Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft
File: SM83s2Rv2pPL3QuKrM__MTpvcY8.mft (raw, json)
Hash identifier: nD+D7EbFAtJmFaAUE88to5ig2+dKLQNM+50kNVFkMbs=
Subject key identifier: 19:56:7B:76:55:A4:15:62:8C:21:68:2F:5D:82:05:00:1C:56:CE:1F
Authority key identifier: 48:CF:37:B3:64:6F:DA:93:CB:DD:0B:8A:AC:CF:FF:31:3A:6F:71:8F
Certificate issuer: /CN=48cf37b3646fda93cbdd0b8aaccfff313a6f718f
Certificate serial: 01976AAA120FA7E4174BD263F25BB65734B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SM83s2Rv2pPL3QuKrM__MTpvcY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft
Manifest number: 1526
Signing time: Fri 13 Jun 2025 19:00:19 +0000
Manifest this update: Fri 13 Jun 2025 19:00:19 +0000
Manifest next update: Sat 14 Jun 2025 19:00:19 +0000
Files and hashes: 1: Os6xDD1H4LsrEU2Pwmq0YT-o8IM.roa (hash: 9WTAK5WFdauUxfw4Aw74xq8JjOOgRjy/Qe/px+Cijao=)
2: SM83s2Rv2pPL3QuKrM__MTpvcY8.crl (hash: EjTzqrwQMLMhR3baCd/8dMSM7eWOXg1RGMaNwTW/u14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SM83s2Rv2pPL3QuKrM__MTpvcY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:aa:12:0f:a7:e4:17:4b:d2:63:f2:5b:b6:57:34:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48cf37b3646fda93cbdd0b8aaccfff313a6f718f
Validity
Not Before: Jun 13 19:00:19 2025 GMT
Not After : Jun 14 19:00:19 2025 GMT
Subject: CN=19567b7655a415628c21682f5d8205001c56ce1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9b:4d:5a:a9:66:44:16:eb:49:7d:2c:2f:91:
3b:ee:7d:c4:5a:06:f3:e4:aa:d5:37:45:fa:ed:28:
90:29:bf:ee:d7:d6:32:7f:04:2c:df:eb:21:14:d1:
55:46:7c:5a:35:08:2a:54:5c:33:a3:2d:e7:05:a5:
76:0c:fc:7e:11:a1:13:bf:d5:03:16:e7:2b:d2:08:
9e:89:33:e0:32:eb:38:a5:ac:a6:ef:e3:72:12:1c:
ce:ba:71:2c:f5:55:72:4e:06:38:2e:34:df:ae:0f:
09:25:c6:77:59:09:39:f6:bb:8f:ea:bb:e4:1b:19:
b3:34:ea:ea:39:f9:6b:23:16:2a:9e:69:f6:3f:4e:
f6:cd:f2:26:2b:a1:ab:cc:dd:c2:37:51:83:a4:1b:
36:d8:de:78:82:42:b5:76:ec:49:06:06:bd:00:88:
26:5d:44:60:08:3a:70:c5:c3:81:a7:ee:e7:b1:d1:
9e:56:b2:9d:78:3a:d3:01:bb:9b:6a:f1:e4:4d:26:
44:d9:c2:79:d1:0f:ed:7a:76:78:10:0f:2d:2a:d7:
7c:9a:cd:b6:8a:1e:19:dc:dd:85:f6:59:b5:0b:65:
e4:f4:c9:b3:03:87:00:45:66:d2:5f:4d:51:ce:3d:
bf:80:45:65:a6:9f:90:93:af:17:91:f7:cc:4c:60:
92:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:56:7B:76:55:A4:15:62:8C:21:68:2F:5D:82:05:00:1C:56:CE:1F
X509v3 Authority Key Identifier:
keyid:48:CF:37:B3:64:6F:DA:93:CB:DD:0B:8A:AC:CF:FF:31:3A:6F:71:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SM83s2Rv2pPL3QuKrM__MTpvcY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:88:fc:3c:d6:55:fc:b8:55:1a:03:68:bf:83:e6:d6:4b:e1:
59:0a:8b:50:53:04:99:e7:a4:8a:95:e7:0b:c8:e8:d5:97:2b:
c8:af:00:90:78:62:a1:a9:d1:37:56:5f:a9:77:d5:c5:dd:87:
91:38:e2:dd:11:9f:51:bd:7a:ed:cd:76:5d:8d:f3:7d:95:17:
dd:c4:de:f1:62:69:d0:54:5f:dd:1b:14:d9:1f:86:0f:56:7a:
bd:23:d8:4a:00:35:88:58:11:22:6b:e8:1b:08:1c:28:2d:10:
c8:fb:88:3e:bf:d9:8d:44:d1:69:e0:7f:fa:f7:87:16:90:d0:
6a:04:67:3d:48:44:f3:33:69:dd:1c:40:72:a4:fe:ad:91:0d:
1c:b4:25:3d:50:eb:c7:e5:53:e0:b7:72:bb:b6:26:0d:fb:df:
94:b0:ab:bd:56:75:28:55:9a:c3:15:96:4d:c1:55:29:17:ab:
df:b4:68:f2:ed:a5:6b:76:2a:ec:5e:f0:15:b0:cc:75:85:16:
54:6d:90:6f:d1:21:7a:81:44:ac:25:a3:79:27:03:55:84:6b:
58:30:4e:dc:91:4a:92:7a:ba:eb:b3:12:d7:53:1c:c2:28:20:
42:8f:dd:b7:03:ca:e1:77:ec:49:e0:8d:20:75:8e:d3:f4:f2:
08:ca:f6:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 23:36:56 2025 by rpki-client