Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft
File: SM83s2Rv2pPL3QuKrM__MTpvcY8.mft (raw, json)
Hash identifier: 6/jEKltB1A5uF34j/whA+6WKf+SxdaWA3daSyAfF3Gw=
Subject key identifier: 3A:57:06:72:E6:4D:DF:60:C6:35:3D:F4:3F:1D:D1:45:14:08:13:1D
Authority key identifier: 48:CF:37:B3:64:6F:DA:93:CB:DD:0B:8A:AC:CF:FF:31:3A:6F:71:8F
Certificate issuer: /CN=48cf37b3646fda93cbdd0b8aaccfff313a6f718f
Certificate serial: 01975B37010A8D3F2DE93723423B4D16A9A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SM83s2Rv2pPL3QuKrM__MTpvcY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft
Manifest number: 151E
Signing time: Tue 10 Jun 2025 19:00:20 +0000
Manifest this update: Tue 10 Jun 2025 19:00:20 +0000
Manifest next update: Wed 11 Jun 2025 19:00:20 +0000
Files and hashes: 1: Os6xDD1H4LsrEU2Pwmq0YT-o8IM.roa (hash: 9WTAK5WFdauUxfw4Aw74xq8JjOOgRjy/Qe/px+Cijao=)
2: SM83s2Rv2pPL3QuKrM__MTpvcY8.crl (hash: zpLD0LnM/AFu73RL87HuDzxaMM6uySbw6WS/mGGjjvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SM83s2Rv2pPL3QuKrM__MTpvcY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 14:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5b:37:01:0a:8d:3f:2d:e9:37:23:42:3b:4d:16:a9:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48cf37b3646fda93cbdd0b8aaccfff313a6f718f
Validity
Not Before: Jun 10 19:00:20 2025 GMT
Not After : Jun 11 19:00:20 2025 GMT
Subject: CN=3a570672e64ddf60c6353df43f1dd1451408131d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ba:57:41:b4:8c:04:08:9f:1b:84:fd:81:39:
f3:20:83:82:a4:c7:1e:d5:dc:d0:07:6f:34:0d:26:
b0:3c:bc:37:6d:ea:48:f5:db:87:0f:b6:7a:44:13:
13:b5:ed:05:76:1a:eb:2d:52:84:02:ea:77:31:cc:
30:95:8d:1b:91:5a:d2:70:ca:37:c3:9a:c5:1e:b2:
3e:3f:c5:f9:de:8c:14:f2:79:df:21:4b:52:01:20:
1f:3f:b9:37:5f:3d:ba:aa:5c:3d:76:40:fa:74:3c:
e0:44:f9:c2:92:cf:b0:a3:ff:49:80:7e:22:e1:5c:
84:6d:2a:69:23:68:8c:ac:06:b1:f1:94:03:f6:1d:
b0:75:b0:fd:f7:81:10:5c:0a:5a:fd:5d:e5:0d:5e:
97:8a:39:37:a8:82:d0:50:bd:55:78:0e:61:0d:95:
92:c3:0c:4d:a9:86:39:79:8b:78:53:d9:3f:9f:43:
ab:84:4b:7c:13:32:0e:fd:6d:af:22:04:ef:b7:ba:
cb:c3:00:97:de:bd:02:96:98:b0:51:bd:b9:28:a8:
ce:e3:44:cb:22:ff:1e:30:83:ef:85:39:b4:1e:28:
3a:db:6e:b1:ed:54:0f:63:1b:69:cd:e3:c5:06:b0:
87:28:87:3e:ff:90:2d:7a:f0:ea:7d:9e:72:26:59:
a4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:57:06:72:E6:4D:DF:60:C6:35:3D:F4:3F:1D:D1:45:14:08:13:1D
X509v3 Authority Key Identifier:
keyid:48:CF:37:B3:64:6F:DA:93:CB:DD:0B:8A:AC:CF:FF:31:3A:6F:71:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SM83s2Rv2pPL3QuKrM__MTpvcY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:b7:24:08:86:0b:2e:06:f3:43:0f:b6:2f:f7:46:7a:47:97:
a3:60:07:9c:74:91:4f:7d:a5:c6:94:dd:eb:24:df:1d:fd:2b:
94:83:b2:6c:fc:05:28:44:98:42:21:cc:38:c9:be:ed:7a:7a:
ca:a5:6a:18:15:48:0b:af:56:b4:c2:64:59:9e:c4:0f:ea:2d:
54:9e:9f:0b:ef:c9:c2:58:bb:f0:56:d0:27:28:69:50:29:aa:
d0:ac:bc:e2:9b:04:90:d7:5a:aa:2c:8a:93:df:7c:43:62:19:
68:f2:a6:cb:7d:2b:e0:0f:80:38:53:b6:4c:23:53:7b:a3:02:
b4:5f:93:2f:5b:5c:49:2b:37:e5:6d:07:79:c0:a2:c2:90:93:
d1:0c:ee:b4:87:2f:39:44:2c:a5:0c:af:ce:12:ec:31:89:d9:
43:1e:6e:d4:c6:f3:56:f2:28:4b:a6:3f:c6:90:ec:01:94:7a:
d5:2f:e2:46:0e:1f:27:ba:05:a1:de:c8:3f:c0:0b:a2:9c:8d:
36:9b:f6:e9:f5:27:8d:a8:26:a5:e7:b0:a6:ab:3f:39:c8:26:
cd:6e:c1:58:03:68:4e:7b:be:2e:5f:0b:3b:a6:b3:c1:34:3c:
bb:85:58:32:cb:bb:fb:53:2c:f7:a4:65:02:97:2f:b8:28:21:
19:d4:f5:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 23:06:41 2025 by rpki-client