Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft
File: SzMg4LtdviupcmkbddaPSPblf4g.mft (raw, json)
Hash identifier: 4p/nKsOTw2YOFGTME78zzKKkRoNihw8GO1FDjjdkig4=
Subject key identifier: 76:31:4A:AE:C2:04:B4:09:27:30:43:09:2E:3F:36:A8:66:6B:33:24
Authority key identifier: 4B:33:20:E0:BB:5D:BE:2B:A9:72:69:1B:75:D6:8F:48:F6:E5:7F:88
Certificate issuer: /CN=4b3320e0bb5dbe2ba972691b75d68f48f6e57f88
Certificate serial: 01974B1F1CF7C516BC795B9C2BC286878457
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzMg4LtdviupcmkbddaPSPblf4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft
Manifest number: 046E
Signing time: Sat 07 Jun 2025 16:00:19 +0000
Manifest this update: Sat 07 Jun 2025 16:00:19 +0000
Manifest next update: Sun 08 Jun 2025 16:00:19 +0000
Files and hashes: 1: 9qzW7YnH36W9vXQ1K-UKRmz0zEQ.roa (hash: J4D08zsa0EB7fStK9W20ZzcbFP+tabj/c0DhqsCIFd8=)
2: I-kFpoqyTRW457pDaSm8d1efpI4.roa (hash: kl/MemwjhzLvig9zm+2bDw2e8HG1sMcZ5V+KPClYcBg=)
3: SzMg4LtdviupcmkbddaPSPblf4g.crl (hash: HNt3E0KnZOv1wHrbAvZgqxuVN/hzbfjKLXKdRRFzsfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzMg4LtdviupcmkbddaPSPblf4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:1c:f7:c5:16:bc:79:5b:9c:2b:c2:86:87:84:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3320e0bb5dbe2ba972691b75d68f48f6e57f88
Validity
Not Before: Jun 7 16:00:19 2025 GMT
Not After : Jun 8 16:00:19 2025 GMT
Subject: CN=76314aaec204b409273043092e3f36a8666b3324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0f:cd:db:30:67:b4:cc:17:14:c8:c3:68:6f:
f5:44:02:2d:59:b2:fd:e6:ee:43:a3:f6:13:a1:0b:
af:be:c1:82:17:22:ee:8c:54:8b:8d:9f:45:91:84:
9e:55:83:cd:0f:bc:5d:e9:b6:b6:c7:95:ac:fd:40:
1e:99:f3:ed:c5:16:3b:4a:74:8e:06:e0:08:ca:db:
6b:60:d1:b7:ed:87:a5:83:47:6f:22:23:59:70:fa:
11:79:8b:15:db:15:0b:83:cb:40:99:ca:43:7f:f8:
50:47:ef:79:33:e1:4a:6b:b3:40:a8:93:f7:e8:12:
95:e6:51:7b:6c:db:a0:ab:a9:ef:cc:35:02:71:e5:
13:71:e3:eb:83:e6:02:9a:7b:2e:3e:cc:72:4a:61:
a8:15:df:c8:da:25:bb:27:6a:f5:ff:ae:39:cf:d6:
c4:31:88:96:0f:ef:58:b7:bc:d9:51:c8:0c:8a:a5:
46:8b:98:a4:3f:eb:54:8a:52:aa:03:0e:55:f6:72:
a4:af:fc:f0:ce:1a:82:48:13:55:37:f1:b2:31:83:
e7:c0:aa:fa:1e:77:b4:b4:01:06:f4:43:ae:65:e1:
92:84:c9:0a:2a:c9:b8:9f:05:bd:ab:0d:f9:aa:d4:
ee:cf:cc:7f:85:1c:07:c5:e9:89:83:b9:8c:c8:c9:
89:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:31:4A:AE:C2:04:B4:09:27:30:43:09:2E:3F:36:A8:66:6B:33:24
X509v3 Authority Key Identifier:
keyid:4B:33:20:E0:BB:5D:BE:2B:A9:72:69:1B:75:D6:8F:48:F6:E5:7F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzMg4LtdviupcmkbddaPSPblf4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:a9:f6:1e:65:dc:7a:53:61:68:50:2a:92:4a:a1:31:9f:00:
ad:7b:72:c4:6c:cf:b2:ff:32:cc:93:dd:d9:35:e6:15:72:3f:
b1:c6:35:a7:df:10:bc:7e:db:d5:67:f9:6c:fa:a5:6a:07:e9:
70:9a:c9:bb:02:4a:b4:2c:df:81:c5:ad:4b:92:d5:1c:a5:2b:
05:73:1e:70:f0:22:ff:35:14:eb:45:f2:e5:37:57:1c:f4:c2:
f4:d9:fc:6c:02:53:dd:db:ae:56:71:54:a1:26:29:7d:b9:e1:
44:83:13:40:67:b6:3b:4b:e8:ef:cf:cf:9d:a4:8f:8f:32:d6:
62:59:06:e8:4d:be:ff:aa:0f:f2:b9:b2:40:77:c7:65:a4:aa:
bd:ad:33:f2:35:ec:fa:e0:c2:a5:92:75:6b:2e:4f:1a:23:6b:
56:c3:23:26:b6:59:e4:89:0b:e9:b3:ed:14:c6:b1:5d:71:34:
5c:ec:41:67:be:6f:9e:f9:90:4e:9a:ed:7e:6e:92:e6:67:7c:
8f:99:23:0b:c2:0a:1b:b6:36:16:fe:ec:be:fe:ed:df:6a:2e:
81:bc:a0:4a:cc:e5:ae:ea:67:ac:7d:33:8a:60:53:30:29:60:
98:bf:10:88:ea:6e:4a:8f:51:d1:ed:4f:1a:58:24:e6:05:7a:
00:fa:a0:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:34:43 2025 by rpki-client