Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft
File: SzMg4LtdviupcmkbddaPSPblf4g.mft (raw, json)
Hash identifier: glg4MRfew5f7BArjhvEvwphBkK3NJsegcGrSlafeulc=
Subject key identifier: BC:61:28:0B:0C:72:45:D1:14:55:2B:78:84:89:3B:DD:C3:CA:D1:FF
Authority key identifier: 4B:33:20:E0:BB:5D:BE:2B:A9:72:69:1B:75:D6:8F:48:F6:E5:7F:88
Certificate issuer: /CN=4b3320e0bb5dbe2ba972691b75d68f48f6e57f88
Certificate serial: 01976FD0D9755607713D780093EE0A764367
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzMg4LtdviupcmkbddaPSPblf4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft
Manifest number: 0481
Signing time: Sat 14 Jun 2025 19:00:47 +0000
Manifest this update: Sat 14 Jun 2025 19:00:47 +0000
Manifest next update: Sun 15 Jun 2025 19:00:47 +0000
Files and hashes: 1: 9qzW7YnH36W9vXQ1K-UKRmz0zEQ.roa (hash: J4D08zsa0EB7fStK9W20ZzcbFP+tabj/c0DhqsCIFd8=)
2: I-kFpoqyTRW457pDaSm8d1efpI4.roa (hash: kl/MemwjhzLvig9zm+2bDw2e8HG1sMcZ5V+KPClYcBg=)
3: SzMg4LtdviupcmkbddaPSPblf4g.crl (hash: UHnk8asfIUTYliamRhqE4SZBxcRGFH19O0YLC9N/e2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzMg4LtdviupcmkbddaPSPblf4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d0:d9:75:56:07:71:3d:78:00:93:ee:0a:76:43:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3320e0bb5dbe2ba972691b75d68f48f6e57f88
Validity
Not Before: Jun 14 19:00:47 2025 GMT
Not After : Jun 15 19:00:47 2025 GMT
Subject: CN=bc61280b0c7245d114552b7884893bddc3cad1ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e0:65:26:9c:b7:77:ff:44:3c:60:db:aa:69:
46:9d:31:c0:c4:53:76:bb:72:87:2c:af:78:c6:61:
3b:25:c0:66:8d:b2:dc:84:01:8a:b8:dd:13:63:4d:
36:e3:ac:e7:82:59:3c:0f:c3:0d:91:96:82:5d:92:
26:4f:89:07:d4:06:4b:fd:b3:2b:93:f5:5e:15:38:
94:5f:ea:72:8f:b7:6e:4c:18:eb:05:b5:60:ec:84:
e6:a0:28:c4:93:13:86:d9:72:69:51:ec:5d:99:64:
6e:91:c5:3f:7e:7f:b7:26:da:6e:1a:83:c3:f3:79:
1a:e2:67:38:a0:1c:b4:a6:cc:30:02:da:fe:1f:8e:
58:d8:b9:06:0c:cf:18:10:ec:26:f1:13:22:a1:cb:
e5:bc:5f:d6:7e:d9:b7:d5:69:79:e4:18:ae:87:ab:
f5:88:f9:8b:76:24:5d:73:04:0b:17:c3:c4:ac:76:
1f:e0:53:bc:b5:e2:d7:34:b6:7b:1c:cb:44:e5:a8:
22:5a:98:36:1a:90:bb:a2:f1:bc:28:dd:96:5a:a9:
f5:6c:80:a8:f5:07:06:77:84:60:24:d7:f9:b6:9e:
1e:59:50:01:a4:7c:dd:88:62:65:86:c2:98:ed:6b:
fb:6e:76:3b:96:e7:93:20:bf:0f:56:b0:18:69:b1:
76:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:61:28:0B:0C:72:45:D1:14:55:2B:78:84:89:3B:DD:C3:CA:D1:FF
X509v3 Authority Key Identifier:
keyid:4B:33:20:E0:BB:5D:BE:2B:A9:72:69:1B:75:D6:8F:48:F6:E5:7F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzMg4LtdviupcmkbddaPSPblf4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:0b:a7:cd:bc:89:d2:42:bd:db:74:ef:90:1a:f3:3f:58:e8:
cf:0b:ef:47:dc:3a:29:6d:4b:05:0d:e8:6c:b4:5b:82:ea:c4:
3d:5d:2f:49:c6:8f:77:43:7c:ea:22:f2:c8:e1:dd:18:98:0a:
18:68:15:22:db:fa:07:11:b1:5b:c0:e3:34:fe:93:be:16:b7:
2a:07:b5:e4:5c:c8:5a:05:66:2f:a9:5b:f2:d9:b9:46:ab:c2:
43:8e:55:6b:59:fb:5f:a0:47:46:6b:e9:15:4d:5e:25:7f:6e:
09:8f:c5:20:23:bb:7e:ff:00:04:40:a4:41:34:e1:11:36:01:
2a:f9:76:f9:73:7f:cb:6d:94:84:04:4d:fb:f1:1f:ff:81:15:
60:5f:2c:ee:f3:49:ba:80:62:d4:d8:aa:7b:3e:f5:85:5e:db:
64:bd:5d:49:89:e3:d0:64:af:b2:a2:49:31:10:53:d4:4f:98:
a1:0f:26:34:13:15:59:74:c5:8a:f4:09:31:e7:76:74:3f:13:
f2:0b:97:02:0c:2b:49:eb:f7:99:d9:4a:d9:e5:af:d1:11:fc:
a8:24:76:c1:67:28:85:62:c1:96:58:ba:f9:05:84:d8:69:dd:
f1:fa:76:5f:aa:c9:b4:61:f5:0b:be:4d:3b:ca:49:5c:26:20:
d7:ae:2c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:55:47 2025 by rpki-client