Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft
File: SzMg4LtdviupcmkbddaPSPblf4g.mft (raw, json)
Hash identifier: O2yZvY+kir0w5/Hx+/pn+1olh2tS+nCxOOywSlt3zUc=
Subject key identifier: C6:F6:45:BA:27:67:CC:2F:76:03:48:EA:26:82:56:4B:E0:CD:70:7A
Authority key identifier: 4B:33:20:E0:BB:5D:BE:2B:A9:72:69:1B:75:D6:8F:48:F6:E5:7F:88
Certificate issuer: /CN=4b3320e0bb5dbe2ba972691b75d68f48f6e57f88
Certificate serial: 0198C5A2BFE4A414D9889084F8BC7D2AC808
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzMg4LtdviupcmkbddaPSPblf4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft
Manifest number: 0532
Signing time: Wed 20 Aug 2025 04:00:34 +0000
Manifest this update: Wed 20 Aug 2025 04:00:34 +0000
Manifest next update: Thu 21 Aug 2025 04:00:34 +0000
Files and hashes: 1: 9qzW7YnH36W9vXQ1K-UKRmz0zEQ.roa (hash: J4D08zsa0EB7fStK9W20ZzcbFP+tabj/c0DhqsCIFd8=)
2: I-kFpoqyTRW457pDaSm8d1efpI4.roa (hash: kl/MemwjhzLvig9zm+2bDw2e8HG1sMcZ5V+KPClYcBg=)
3: SzMg4LtdviupcmkbddaPSPblf4g.crl (hash: LfCTZN9iZ15S7VyRAT3L2sN42hHqEfwD3sSi1P3/4Ws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzMg4LtdviupcmkbddaPSPblf4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 04:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c5:a2:bf:e4:a4:14:d9:88:90:84:f8:bc:7d:2a:c8:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3320e0bb5dbe2ba972691b75d68f48f6e57f88
Validity
Not Before: Aug 20 04:00:34 2025 GMT
Not After : Aug 21 04:00:34 2025 GMT
Subject: CN=c6f645ba2767cc2f760348ea2682564be0cd707a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:29:38:f3:a4:e7:93:f4:a1:6a:be:54:ec:a0:
1a:52:fa:b8:4d:3f:60:df:78:42:03:5d:7e:90:f5:
c2:94:2a:21:c4:18:96:85:9d:c3:fe:99:a0:31:df:
75:93:d1:01:09:d0:69:7d:04:ba:e7:a5:d7:04:55:
13:6d:6d:e7:c7:f0:85:ee:a5:57:5e:40:5d:9d:01:
bd:86:79:13:62:cf:93:df:41:77:1d:2c:50:f8:30:
16:48:16:38:9c:97:1e:e7:22:b9:5b:5d:6f:e2:8e:
6b:28:e2:71:0b:9b:d9:e5:f1:8c:c3:8b:51:5f:7f:
0c:98:eb:11:88:f1:c4:44:e7:a4:7e:fe:fc:1f:e3:
da:81:8c:55:fa:73:a5:02:29:7a:da:6c:3f:00:d9:
f4:09:f7:d5:df:d1:b8:af:56:f5:ac:b1:66:4d:42:
3c:f0:af:26:58:b3:88:da:79:6d:0a:b1:0c:f2:d8:
f7:07:71:64:c8:29:19:91:03:a0:51:5d:5b:cc:b6:
95:7c:94:f1:35:7e:ec:47:b4:a4:18:d0:27:00:58:
15:37:f5:52:15:57:0e:f1:7a:18:d4:b4:d9:1c:cd:
0e:41:cc:7f:c4:da:a7:f9:9b:a9:6c:a4:c2:2d:bf:
61:49:ff:e3:e1:05:bf:d6:24:cb:04:e8:6d:9a:0a:
74:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:F6:45:BA:27:67:CC:2F:76:03:48:EA:26:82:56:4B:E0:CD:70:7A
X509v3 Authority Key Identifier:
keyid:4B:33:20:E0:BB:5D:BE:2B:A9:72:69:1B:75:D6:8F:48:F6:E5:7F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzMg4LtdviupcmkbddaPSPblf4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:d1:ce:54:f4:1c:35:f0:d6:0f:45:86:6b:8d:4a:1f:f0:e9:
8c:d4:db:67:34:98:0c:3d:2a:91:2b:21:90:98:54:f6:d0:71:
71:d2:ab:1b:d1:42:6d:31:13:55:53:26:45:68:9a:2b:9b:14:
a1:0d:02:3a:f2:18:30:26:b2:c1:f0:5c:aa:b7:4a:6a:ea:92:
4b:f9:0f:12:b8:6d:de:61:c3:57:eb:8d:9d:02:29:85:5e:e2:
f7:a1:c6:e7:84:72:de:07:74:d8:cb:01:25:26:28:fb:7a:b8:
c1:06:a4:34:73:28:e8:0b:e7:19:48:59:ff:a9:41:22:7f:f7:
6b:9c:8f:fc:d0:77:b7:25:fd:19:e2:1d:cc:9c:14:da:54:88:
4c:e6:9c:b7:1b:0a:c6:e0:2d:72:23:2f:da:7e:7f:b4:07:0e:
dc:cf:fc:f2:d5:6c:e4:b8:70:83:89:b2:c0:4a:fb:5c:b5:01:
41:39:62:84:78:3e:82:48:07:4a:04:41:b6:f2:55:aa:1d:58:
5d:d0:81:62:2d:0e:ab:f4:1e:7d:23:f3:a6:4c:10:35:d6:a4:
a7:06:e2:96:b6:a1:9c:f7:da:25:e0:25:31:90:a7:2e:81:26:
69:35:25:2b:82:33:40:d2:c5:9b:cc:ee:04:54:98:2b:d1:57:
bf:d3:87:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 13:40:50 2025 by rpki-client