Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft
File: SM83s2Rv2pPL3QuKrM__MTpvcY8.mft (raw, json)
Hash identifier: cl6w22jGSJg5zku35o+OpMRe8vcBXlsogr7qAn9RAJo=
Subject key identifier: 34:AD:4C:08:2A:6B:91:59:0F:22:22:13:B2:D0:30:3B:5A:F2:03:0F
Authority key identifier: 48:CF:37:B3:64:6F:DA:93:CB:DD:0B:8A:AC:CF:FF:31:3A:6F:71:8F
Certificate issuer: /CN=48cf37b3646fda93cbdd0b8aaccfff313a6f718f
Certificate serial: 01975D255EBABB59F7841C4C9194A1B9C4B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SM83s2Rv2pPL3QuKrM__MTpvcY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft
Manifest number: 151F
Signing time: Wed 11 Jun 2025 04:00:19 +0000
Manifest this update: Wed 11 Jun 2025 04:00:19 +0000
Manifest next update: Thu 12 Jun 2025 04:00:19 +0000
Files and hashes: 1: Os6xDD1H4LsrEU2Pwmq0YT-o8IM.roa (hash: 9WTAK5WFdauUxfw4Aw74xq8JjOOgRjy/Qe/px+Cijao=)
2: SM83s2Rv2pPL3QuKrM__MTpvcY8.crl (hash: M45jdR1GtnMwmUKLD0Reifm1kajk600tF7KDV72W6fg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SM83s2Rv2pPL3QuKrM__MTpvcY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 04:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:25:5e:ba:bb:59:f7:84:1c:4c:91:94:a1:b9:c4:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48cf37b3646fda93cbdd0b8aaccfff313a6f718f
Validity
Not Before: Jun 11 04:00:19 2025 GMT
Not After : Jun 12 04:00:19 2025 GMT
Subject: CN=34ad4c082a6b91590f222213b2d0303b5af2030f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2a:a1:c0:f3:73:8f:90:36:3b:97:8b:4a:92:
d1:15:d1:ef:9b:8b:e0:36:ed:3e:3c:38:23:33:52:
f0:d8:74:b1:96:b1:76:65:54:55:a9:81:10:69:12:
e4:29:61:51:f3:d0:df:6c:4c:22:d4:6c:ed:d0:d5:
fd:a1:21:b0:cc:1d:87:00:02:7d:4f:3a:25:2f:55:
bf:d2:9a:e4:b5:b9:fd:b1:a1:59:6b:4c:1f:bc:d2:
23:42:07:70:72:3b:3f:fd:66:62:4e:4e:6a:4b:bb:
1f:fa:93:ed:aa:0c:ff:5f:ca:3c:19:59:b0:39:4b:
89:35:68:0c:34:9c:2f:a4:9b:ae:80:23:8b:1b:c4:
90:b5:08:2b:75:91:be:a5:e2:73:f8:b1:5d:65:ea:
a5:6f:88:5d:88:92:a1:76:e7:b9:fe:a7:3e:f4:64:
59:8d:14:b6:3e:b9:37:55:75:6f:8f:60:52:3a:5d:
a4:84:a5:8e:c7:24:fa:e8:06:b8:8f:c3:03:66:a6:
58:48:d6:c9:d0:d3:7c:80:7d:79:c1:21:43:31:f9:
f7:44:85:78:2b:f7:3b:e1:0a:e6:c7:40:29:3b:e4:
9d:dd:e0:1f:79:dc:83:12:57:1e:4e:3b:e7:80:d7:
f9:e6:3b:54:be:8f:69:fc:eb:d7:b3:12:35:d3:cf:
16:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:AD:4C:08:2A:6B:91:59:0F:22:22:13:B2:D0:30:3B:5A:F2:03:0F
X509v3 Authority Key Identifier:
keyid:48:CF:37:B3:64:6F:DA:93:CB:DD:0B:8A:AC:CF:FF:31:3A:6F:71:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SM83s2Rv2pPL3QuKrM__MTpvcY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:70:b6:72:6a:51:bb:f0:f3:d4:4e:d0:a2:66:70:d4:5b:1a:
f2:51:a3:85:09:3e:bf:60:fc:a4:55:73:98:7c:4b:b3:99:dc:
58:f5:0e:4d:1c:77:0c:4e:db:b0:6d:46:ab:3b:3e:07:5b:f4:
85:aa:a1:7a:bf:25:85:15:bf:e1:f5:91:5f:ff:49:fc:28:eb:
b6:d1:d5:3a:97:e7:e4:44:99:45:f8:ec:b4:02:d3:96:56:9b:
0f:4c:f1:97:b3:7a:51:e8:d0:3f:1e:5b:48:8b:3a:1e:67:04:
9e:79:8c:bb:bd:85:2a:42:da:68:cf:9c:c4:92:c7:34:9d:47:
8d:bd:90:8a:ff:90:c3:25:77:d0:b1:72:a2:63:1f:51:c2:35:
18:8f:b0:00:86:ef:90:66:d1:f6:73:97:ac:21:d8:51:f3:d9:
0b:d1:62:27:9f:fc:2b:77:e1:bc:22:3f:0b:15:c4:f6:17:8b:
dd:5d:36:53:7d:8e:97:cb:ad:64:68:38:c1:4f:49:e8:76:8f:
f6:82:04:03:ab:f8:36:7b:9b:1a:a1:51:a5:01:e6:aa:6a:c0:
03:90:8b:83:bf:66:ef:97:7f:5b:00:45:06:ab:17:ad:2a:a3:
c7:f3:48:83:14:7f:f9:5b:e2:ae:ec:af:b6:71:62:7a:73:0e:
7b:ea:cf:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 14:40:25 2025 by rpki-client