Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft
File: SzMg4LtdviupcmkbddaPSPblf4g.mft (raw, json)
Hash identifier: LLvwIU7g4FtsZS2dGguyUrw/z97Z0r8TDEaLxLTMy80=
Subject key identifier: 22:A1:B3:29:C6:0B:FE:C1:9F:75:97:0A:E3:89:62:29:8C:94:BF:3C
Authority key identifier: 4B:33:20:E0:BB:5D:BE:2B:A9:72:69:1B:75:D6:8F:48:F6:E5:7F:88
Certificate issuer: /CN=4b3320e0bb5dbe2ba972691b75d68f48f6e57f88
Certificate serial: 019672D478A20FA16644A29F951888AD628E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzMg4LtdviupcmkbddaPSPblf4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft
Manifest number: 03FE
Signing time: Sat 26 Apr 2025 16:00:49 +0000
Manifest this update: Sat 26 Apr 2025 16:00:49 +0000
Manifest next update: Sun 27 Apr 2025 16:00:49 +0000
Files and hashes: 1: 9qzW7YnH36W9vXQ1K-UKRmz0zEQ.roa (hash: J4D08zsa0EB7fStK9W20ZzcbFP+tabj/c0DhqsCIFd8=)
2: I-kFpoqyTRW457pDaSm8d1efpI4.roa (hash: kl/MemwjhzLvig9zm+2bDw2e8HG1sMcZ5V+KPClYcBg=)
3: SzMg4LtdviupcmkbddaPSPblf4g.crl (hash: m79hIbhp3RQicSs67DygP5E/7+85dy2TaORWsk/iwKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzMg4LtdviupcmkbddaPSPblf4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:d4:78:a2:0f:a1:66:44:a2:9f:95:18:88:ad:62:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3320e0bb5dbe2ba972691b75d68f48f6e57f88
Validity
Not Before: Apr 26 16:00:49 2025 GMT
Not After : Apr 27 16:00:49 2025 GMT
Subject: CN=22a1b329c60bfec19f75970ae38962298c94bf3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2c:1b:0c:71:19:eb:81:b7:87:70:27:7c:16:
af:3b:4e:30:a7:10:6e:5c:6c:8e:fa:14:5e:eb:93:
07:23:42:c0:b6:d9:a9:d6:14:bd:54:e3:76:c1:ea:
cb:7a:c7:06:13:93:c5:ed:cb:c1:ff:5a:9a:c8:7b:
93:ca:a0:d6:e9:de:03:57:71:b5:59:3c:b9:e2:5c:
44:87:5a:6a:5e:f2:e9:e3:72:2f:39:77:21:f9:37:
c1:22:54:74:5b:3a:37:40:68:ba:c0:c6:bf:23:df:
0d:a3:1f:ad:13:66:8c:4f:fb:47:fd:dd:31:cf:55:
4d:ec:85:7d:16:76:53:87:02:98:8f:10:33:c9:7f:
1b:b7:dc:b6:c5:c5:54:aa:9f:cf:39:45:22:52:40:
dd:96:3a:f2:d5:a2:97:04:65:37:4b:94:94:7e:5f:
d5:5a:ec:9a:9b:58:7b:09:54:73:b7:97:69:f6:cd:
ff:51:78:e0:d2:20:fe:19:17:a0:2e:e8:a3:af:b7:
95:1a:24:a6:6d:a3:03:10:8a:5a:48:40:62:a9:f6:
0a:11:af:d7:d4:da:da:ac:ec:d4:8d:34:53:5b:6f:
00:83:3f:72:b8:f7:4e:ec:30:f9:8a:b1:03:08:84:
52:5a:3e:bd:31:4c:ec:65:f1:2e:1f:85:ab:2d:79:
01:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:A1:B3:29:C6:0B:FE:C1:9F:75:97:0A:E3:89:62:29:8C:94:BF:3C
X509v3 Authority Key Identifier:
