Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/444437-6843-4ad4-b764-79cc52c06d4f/1/szmLWx2aluQRW3vPb8pj-69jnKc.mft
File: szmLWx2aluQRW3vPb8pj-69jnKc.mft (raw, json)
Hash identifier: Ybq3Ytmx9hQStp8KPvX6u/3fAbuFQIDuzxy4+7n8T98=
Subject key identifier: B5:4F:16:5C:66:4C:60:65:79:EA:76:50:70:6D:0E:16:0B:D5:BB:1B
Authority key identifier: B3:39:8B:5B:1D:9A:96:E4:11:5B:7B:CF:6F:CA:63:FB:AF:63:9C:A7
Certificate issuer: /CN=b3398b5b1d9a96e4115b7bcf6fca63fbaf639ca7
Certificate serial: 0198D47365043A6944215E8A1E29BC9147BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/szmLWx2aluQRW3vPb8pj-69jnKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/444437-6843-4ad4-b764-79cc52c06d4f/1/szmLWx2aluQRW3vPb8pj-69jnKc.mft
Manifest number: 1146
Signing time: Sat 23 Aug 2025 01:03:08 +0000
Manifest this update: Sat 23 Aug 2025 01:03:08 +0000
Manifest next update: Sun 24 Aug 2025 01:03:08 +0000
Files and hashes: 1: 3Uvg-SGM_zlK_SKX6X83CL5pES4.roa (hash: txSz1BVeFo/z2vKlSjUFGN00mKoCcahrUY9+MYjGUZA=)
2: szmLWx2aluQRW3vPb8pj-69jnKc.crl (hash: txsnmPRA3yyAGJ4ZYR1Yo5LBfTlXCTjLKITrUqjcEHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/444437-6843-4ad4-b764-79cc52c06d4f/1/szmLWx2aluQRW3vPb8pj-69jnKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/444437-6843-4ad4-b764-79cc52c06d4f/1/szmLWx2aluQRW3vPb8pj-69jnKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/szmLWx2aluQRW3vPb8pj-69jnKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:65:04:3a:69:44:21:5e:8a:1e:29:bc:91:47:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3398b5b1d9a96e4115b7bcf6fca63fbaf639ca7
Validity
Not Before: Aug 23 01:03:08 2025 GMT
Not After : Aug 24 01:03:08 2025 GMT
Subject: CN=b54f165c664c606579ea7650706d0e160bd5bb1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:09:d0:4a:af:16:a3:9c:f2:c1:10:b6:9a:31:
ab:ca:bf:84:ec:41:e4:f7:a3:5c:5e:ca:71:c1:ff:
0e:8e:f2:a8:88:1b:72:77:ba:b4:95:66:9e:f0:0e:
d7:c0:60:a0:f5:60:3a:60:a8:22:25:a1:60:5f:bf:
b8:64:c9:18:95:35:16:81:bf:4e:58:e4:16:a3:60:
bb:db:62:2b:e7:8c:44:7c:79:ad:cf:04:6f:9e:d6:
fe:fe:ab:ba:d3:cf:ee:16:ad:fd:1c:d3:b5:a4:dc:
86:7f:17:db:a6:b0:59:90:33:fa:4a:34:9e:ae:e3:
72:c1:08:c8:91:08:b1:51:d6:7e:a0:80:00:47:16:
ee:ac:d6:05:43:af:2e:55:4f:e5:82:94:a7:a6:2f:
32:c8:a5:d0:e3:34:65:6b:3f:6c:1d:8c:fe:d3:12:
64:a5:70:29:b0:c8:47:8b:5a:80:6e:27:bf:fb:dd:
2b:8f:a2:08:49:ed:c9:0c:c2:f6:36:04:8b:da:e0:
5e:9e:1d:28:b3:d8:6f:00:b2:0b:5f:b6:55:8f:4d:
94:5b:66:32:8b:af:32:ee:1f:71:a1:b5:82:0a:1f:
21:1d:eb:f0:63:cc:8c:b4:94:11:0c:31:18:e2:0a:
8e:22:70:69:c3:cf:94:4a:94:b3:88:47:f1:72:f1:
64:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:4F:16:5C:66:4C:60:65:79:EA:76:50:70:6D:0E:16:0B:D5:BB:1B
X509v3 Authority Key Identifier:
keyid:B3:39:8B:5B:1D:9A:96:E4:11:5B:7B:CF:6F:CA:63:FB:AF:63:9C:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/szmLWx2aluQRW3vPb8pj-69jnKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/444437-6843-4ad4-b764-79cc52c06d4f/1/szmLWx2aluQRW3vPb8pj-69jnKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/444437-6843-4ad4-b764-79cc52c06d4f/1/szmLWx2aluQRW3vPb8pj-69jnKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:df:01:cb:06:d4:5d:25:df:d1:06:54:ef:38:1f:6d:15:3b:
d1:7a:f5:79:78:66:13:59:3b:00:be:ce:a4:6f:71:85:31:36:
d1:be:cd:c7:82:83:12:f8:71:6a:a6:a2:63:7a:65:9a:be:c8:
6e:30:d1:e8:80:15:9d:eb:88:7a:08:3a:57:b9:43:50:cc:53:
f9:06:0b:cd:70:be:7d:c9:c8:53:fe:9e:4d:f4:63:fe:57:ab:
85:9a:73:6f:9e:ed:be:7e:08:c1:ef:f4:ae:1b:42:d9:69:ff:
70:4b:d0:37:75:18:56:79:5b:d5:71:c2:4d:ea:4c:fd:8c:f1:
68:34:48:6d:c1:ea:91:de:02:0a:ac:60:e5:21:6f:24:0c:f8:
0a:9f:5d:ed:c2:73:98:f6:0d:e5:af:eb:ef:7f:ad:05:42:f1:
11:18:47:c4:89:5f:f7:34:07:bf:15:6b:b1:4d:fe:bb:a0:b6:
80:16:b6:35:27:6a:ac:be:b3:e2:86:e2:80:fc:95:bd:1b:af:
99:51:54:8d:7e:8d:26:02:ec:8c:6b:39:01:40:bd:f8:f3:2a:
f1:f0:2a:c7:36:4c:ba:ce:19:5c:75:e5:e3:a3:2c:bc:9c:07:
8e:f7:83:c4:5d:68:49:15:ec:97:89:b7:7c:7a:8c:98:9c:d4:
53:7e:f3:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:00 2025 by rpki-client