:3d:32:0c:d3:a5:64:37:0f:db:6b:de:5b:1f:10:25:32:
26:c5:dc:27:c8:df:a0:f7:53:25:af:ab:a1:8e:1f:bc:74:07:
e8:1b:39:8e:88:8a:85:ec:17:c9:3f:fc:4d:ed:7c:76:bf:6f:
d3:26:77:ae:7c:80:91:4b:7b:18:5d:f3:74:c0:24:df:aa:6b:
35:ad:7d:dd:0f:db:7c:b1:59:f1:ff:e0:ec:a2:b1:1f:2d:1d:
ef:e5:53:8f:94:fc:67:bf:01:73:22:f0:85:a8:7b:5b:c4:12:
80:14:3e:b8:9d:15:08:d0:38:b8:ad:cf:d6:57:1f:9f:97:71:
f9:d5:6d:16:1a:84:43:8e:82:e8:45:36:4e:ca:69:bd:a1:d9:
eb:36:66:86:47:ed:8c:fa:84:5c:01:05:41:74:bd:b3:1f:57:
f9:73:dd:5d:73:3a:29:7e:34:4c:ff:7a:0f:45:75:1c:05:fe:
0a:61:6d:70:16:73:5d:ee:e5:f1:82:99:2f:3f:63:3d:df:09:
c0:e0:31:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 22:59:43 2025 by rpki-client