Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft
File: SzMg4LtdviupcmkbddaPSPblf4g.mft (raw, json)
Hash identifier: LoIqpKEJ76xHntVJKUcqnmoxa/OwallmaCC5XKCAVt4=
Subject key identifier: 16:57:B8:20:1E:59:C6:DC:6F:92:6F:96:6B:A9:69:9D:30:75:C0:55
Authority key identifier: 4B:33:20:E0:BB:5D:BE:2B:A9:72:69:1B:75:D6:8F:48:F6:E5:7F:88
Certificate issuer: /CN=4b3320e0bb5dbe2ba972691b75d68f48f6e57f88
Certificate serial: 019604C0C3A97C440B847335DF8B16E57A1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzMg4LtdviupcmkbddaPSPblf4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft
Manifest number: 03C5
Signing time: Sat 05 Apr 2025 07:01:03 +0000
Manifest this update: Sat 05 Apr 2025 07:01:03 +0000
Manifest next update: Sun 06 Apr 2025 07:01:03 +0000
Files and hashes: 1: 9qzW7YnH36W9vXQ1K-UKRmz0zEQ.roa (hash: J4D08zsa0EB7fStK9W20ZzcbFP+tabj/c0DhqsCIFd8=)
2: I-kFpoqyTRW457pDaSm8d1efpI4.roa (hash: kl/MemwjhzLvig9zm+2bDw2e8HG1sMcZ5V+KPClYcBg=)
3: SzMg4LtdviupcmkbddaPSPblf4g.crl (hash: 5e77k7pKPKZLnmPv/uQq+x7OfXSuvMavXaK3JBZcZ78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzMg4LtdviupcmkbddaPSPblf4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:04:c0:c3:a9:7c:44:0b:84:73:35:df:8b:16:e5:7a:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3320e0bb5dbe2ba972691b75d68f48f6e57f88
Validity
Not Before: Apr 5 07:01:03 2025 GMT
Not After : Apr 6 07:01:03 2025 GMT
Subject: CN=1657b8201e59c6dc6f926f966ba9699d3075c055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c1:4d:69:8e:3a:76:d5:c1:50:3d:c2:07:6d:
7c:e6:6f:cb:b5:0f:32:1c:08:aa:63:02:a8:26:15:
2b:87:d0:87:24:ee:4b:b5:82:02:4e:1a:3e:f9:44:
55:33:a2:29:63:02:56:fa:94:aa:77:5b:fe:dc:d0:
df:64:e9:d1:8a:57:d0:cb:e2:24:41:a0:55:3e:3f:
31:a1:68:ac:d6:8f:a6:41:15:de:4e:00:72:64:a2:
fd:c0:2e:d7:42:11:89:f2:99:a9:be:77:fd:d5:59:
a0:8f:5b:ac:00:5f:c1:bf:1b:3b:e9:df:88:e4:d7:
f5:9d:2e:7b:1d:ea:e5:79:b5:dd:67:71:65:05:64:
d5:df:ca:e4:9f:25:de:87:7c:70:ee:96:ad:b0:9e:
af:e4:34:42:96:b7:19:22:de:d1:2a:d3:56:78:8c:
fc:79:2c:cc:31:a2:f3:e7:b9:4c:77:3f:e6:c5:a6:
33:a5:7b:c1:a8:9d:9b:76:d3:03:d5:a4:b4:85:5a:
28:f8:a3:97:4a:02:4e:a0:e2:97:99:da:30:c6:50:
bf:24:f9:8e:2d:c1:7b:77:57:e8:5c:03:b9:3e:a0:
59:94:6d:3c:bb:0c:b5:84:77:6b:82:52:2b:48:93:
a7:5d:70:63:d1:60:f3:fe:5a:c2:ad:8a:72:eb:3f:
b6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:57:B8:20:1E:59:C6:DC:6F:92:6F:96:6B:A9:69:9D:30:75:C0:55
X509v3 Authority Key Identifier:
keyid:4B:33:20:E0:BB:5D:BE:2B:A9:72:69:1B:75:D6:8F:48:F6:E5:7F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzMg4LtdviupcmkbddaPSPblf4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:a7:5c:76:87:15:7f:3f:da:27:1a:ce:89:d8:9e:3d:ba:c8:
60:af:56:df:7e:d2:b5:1a:32:ed:93:d4:ee:0a:da:45:3f:58:
1d:fb:3f:db:f2:d1:0d:9a:17:14:40:c9:a1:78:68:82:92:5c:
2f:bb:e9:eb:ef:e9:54:f8:aa:c1:45:ad:70:5e:e7:9b:75:43:
83:e3:83:e5:85:55:55:70:61:c0:35:7c:51:42:ce:f7:87:99:
6e:2f:b3:b4:17:3d:65:9d:bc:5c:91:db:ad:30:76:2d:bc:1f:
91:bc:50:b2:da:9c:1a:a1:57:d8:bc:c9:35:43:fc:3f:a2:f2:
8e:6b:b7:ce:5e:1e:64:13:5e:6b:ac:aa:90:87:81:cb:39:c8:
91:fd:f1:49:8c:b1:74:ac:39:18:52:55:fa:09:85:b2:38:e8:
db:52:d7:bf:41:55:aa:e0:dc:aa:62:18:48:84:78:bb:bd:08:
75:9a:09:14:98:e7:e0:f9:f7:b7:0e:f8:2c:a7:e9:42:75:4f:
5f:d4:02:be:af:04:37:c6:e3:1e:bb:fe:5e:96:70:7c:f5:6c:
8e:e6:b4:bc:7d:16:f3:79:80:02:07:73:34:f9:41:89:1a:23:
c0:eb:c4:a5:5a:ec:7a:d1:c4:2a:df:7b:2c:ff:ed:93:dc:70:
07:b7:10:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:12:54 2025 by rpki-client