keyid:4B:33:20:E0:BB:5D:BE:2B:A9:72:69:1B:75:D6:8F:48:F6:E5:7F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzMg4LtdviupcmkbddaPSPblf4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:de:92:37:be:dd:0d:c6:ea:68:f0:79:96:34:e1:6c:4e:7b:
f2:0c:87:f4:83:44:e4:7a:0f:7c:27:03:b7:9d:3b:e9:9c:df:
ae:8c:85:67:05:e1:9c:21:99:3e:48:8e:22:e7:dd:a5:ff:64:
ba:e1:e0:6e:b3:91:e3:62:92:7d:ab:27:54:b9:54:86:22:f3:
cf:82:25:dc:18:53:db:fa:b9:5f:67:d1:75:fe:39:15:a2:62:
55:27:88:9c:63:23:8b:ec:94:f5:db:2c:8c:92:6e:25:5f:65:
bb:3e:89:22:e2:9e:11:5b:74:21:5a:ab:c4:6a:b9:dd:76:6b:
3a:60:0a:2d:9f:85:d9:94:aa:d2:51:8c:12:4a:2d:2c:92:60:
7b:0b:6d:bb:e2:3d:f4:50:75:01:97:14:e0:98:86:4d:b8:73:
d5:af:96:00:ef:2e:2b:2f:c7:13:91:45:50:4f:95:4e:84:66:
e9:84:53:65:a9:37:0a:2a:3c:2a:26:68:59:9b:e3:f7:35:f5:
76:d0:b7:11:43:84:1a:78:98:73:a8:9d:be:c8:65:49:2d:a5:
58:93:bc:89:77:9f:d3:19:0c:f5:92:99:53:8d:e3:ac:c4:76:
d0:c8:84:79:b7:90:9e:71:b9:33:40:cb:5c:bf:c3:69:f4:ef:
37:31:8a:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZy1HiiD6FmRKKflRiIrWKOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiMzMyMGUwYmI1ZGJlMmJhOTcyNjkxYjc1ZDY4ZjQ4ZjZl
NTdmODgwHhcNMjUwNDI2MTYwMDQ5WhcNMjUwNDI3MTYwMDQ5WjAzMTEwLwYDVQQD
EygyMmExYjMyOWM2MGJmZWMxOWY3NTk3MGFlMzg5NjIyOThjOTRiZjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiwbDHEZ64G3h3AnfBavO04wpxBu
XGyO+hRe65MHI0LAttmp1hS9VON2werLescGE5PF7cvB/1qayHuTyqDW6d4DV3G1
WTy54lxEh1pqXvLp43IvOXch+TfBIlR0Wzo3QGi6wMa/I98Nox+tE2aMT/tH/d0x
z1VN7IV9FnZThwKYjxAzyX8bt9y2xcVUqp/POUUiUkDdljry1aKXBGU3S5SUfl/V
Wuyam1h7CVRzt5dp9s3/UXjg0iD+GRegLuijr7eVGiSmbaMDEIpaSEBiqfYKEa/X
1NrarOzUjTRTW28Agz9yuPdO7DD5irEDCIRSWj69MUzsZfEuH4WrLXkB5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCKhsynGC/7Bn3WXCuOJYimMlL88MB8GA1UdIwQY
MBaAFEszIOC7Xb4rqXJpG3XWj0j25X+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3pNZzRMdGR2aXVwY21rYmRkYVBTUGJsZjRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC83ZjA2NmMtOTRhOS00NzhkLTgwN2Ut
YTg5NzU5ZDcwNzFjLzEvU3pNZzRMdGR2aXVwY21rYmRkYVBTUGJsZjRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC83ZjA2NmMtOTRhOS00NzhkLTgwN2UtYTg5NzU5ZDcwNzFj
LzEvU3pNZzRMdGR2aXVwY21rYmRkYVBTUGJsZjRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcN6SN77d
DcbqaPB5ljThbE578gyH9INE5HoPfCcDt5076ZzfroyFZwXhnCGZPkiOIufdpf9k
uuHgbrOR42KSfasnVLlUhiLzz4Il3BhT2/q5X2fRdf45FaJiVSeInGMji+yU9dss
jJJuJV9luz6JIuKeEVt0IVqrxGq53XZrOmAKLZ+F2ZSq0lGMEkotLJJgewttu+I9
9FB1AZcU4JiGTbhz1a+WAO8uKy/HE5FFUE+VToRm6YRTZak3Cio8KiZoWZvj9zX1
dtC3EUOEGniYc6idvshlSS2lWJO8iXef0xkM9ZKZU43jrMR20MiEebeQnnG5M0DL
XL/DafTvNzGKeg==
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:52:12 2025 by rpki-client