Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft
File: SzMg4LtdviupcmkbddaPSPblf4g.mft (raw, json)
Hash identifier: JF4Ik1O9bFBGoDLpTbDzT0AX/ThaoWmgdKjqbO1jGzM=
Subject key identifier: 59:90:F6:00:86:EF:9E:24:9E:79:40:81:9A:4F:66:38:10:39:4E:A3
Authority key identifier: 4B:33:20:E0:BB:5D:BE:2B:A9:72:69:1B:75:D6:8F:48:F6:E5:7F:88
Certificate issuer: /CN=4b3320e0bb5dbe2ba972691b75d68f48f6e57f88
Certificate serial: 0199FC8F3BFBE6142F29F73457FEBFF4203E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzMg4LtdviupcmkbddaPSPblf4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft
Manifest number: 05D3
Signing time: Sun 19 Oct 2025 13:01:09 +0000
Manifest this update: Sun 19 Oct 2025 13:01:09 +0000
Manifest next update: Mon 20 Oct 2025 13:01:09 +0000
Files and hashes: 1: 9qzW7YnH36W9vXQ1K-UKRmz0zEQ.roa (hash: J4D08zsa0EB7fStK9W20ZzcbFP+tabj/c0DhqsCIFd8=)
2: I-kFpoqyTRW457pDaSm8d1efpI4.roa (hash: kl/MemwjhzLvig9zm+2bDw2e8HG1sMcZ5V+KPClYcBg=)
3: SzMg4LtdviupcmkbddaPSPblf4g.crl (hash: wGbZt59js/hskYvHt9cgo6TCHRsvtt2VUL9Y5XSMsnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzMg4LtdviupcmkbddaPSPblf4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:3b:fb:e6:14:2f:29:f7:34:57:fe:bf:f4:20:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3320e0bb5dbe2ba972691b75d68f48f6e57f88
Validity
Not Before: Oct 19 13:01:09 2025 GMT
Not After : Oct 20 13:01:09 2025 GMT
Subject: CN=5990f60086ef9e249e7940819a4f663810394ea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8e:3d:ff:38:d3:c7:14:3c:de:8c:16:17:7e:
94:10:8d:25:6b:31:4b:f5:1a:10:b9:17:b3:f1:eb:
79:68:de:f6:64:ec:e4:f7:22:6f:24:56:c9:61:f1:
26:2d:b3:ad:c3:5f:88:7c:97:63:72:d2:0a:0c:3e:
c8:b2:bb:e9:55:ea:94:25:16:52:5a:2e:92:79:c8:
da:45:97:31:30:00:d2:1b:7a:ad:64:f5:f4:7c:d9:
45:e3:c0:bf:bc:a9:04:05:c3:ef:60:8c:60:83:52:
2d:97:d4:7d:3a:7c:c2:0d:42:62:93:ba:fc:90:74:
da:27:0d:86:f6:a9:7b:50:b8:e4:f7:84:65:75:1d:
75:24:2b:8a:e2:b0:3f:4d:95:28:7c:d1:5f:ad:fe:
c4:62:75:a3:35:5d:7f:ed:ab:af:cc:7b:18:85:53:
5a:b1:64:10:26:93:2c:3c:14:66:96:74:30:62:25:
fa:02:27:f3:31:24:f9:8e:c5:f6:b6:e8:37:9a:44:
02:5d:db:24:6c:2e:d0:12:a1:61:30:48:5f:6a:d1:
65:5e:6e:c1:e0:d4:e3:2f:17:29:e5:ec:1e:31:1d:
b3:c4:7b:1d:1e:03:f8:9d:11:7e:8e:0b:fc:be:9a:
a0:a5:36:dd:f1:c9:3c:31:cf:0e:61:54:59:df:42:
26:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:90:F6:00:86:EF:9E:24:9E:79:40:81:9A:4F:66:38:10:39:4E:A3
X509v3 Authority Key Identifier:
keyid:4B:33:20:E0:BB:5D:BE:2B:A9:72:69:1B:75:D6:8F:48:F6:E5:7F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzMg4LtdviupcmkbddaPSPblf4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:e5:bb:82:34:53:49:f2:25:33:6c:aa:32:70:20:a7:e6:62:
be:fa:af:7d:9e:85:bc:46:f3:46:81:f0:ee:7e:e9:5f:4c:36:
d8:60:a0:60:63:59:e8:e0:72:58:9f:3c:a1:d4:c6:c6:0c:b8:
e5:f8:ad:f0:bb:cd:ac:26:dd:33:e2:8b:a4:cc:84:60:4b:5f:
3f:2e:f3:39:b1:45:49:b7:91:d3:f1:6f:ce:00:dc:ae:e3:b1:
fe:59:d1:f3:a4:3b:12:5f:a5:1a:9a:0a:0d:14:08:f9:8f:13:
af:c6:22:57:4a:39:74:9b:a1:87:9c:4a:f1:b3:f8:02:54:a9:
d0:87:3f:71:76:e2:55:31:7f:b6:89:84:e5:9e:17:a0:16:aa:
08:f6:d0:66:82:24:9e:29:11:07:41:02:7e:2f:7e:97:d4:f5:
81:52:0a:05:ea:a8:60:20:e8:54:69:2a:ff:fc:c5:aa:ed:d5:
cb:b9:da:53:1f:51:e7:86:31:3e:f9:31:14:56:31:c9:dd:7c:
c1:f5:6c:de:4b:3a:70:d2:bf:7a:f3:12:37:84:33:4c:6d:d7:
e4:dc:97:00:37:ed:00:54:38:be:64:54:da:f3:27:2c:74:24:
06:62:8c:00:44:f2:ee:da:3d:75:b6:54:2f:93:9a:92:76:94:
ad:bd:e8:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:05:20 2025 by rpki-client