Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft
File: SzMg4LtdviupcmkbddaPSPblf4g.mft (raw, json)
Hash identifier: fBm5Q26eEeG4pX7atO4Ow4dpyGb6Le3B/ure5DYVEXM=
Subject key identifier: 04:F9:67:4F:BB:79:B5:12:F8:63:1E:9F:1A:AB:89:98:45:95:67:AA
Authority key identifier: 4B:33:20:E0:BB:5D:BE:2B:A9:72:69:1B:75:D6:8F:48:F6:E5:7F:88
Certificate issuer: /CN=4b3320e0bb5dbe2ba972691b75d68f48f6e57f88
Certificate serial: 019A4DAAB93594B0CA6CA726A19C02CA6041
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzMg4LtdviupcmkbddaPSPblf4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft
Manifest number: 05FD
Signing time: Tue 04 Nov 2025 07:00:25 +0000
Manifest this update: Tue 04 Nov 2025 07:00:25 +0000
Manifest next update: Wed 05 Nov 2025 07:00:25 +0000
Files and hashes: 1: 9qzW7YnH36W9vXQ1K-UKRmz0zEQ.roa (hash: J4D08zsa0EB7fStK9W20ZzcbFP+tabj/c0DhqsCIFd8=)
2: I-kFpoqyTRW457pDaSm8d1efpI4.roa (hash: kl/MemwjhzLvig9zm+2bDw2e8HG1sMcZ5V+KPClYcBg=)
3: SzMg4LtdviupcmkbddaPSPblf4g.crl (hash: j25u5GgLA9dE5fe9G5cVMEAH40Gn61qzCQFgVkH3tWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzMg4LtdviupcmkbddaPSPblf4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:b9:35:94:b0:ca:6c:a7:26:a1:9c:02:ca:60:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3320e0bb5dbe2ba972691b75d68f48f6e57f88
Validity
Not Before: Nov 4 07:00:25 2025 GMT
Not After : Nov 5 07:00:25 2025 GMT
Subject: CN=04f9674fbb79b512f8631e9f1aab8998459567aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7b:8c:f3:28:a3:44:d7:15:03:dc:05:a2:37:
4b:b6:01:b8:cb:bf:e3:52:be:57:d4:80:9d:43:6e:
b0:68:88:ac:d2:36:8c:a4:fa:88:bf:cb:eb:9a:ba:
76:02:89:ab:87:f6:a8:fd:7d:dc:64:59:14:66:c9:
cf:c1:64:a3:9f:bb:54:01:08:42:43:08:40:15:fa:
3c:3c:0e:a4:77:c7:2b:aa:a4:b2:29:66:08:1c:cf:
9d:b7:77:36:e8:c2:1e:0e:82:04:e8:86:6d:74:ef:
6a:2d:96:11:be:86:c5:36:02:ee:51:f9:de:5a:33:
6d:39:60:e6:90:71:6e:47:87:0e:cd:5a:8a:f1:f6:
17:17:51:0e:31:32:d4:6c:86:73:e6:c9:6e:2d:7f:
ad:55:7e:69:dc:2b:fb:44:83:cf:9a:45:fd:9c:f0:
84:1f:a9:a0:d9:d2:5f:c3:99:93:fd:f8:f7:cf:e8:
43:40:37:62:3a:14:a9:33:31:25:63:90:96:21:d0:
65:8d:c7:93:58:0e:83:91:05:4d:13:70:3c:41:d1:
38:13:5f:3c:9c:92:69:0d:f4:3c:c6:98:30:36:cd:
3c:e0:be:88:51:e5:ce:af:a0:d4:2e:20:8f:6f:ee:
f7:21:f7:20:c7:23:87:39:3c:a8:84:dc:1a:d5:f4:
63:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:F9:67:4F:BB:79:B5:12:F8:63:1E:9F:1A:AB:89:98:45:95:67:AA
X509v3 Authority Key Identifier:
keyid:4B:33:20:E0:BB:5D:BE:2B:A9:72:69:1B:75:D6:8F:48:F6:E5:7F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzMg4LtdviupcmkbddaPSPblf4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7f066c-94a9-478d-807e-a89759d7071c/1/SzMg4LtdviupcmkbddaPSPblf4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:a4:60:04:d4:7a:24:96:d7:1b:0c:dc:e4:69:22:43:82:dd:
ea:dd:dc:4b:c4:0b:b0:fd:5c:31:5b:2b:5b:1c:0a:2e:98:db:
b8:05:ba:43:14:81:0f:dd:a3:ed:4e:1b:ba:e8:07:a8:23:ff:
26:a5:75:51:38:f8:74:59:98:01:6f:3d:a8:d5:63:bb:17:95:
0c:dd:ac:6f:bb:8b:19:76:64:0b:32:2e:cd:af:9a:ce:5d:a5:
2d:b6:01:89:52:d6:08:ca:c9:c9:52:00:46:ef:8f:8b:ac:f4:
51:ee:25:96:6a:4c:cc:88:ce:3e:2e:cf:3b:79:4d:4f:f5:6f:
a6:bc:99:c1:ea:19:52:cc:c1:5e:4f:a3:92:28:b4:86:26:d5:
73:c0:68:69:06:eb:16:24:5e:09:a2:34:ec:1c:29:93:8a:c2:
42:a8:2d:40:c7:00:7e:71:4c:92:4d:ec:10:31:b2:3f:76:74:
99:8d:bb:10:68:5e:24:3e:77:6d:6b:08:a5:b9:6a:68:0b:c5:
7e:13:bd:31:f6:45:98:6e:26:ef:71:01:48:e2:6a:ac:10:c7:
dd:e3:b6:84:9f:c9:6e:2f:d1:14:ea:3e:55:40:be:72:fc:d9:
88:da:cb:fc:9b:1f:da:20:a6:6c:95:22:91:51:b0:87:bb:9d:
c8:5d:ff:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:57 2025 by rpki-client