Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/444437-6843-4ad4-b764-79cc52c06d4f/1/szmLWx2aluQRW3vPb8pj-69jnKc.mft
File: szmLWx2aluQRW3vPb8pj-69jnKc.mft (raw, json)
Hash identifier: AnSRjSIC1e/WcGmFvHOZl9NKrqKfyZJlP+Hc1MBE2SI=
Subject key identifier: 90:E0:C4:1D:93:4B:EC:CE:D1:0D:6E:D8:71:13:26:A2:0D:8B:47:4D
Authority key identifier: B3:39:8B:5B:1D:9A:96:E4:11:5B:7B:CF:6F:CA:63:FB:AF:63:9C:A7
Certificate issuer: /CN=b3398b5b1d9a96e4115b7bcf6fca63fbaf639ca7
Certificate serial: 0196BF6F523D0D634103C6BBC21B9AE68872
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/szmLWx2aluQRW3vPb8pj-69jnKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/444437-6843-4ad4-b764-79cc52c06d4f/1/szmLWx2aluQRW3vPb8pj-69jnKc.mft
Manifest number: 1032
Signing time: Sun 11 May 2025 13:01:05 +0000
Manifest this update: Sun 11 May 2025 13:01:05 +0000
Manifest next update: Mon 12 May 2025 13:01:05 +0000
Files and hashes: 1: 3Uvg-SGM_zlK_SKX6X83CL5pES4.roa (hash: txSz1BVeFo/z2vKlSjUFGN00mKoCcahrUY9+MYjGUZA=)
2: szmLWx2aluQRW3vPb8pj-69jnKc.crl (hash: 90WPqu8ulHAdvnbA6d5CEJ/8sl9FNdqv5N/Gz+k65Jc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/444437-6843-4ad4-b764-79cc52c06d4f/1/szmLWx2aluQRW3vPb8pj-69jnKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/444437-6843-4ad4-b764-79cc52c06d4f/1/szmLWx2aluQRW3vPb8pj-69jnKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/szmLWx2aluQRW3vPb8pj-69jnKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 13:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6f:52:3d:0d:63:41:03:c6:bb:c2:1b:9a:e6:88:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3398b5b1d9a96e4115b7bcf6fca63fbaf639ca7
Validity
Not Before: May 11 13:01:05 2025 GMT
Not After : May 12 13:01:05 2025 GMT
Subject: CN=90e0c41d934becced10d6ed8711326a20d8b474d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:2d:2a:66:c4:58:d5:a4:34:cb:9e:41:4e:3e:
53:f4:1c:33:92:28:93:1f:7d:66:c6:1e:fc:a0:cc:
0b:f6:2e:ba:b1:d5:29:cd:e4:8a:d2:a3:cf:b6:e1:
a0:f6:7b:c2:cd:41:27:a5:ef:95:f4:d5:58:aa:b2:
db:28:eb:e8:34:6b:66:92:47:da:63:33:b0:ec:cc:
dc:98:be:38:23:c1:c1:c7:da:8a:5b:a4:9e:db:59:
53:1d:f4:6d:2b:40:5a:4e:d7:a1:39:95:9d:aa:6e:
00:3b:c6:4d:f0:34:ca:aa:cc:85:c8:1c:74:b5:71:
e9:fa:76:d6:21:a0:3f:80:09:89:ba:ec:c5:4f:8a:
35:41:b3:1f:c3:5a:1d:58:a1:41:ed:f7:3a:3c:92:
52:cc:20:b5:9a:eb:30:ec:57:36:ad:93:f4:dd:cc:
36:c6:a1:61:29:26:3c:d9:16:50:52:a2:76:92:64:
a2:df:84:b5:89:0f:84:8d:85:8e:a6:db:be:4f:be:
fe:c4:8b:9e:52:c5:bf:62:55:85:85:98:73:2f:dc:
7b:65:ef:c1:9c:49:bf:24:1e:bd:2f:a6:8d:a0:60:
2a:ab:76:3f:02:88:20:19:14:00:aa:ed:4e:cc:9e:
34:c6:99:17:e9:d2:e7:78:d3:43:85:59:0a:49:21:
db:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E0:C4:1D:93:4B:EC:CE:D1:0D:6E:D8:71:13:26:A2:0D:8B:47:4D
X509v3 Authority Key Identifier:
