Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft
File: SzMg4LtdviupcmkbddaPSPblf4g.mft (raw, json)
Hash identifier: UBMmyGy73Qdm4z/mJrNboLtozx/oma+bmrQK8VAhT7k=
Subject key identifier: 88:4F:BD:06:91:15:08:69:78:11:8D:9F:D6:00:B1:15:C4:B8:95:3B
Authority key identifier: 4B:33:20:E0:BB:5D:BE:2B:A9:72:69:1B:75:D6:8F:48:F6:E5:7F:88
Certificate issuer: /CN=4b3320e0bb5dbe2ba972691b75d68f48f6e57f88
Certificate serial: 0198D51593122626D564F7DAA751818C0FFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzMg4LtdviupcmkbddaPSPblf4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft
Manifest number: 053A
Signing time: Sat 23 Aug 2025 04:00:17 +0000
Manifest this update: Sat 23 Aug 2025 04:00:17 +0000
Manifest next update: Sun 24 Aug 2025 04:00:17 +0000
Files and hashes: 1: 9qzW7YnH36W9vXQ1K-UKRmz0zEQ.roa (hash: J4D08zsa0EB7fStK9W20ZzcbFP+tabj/c0DhqsCIFd8=)
2: I-kFpoqyTRW457pDaSm8d1efpI4.roa (hash: kl/MemwjhzLvig9zm+2bDw2e8HG1sMcZ5V+KPClYcBg=)
3: SzMg4LtdviupcmkbddaPSPblf4g.crl (hash: yYLXExsOQL2KI5lNPHcQgI+pJRu47y3yjpRNQfKUdeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzMg4LtdviupcmkbddaPSPblf4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:93:12:26:26:d5:64:f7:da:a7:51:81:8c:0f:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3320e0bb5dbe2ba972691b75d68f48f6e57f88
Validity
Not Before: Aug 23 04:00:17 2025 GMT
Not After : Aug 24 04:00:17 2025 GMT
Subject: CN=884fbd069115086978118d9fd600b115c4b8953b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c8:eb:4b:fa:1d:31:8a:53:38:15:4f:d7:db:
b8:79:88:bc:e8:3c:92:ec:d6:e3:90:bc:0b:36:bc:
c1:04:13:fc:9d:6b:05:2e:18:66:ae:50:e6:53:21:
be:69:80:e0:26:e3:48:d3:2e:06:ab:cf:1c:9e:33:
59:8b:53:a6:74:80:38:bd:3c:54:b5:0f:b6:21:f5:
e6:f9:a1:95:f1:62:c5:ce:77:35:d7:23:0c:84:53:
e0:54:71:9b:3e:43:94:e0:d0:51:d7:bb:e4:fc:05:
21:c3:8b:d9:f4:20:56:22:b7:2c:53:f9:bc:eb:8b:
24:d0:99:89:47:a1:4d:34:c6:05:49:ac:36:bb:e8:
64:9b:f0:16:90:9b:ad:b4:e0:dd:2e:24:79:d5:3c:
f4:0d:d4:18:de:6c:52:cc:15:e7:2c:a6:b6:e9:77:
29:c7:d0:4a:13:6b:b0:14:5b:12:76:fb:91:c9:03:
b2:84:95:a6:9a:17:48:5a:c1:fa:f5:e3:d2:4d:98:
0e:66:d0:18:56:68:5b:26:ae:77:6f:76:8e:2b:f2:
20:fa:1e:42:e4:7f:81:e5:5e:97:c0:c5:1f:01:dd:
58:66:9a:7b:6d:1d:80:42:5b:86:84:48:1b:6b:3f:
96:1c:8a:ba:aa:35:d2:b2:c2:20:88:b5:45:2a:e8:
1e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:4F:BD:06:91:15:08:69:78:11:8D:9F:D6:00:B1:15:C4:B8:95:3B
X509v3 Authority Key Identifier:
keyid:4B:33:20:E0:BB:5D:BE:2B:A9:72:69:1B:75:D6:8F:48:F6:E5:7F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzMg4LtdviupcmkbddaPSPblf4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:c6:c4:57:8c:bc:4e:28:8a:ea:9a:f9:fd:80:f8:ff:e0:9a:
41:a0:9b:61:4b:5d:95:4a:5e:05:ff:5c:e8:60:24:8b:97:03:
ac:fd:94:2a:1a:a8:3b:55:02:b5:04:00:68:c1:f1:0e:27:45:
f2:69:03:44:86:05:f3:0f:30:4c:8f:47:92:31:29:b5:84:ff:
c3:b3:c1:92:5d:13:95:50:d4:38:32:22:c6:8a:11:4c:15:d1:
19:6a:5e:24:0d:a4:6e:a8:49:4a:2e:91:14:3b:89:0f:86:e3:
40:e9:11:54:e9:ae:28:b5:03:06:9e:d2:f8:e9:e6:12:5e:92:
5c:fa:26:06:4f:14:53:cc:ab:40:32:e6:29:ce:62:50:37:75:
8c:c6:be:5d:22:13:8e:5f:4d:8d:af:7d:42:52:19:e8:e6:cb:
54:66:f5:7e:f0:ba:b3:3a:91:8b:ce:a3:06:c8:9c:9b:06:a9:
b6:45:23:bf:34:56:ba:9d:64:45:44:9e:f1:e9:c3:68:e1:0d:
ee:2f:6e:12:07:a0:f0:e4:70:87:b3:73:6c:f2:b8:d0:0d:5f:
98:bc:32:60:bd:86:90:f2:99:f4:00:2c:76:57:0a:3e:bb:1c:
66:bc:21:3e:0e:88:2d:0e:1e:53:00:91:62:bc:b2:c9:87:e3:
55:e6:ec:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:15 2025 by rpki-client