Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft
File: SzMg4LtdviupcmkbddaPSPblf4g.mft (raw, json)
Hash identifier: kelboJKk4AplAiyrNILBuIC2gC36g8hvB277n1Tysfs=
Subject key identifier: 23:AD:EB:93:58:A6:7F:3C:19:47:B1:ED:F3:FD:2A:C0:75:CC:0C:C7
Authority key identifier: 4B:33:20:E0:BB:5D:BE:2B:A9:72:69:1B:75:D6:8F:48:F6:E5:7F:88
Certificate issuer: /CN=4b3320e0bb5dbe2ba972691b75d68f48f6e57f88
Certificate serial: 0196A50A0D92AFE1ACEE7FBCB9A1EE5CDED3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzMg4LtdviupcmkbddaPSPblf4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft
Manifest number: 0418
Signing time: Tue 06 May 2025 10:00:21 +0000
Manifest this update: Tue 06 May 2025 10:00:21 +0000
Manifest next update: Wed 07 May 2025 10:00:21 +0000
Files and hashes: 1: 9qzW7YnH36W9vXQ1K-UKRmz0zEQ.roa (hash: J4D08zsa0EB7fStK9W20ZzcbFP+tabj/c0DhqsCIFd8=)
2: I-kFpoqyTRW457pDaSm8d1efpI4.roa (hash: kl/MemwjhzLvig9zm+2bDw2e8HG1sMcZ5V+KPClYcBg=)
3: SzMg4LtdviupcmkbddaPSPblf4g.crl (hash: e4l/JKez+zDKf3kbhxl82tADG9exgsZX+xkn/BKhPR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzMg4LtdviupcmkbddaPSPblf4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:0a:0d:92:af:e1:ac:ee:7f:bc:b9:a1:ee:5c:de:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3320e0bb5dbe2ba972691b75d68f48f6e57f88
Validity
Not Before: May 6 10:00:21 2025 GMT
Not After : May 7 10:00:21 2025 GMT
Subject: CN=23adeb9358a67f3c1947b1edf3fd2ac075cc0cc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:70:d4:7d:28:0e:f6:09:e0:4e:4a:1a:ce:33:
d1:81:c7:ce:5b:ee:d0:b6:25:67:42:95:a8:68:74:
e0:aa:da:3c:7e:26:de:ae:53:99:11:7a:8d:dc:4c:
d1:fa:05:17:ae:c6:82:7e:8a:41:ad:0a:0b:ed:45:
3f:93:cc:9f:51:93:21:1a:48:d4:1e:45:33:9f:55:
38:ce:bd:04:65:ff:1c:2e:42:c8:a5:0b:d2:6c:a6:
ed:03:06:fe:47:e0:48:91:79:a4:ff:37:8e:41:a6:
9c:47:be:a7:76:aa:b8:56:fe:b7:25:e3:b5:b6:5a:
b5:3b:7c:9e:12:2a:3c:b2:55:62:39:f4:5d:ee:5d:
42:a0:e6:9d:62:5f:3f:b4:c2:91:db:7c:b6:75:06:
ae:1f:04:f7:ca:b8:5d:a4:85:72:68:61:1f:63:17:
00:51:1d:b7:53:37:79:73:e7:17:d3:66:5f:06:84:
ab:b4:ea:5f:4f:bb:77:54:80:4c:4f:81:95:69:46:
dd:bd:76:cf:ad:90:81:72:b3:bb:7e:7a:f9:69:24:
7b:7b:b8:8e:14:f1:9b:ba:c1:28:13:80:65:02:be:
13:b8:3d:2b:41:15:f6:c9:6f:2e:d1:e0:5d:8c:e7:
d0:d4:4c:69:c5:1d:6b:dc:bf:e2:6e:3c:93:34:46:
af:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:AD:EB:93:58:A6:7F:3C:19:47:B1:ED:F3:FD:2A:C0:75:CC:0C:C7
X509v3 Authority Key Identifier:
keyid:4B:33:20:E0:BB:5D:BE:2B:A9:72:69:1B:75:D6:8F:48:F6:E5:7F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzMg4LtdviupcmkbddaPSPblf4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:5e:02:b4:e3:5d:59:59:a4:5a:ec:d0:8b:4f:e9:6a:c2:37:
ac:d7:05:88:f1:b5:f9:3e:b7:69:fc:bc:39:2a:36:0b:38:62:
3c:ba:2c:d0:2f:41:7e:11:47:f7:23:bd:d8:5c:b9:bc:05:cc:
b4:72:9b:5a:01:9c:0d:6c:20:cb:2d:f9:4d:e8:e5:bf:73:17:
90:3b:60:a8:57:cc:4d:ee:50:25:fc:44:54:02:fb:94:45:5f:
83:b4:d3:94:39:50:fd:6c:57:41:85:bd:ef:7d:9c:e1:31:13:
7c:18:7b:1b:64:da:2c:06:f8:58:fb:86:4a:bb:ce:fc:52:8f:
21:0e:73:27:5d:59:d3:c2:98:b9:60:5c:32:8a:db:8b:5b:68:
aa:7a:f1:9f:2f:81:12:6f:35:42:ba:e6:8f:4d:a2:17:3d:7d:
87:a1:3e:3c:1f:dc:0c:c4:f1:6d:22:ec:de:e5:95:3f:35:87:
b6:90:a4:c3:3b:2b:6f:42:c2:82:3a:f5:55:64:4f:97:41:c7:
4b:ca:eb:10:3e:ac:30:95:33:fd:77:77:c1:3f:dd:f5:55:12:
2b:b5:c9:fb:25:d4:e2:ab:f4:51:05:5e:b4:1e:e8:d1:49:03:
e9:81:c0:df:64:55:e1:ee:0e:bf:52:cf:2c:84:f4:bf:5d:1c:
f8:fb:e3:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 12:29:36 2025 by rpki-client