keyid:B3:39:8B:5B:1D:9A:96:E4:11:5B:7B:CF:6F:CA:63:FB:AF:63:9C:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/szmLWx2aluQRW3vPb8pj-69jnKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/444437-6843-4ad4-b764-79cc52c06d4f/1/szmLWx2aluQRW3vPb8pj-69jnKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/444437-6843-4ad4-b764-79cc52c06d4f/1/szmLWx2aluQRW3vPb8pj-69jnKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:ba:2f:a3:13:5d:91:fa:a3:72:7f:a8:d9:ca:c5:54:5f:54:
65:56:26:78:07:6f:a2:bb:d2:0b:b4:14:6f:c8:e6:a5:32:db:
06:15:76:ba:17:44:72:c3:da:15:f5:06:8a:9d:08:f3:17:9a:
17:be:bc:5f:37:7e:59:f0:48:92:c8:1e:eb:7b:56:cb:48:50:
0a:87:4d:b5:ff:05:f4:b7:ab:94:24:a8:e9:29:4d:86:f0:21:
6c:53:b2:ab:f8:22:3d:b6:b0:f4:f0:e6:83:b3:75:a2:4c:29:
5e:1b:28:47:da:4f:3c:00:ab:10:e6:3e:30:90:4a:6e:9f:f2:
ee:fd:3f:12:78:00:b1:26:2b:5b:27:68:b6:7e:f4:fa:4b:0a:
a9:14:c7:3d:f7:1b:66:27:1e:26:70:d0:64:f6:6c:3e:20:fb:
30:e7:7a:89:fe:24:29:8a:59:b0:df:78:32:6d:43:41:3d:85:
6a:54:4f:41:69:68:92:26:c7:cb:bf:5e:29:11:f6:a7:73:aa:
8b:cd:a2:aa:02:8d:b2:66:45:18:9f:8a:53:ba:8a:f0:33:72:
88:ef:c4:06:c5:1d:e4:12:32:47:79:22:ff:be:70:fb:be:6b:
ab:2f:e9:94:7f:b7:34:24:c1:15:50:38:4b:3c:f3:40:00:79:
da:28:46:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa/b1I9DWNBA8a7whua5ohyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzMzk4YjViMWQ5YTk2ZTQxMTViN2JjZjZmY2E2M2ZiYWY2
MzljYTcwHhcNMjUwNTExMTMwMTA1WhcNMjUwNTEyMTMwMTA1WjAzMTEwLwYDVQQD
Eyg5MGUwYzQxZDkzNGJlY2NlZDEwZDZlZDg3MTEzMjZhMjBkOGI0NzRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7C0qZsRY1aQ0y55BTj5T9BwzkiiT
H31mxh78oMwL9i66sdUpzeSK0qPPtuGg9nvCzUEnpe+V9NVYqrLbKOvoNGtmkkfa
YzOw7MzcmL44I8HBx9qKW6Se21lTHfRtK0BaTtehOZWdqm4AO8ZN8DTKqsyFyBx0
tXHp+nbWIaA/gAmJuuzFT4o1QbMfw1odWKFB7fc6PJJSzCC1musw7Fc2rZP03cw2
xqFhKSY82RZQUqJ2kmSi34S1iQ+EjYWOptu+T77+xIueUsW/YlWFhZhzL9x7Ze/B
nEm/JB69L6aNoGAqq3Y/AoggGRQAqu1OzJ40xpkX6dLneNNDhVkKSSHbkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJDgxB2TS+zO0Q1u2HETJqINi0dNMB8GA1UdIwQY
MBaAFLM5i1sdmpbkEVt7z2/KY/uvY5ynMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3ptTFd4MmFsdVFSVzN2UGI4cGotNjlqbktjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi80NDQ0MzctNjg0My00YWQ0LWI3NjQt
NzljYzUyYzA2ZDRmLzEvc3ptTFd4MmFsdVFSVzN2UGI4cGotNjlqbktjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi80NDQ0MzctNjg0My00YWQ0LWI3NjQtNzljYzUyYzA2ZDRm
LzEvc3ptTFd4MmFsdVFSVzN2UGI4cGotNjlqbktjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk7ovoxNd
kfqjcn+o2crFVF9UZVYmeAdvorvSC7QUb8jmpTLbBhV2uhdEcsPaFfUGip0I8xea
F768Xzd+WfBIksge63tWy0hQCodNtf8F9LerlCSo6SlNhvAhbFOyq/giPbaw9PDm
g7N1okwpXhsoR9pPPACrEOY+MJBKbp/y7v0/EngAsSYrWydotn70+ksKqRTHPfcb
ZiceJnDQZPZsPiD7MOd6if4kKYpZsN94Mm1DQT2FalRPQWlokibHy79eKRH2p3Oq
i82iqgKNsmZFGJ+KU7qK8DNyiO/EBsUd5BIyR3ki/75w+75rqy/plH+3NCTBFVA4
SzzzQAB52ihGww==
-----END CERTIFICATE-----
Generated at Sun May 11 22:09:13 2025 by rpki-client