Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft
File: SM83s2Rv2pPL3QuKrM__MTpvcY8.mft (raw, json)
Hash identifier: Q5x1xb1DiIe1UcxUA5MhOslC3BGKdOjUZeTLE2WuZoM=
Subject key identifier: DC:FA:C2:24:9A:2D:38:C9:B1:F8:43:B2:A4:20:64:A6:B4:22:6C:01
Authority key identifier: 48:CF:37:B3:64:6F:DA:93:CB:DD:0B:8A:AC:CF:FF:31:3A:6F:71:8F
Certificate issuer: /CN=48cf37b3646fda93cbdd0b8aaccfff313a6f718f
Certificate serial: 019766CD507D3ADDF34E1C531401A0D31B35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SM83s2Rv2pPL3QuKrM__MTpvcY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft
Manifest number: 1524
Signing time: Fri 13 Jun 2025 01:00:20 +0000
Manifest this update: Fri 13 Jun 2025 01:00:20 +0000
Manifest next update: Sat 14 Jun 2025 01:00:20 +0000
Files and hashes: 1: Os6xDD1H4LsrEU2Pwmq0YT-o8IM.roa (hash: 9WTAK5WFdauUxfw4Aw74xq8JjOOgRjy/Qe/px+Cijao=)
2: SM83s2Rv2pPL3QuKrM__MTpvcY8.crl (hash: jYSWEcFXIElozz3ROCXIrt5UhwBdQ2kURQwy70oHHJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SM83s2Rv2pPL3QuKrM__MTpvcY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 01:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:66:cd:50:7d:3a:dd:f3:4e:1c:53:14:01:a0:d3:1b:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48cf37b3646fda93cbdd0b8aaccfff313a6f718f
Validity
Not Before: Jun 13 01:00:20 2025 GMT
Not After : Jun 14 01:00:20 2025 GMT
Subject: CN=dcfac2249a2d38c9b1f843b2a42064a6b4226c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:57:66:47:2e:3a:03:3a:af:b7:e2:65:3e:3b:
5c:59:2e:f8:cc:4c:0a:b7:6b:57:3b:70:9a:66:f4:
1d:6d:df:00:4d:58:2e:72:5a:ed:0d:a5:74:4c:69:
5c:55:47:17:10:13:1a:83:11:2d:3b:30:dd:ac:5c:
47:43:a0:d6:cf:fb:5c:83:87:b9:c2:a8:63:66:27:
8d:4e:8c:a0:47:cc:30:0f:59:ee:db:88:0e:6b:b3:
41:2a:23:61:36:c3:b6:74:91:c3:30:f5:ae:0d:29:
fd:e5:53:97:02:f3:02:04:8e:47:e5:4f:f9:35:e9:
16:3e:00:4d:1f:71:cc:be:0c:3f:d1:6d:96:17:00:
a8:50:9e:fd:40:46:0f:4b:75:9f:8b:a1:03:8a:09:
c3:de:da:0d:d0:5b:35:3a:d3:31:a2:7a:e2:3a:9d:
70:0a:61:9b:eb:17:6b:3f:25:b0:2e:46:1d:e9:ee:
ab:63:57:33:6f:56:3b:ff:27:9f:11:c9:1e:b4:62:
ef:a0:63:d1:b3:de:16:12:1b:d8:72:63:9b:e3:8d:
17:25:8d:52:06:8a:9f:50:8b:7b:d8:b6:a3:60:64:
79:60:26:35:a8:b4:72:0e:5a:2f:d6:3a:fa:74:f7:
f0:84:a6:be:b5:e6:24:37:a5:c2:cb:b7:8e:ef:4c:
e5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:FA:C2:24:9A:2D:38:C9:B1:F8:43:B2:A4:20:64:A6:B4:22:6C:01
X509v3 Authority Key Identifier:
keyid:48:CF:37:B3:64:6F:DA:93:CB:DD:0B:8A:AC:CF:FF:31:3A:6F:71:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SM83s2Rv2pPL3QuKrM__MTpvcY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:34:6d:f7:98:67:44:5f:83:29:bb:d7:47:b6:8b:22:3c:4f:
5f:8c:be:fa:bb:ae:5c:aa:f6:97:a8:73:1e:cd:ea:2f:d5:c0:
bf:77:53:b1:d2:45:c0:97:57:2e:81:2f:01:0a:e3:c6:b7:cd:
ab:8e:73:74:61:5a:8a:ff:53:05:63:25:e7:2f:ea:04:a6:95:
01:9c:f6:fc:c6:21:c0:5b:6e:a7:f2:a7:6a:c9:d6:77:b1:be:
a1:44:fe:bb:48:57:64:bf:19:01:c5:f6:86:e0:d0:96:9e:4e:
09:c1:e1:be:b3:b1:04:0a:68:a5:f6:ff:10:47:1f:a7:7a:9f:
aa:1e:e7:d2:31:a1:99:f0:ec:6e:c5:6b:23:c6:ac:2d:1d:9b:
f9:5e:76:6f:ff:27:a2:b2:47:71:03:9e:a0:ca:89:37:45:ed:
ae:a0:61:fb:5f:da:de:3e:e9:24:b3:77:d3:b4:ce:be:82:64:
06:7e:95:f7:ca:5b:1b:75:85:25:f6:8a:ee:b3:21:e5:53:88:
19:b2:22:e8:12:f2:a2:a8:84:dd:26:7d:b4:c2:93:cb:79:20:
e6:ae:2e:9c:7c:4b:f6:5c:5c:5f:48:92:d8:5e:2c:8e:da:34:
ef:50:b3:c8:55:47:3a:e9:87:9a:09:5c:ad:7f:4c:a7:93:1f:
86:bd:49:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 11:22:51 2025 by rpki-client