Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/bd59ae-5b7d-4c26-8e14-24b9e8211885/1/shUnDjtZdrRPOt7OVwR9HgeHunU.mft
File: shUnDjtZdrRPOt7OVwR9HgeHunU.mft (raw, json)
Hash identifier: rQtvgM/FTZtvZfUjDzGDY/VaNmnj9e65p5sjRGKEra8=
Subject key identifier: 74:00:C7:31:A0:E7:1D:DB:1D:EE:00:73:AF:DC:B7:22:99:6D:D3:09
Authority key identifier: B2:15:27:0E:3B:59:76:B4:4F:3A:DE:CE:57:04:7D:1E:07:87:BA:75
Certificate issuer: /CN=b215270e3b5976b44f3adece57047d1e0787ba75
Certificate serial: 0197B70EABA1F86B368B0047C13D9C22BA2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/shUnDjtZdrRPOt7OVwR9HgeHunU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/bd59ae-5b7d-4c26-8e14-24b9e8211885/1/shUnDjtZdrRPOt7OVwR9HgeHunU.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 15:01:21 +0000
Manifest this update: Sat 28 Jun 2025 15:01:21 +0000
Manifest next update: Sun 29 Jun 2025 15:01:21 +0000
Files and hashes: 1: P2sE-3tUICXx7cfC0favLdtRCZ0.roa (hash: ayIaE8Pk074Tx7I6FVVUWCPvr0NKwOuaUa8Xe24IzDg=)
2: eGoVDFCAKRgMU7yFCgUyj1lHOYk.roa (hash: i9IHtchSCoTvu2jWZ+d1LDgXIzrS7PbiIZtxvaQvRRk=)
3: shUnDjtZdrRPOt7OVwR9HgeHunU.crl (hash: 1EkT+82vVwsWmjoImXeHMUel9S8dNqPhfkj7Wa26vvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/bd59ae-5b7d-4c26-8e14-24b9e8211885/1/shUnDjtZdrRPOt7OVwR9HgeHunU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/bd59ae-5b7d-4c26-8e14-24b9e8211885/1/shUnDjtZdrRPOt7OVwR9HgeHunU.mft
rsync://rpki.ripe.net/repository/DEFAULT/shUnDjtZdrRPOt7OVwR9HgeHunU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:ab:a1:f8:6b:36:8b:00:47:c1:3d:9c:22:ba:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b215270e3b5976b44f3adece57047d1e0787ba75
Validity
Not Before: Jun 28 15:01:21 2025 GMT
Not After : Jun 29 15:01:21 2025 GMT
Subject: CN=7400c731a0e71ddb1dee0073afdcb722996dd309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:39:f7:e1:90:c7:a0:39:f1:21:de:e7:23:1f:
5b:8c:12:67:a7:48:ce:93:b1:d9:79:28:48:2c:5d:
82:3a:7c:64:8a:79:09:20:c4:ee:7c:cc:a7:93:c8:
2e:f2:07:b0:6f:0f:87:a3:c4:8d:05:94:ef:a6:e2:
b2:99:fb:5e:6c:34:3a:af:c1:cb:57:cd:b2:ae:fa:
1d:f5:67:95:15:b8:bf:64:a2:1f:1a:42:29:c1:71:
4c:8e:9a:e0:28:c9:c4:61:2c:8d:7f:c6:6b:47:19:
d9:c9:70:64:3a:ea:4f:1b:cc:82:11:77:fd:62:e3:
c6:a8:84:c3:57:ee:71:06:65:93:07:8e:d6:a3:10:
6f:3f:a8:bc:fb:d3:f9:8d:13:38:6f:89:ab:e7:32:
a8:f9:d6:6e:ee:38:d8:86:e1:36:a1:2f:06:41:9b:
29:36:95:4c:30:61:d9:4f:b4:bc:64:8f:6f:77:30:
79:5b:c7:51:60:96:ed:dc:4e:86:0c:5a:0d:e2:bd:
a7:55:12:14:f3:02:b2:66:ec:32:22:c6:e5:73:0f:
bd:0b:20:44:e2:89:9b:a1:1f:45:47:51:7c:7e:06:
67:cb:12:e8:ce:19:43:e5:b5:5b:d4:a6:ed:48:aa:
f8:eb:50:ff:5e:bf:a4:4b:36:ad:05:07:67:71:fc:
93:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:00:C7:31:A0:E7:1D:DB:1D:EE:00:73:AF:DC:B7:22:99:6D:D3:09
X509v3 Authority Key Identifier:
keyid:B2:15:27:0E:3B:59:76:B4:4F:3A:DE:CE:57:04:7D:1E:07:87:BA:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/shUnDjtZdrRPOt7OVwR9HgeHunU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bd59ae-5b7d-4c26-8e14-24b9e8211885/1/shUnDjtZdrRPOt7OVwR9HgeHunU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bd59ae-5b7d-4c26-8e14-24b9e8211885/1/shUnDjtZdrRPOt7OVwR9HgeHunU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:27:3f:b0:f1:82:c6:7b:7e:86:c1:75:87:2d:bf:aa:0a:9f:
d7:72:6d:cc:b5:f6:f4:62:85:a6:71:58:11:b5:d5:89:4e:a0:
a7:fe:a0:43:1c:0f:05:b7:b0:8d:8e:0a:0e:95:d3:25:3a:2f:
d7:0c:6c:1b:1b:a1:37:85:8f:03:65:3d:56:04:44:34:c6:2f:
72:1a:40:11:52:db:8a:10:9b:98:d5:7b:cd:00:3d:40:7c:56:
21:e3:ee:ca:08:12:bc:07:1a:df:a5:30:ff:46:ed:8c:d6:5e:
5a:fe:ea:a0:e0:a2:29:39:42:7a:9a:e5:00:b6:71:4c:72:2b:
e7:15:38:c4:fb:98:c9:d9:5b:87:0b:62:ef:7e:4e:67:55:8f:
b2:e9:7a:46:ea:a9:36:d2:92:2e:93:2a:b0:6c:27:9d:3f:cb:
a9:b9:49:42:0c:01:50:39:fb:55:93:c0:9d:78:1e:d3:db:5f:
22:7d:fb:df:4e:9e:5d:b6:09:d0:e5:58:da:fe:9b:68:cf:e6:
43:25:f8:2c:a2:63:10:eb:96:7a:17:3b:ad:f6:15:40:01:14:
b6:76:5f:b7:c3:c2:a6:22:2c:12:94:94:c7:38:49:31:a3:98:
48:ef:c7:ac:c7:91:f5:9c:5f:42:47:bc:7b:98:fd:ae:60:75:
4b:f7:14:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:49:23 2025 by rpki-client