Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/bd59ae-5b7d-4c26-8e14-24b9e8211885/1/shUnDjtZdrRPOt7OVwR9HgeHunU.mft
File: shUnDjtZdrRPOt7OVwR9HgeHunU.mft (raw, json)
Hash identifier: 57AeD096CIeNZ3j+6/A1kVU71ARVoVoPPlZvapK3pd8=
Subject key identifier: FA:4C:DC:8F:24:1A:46:10:64:F3:81:C3:6A:F9:C9:8B:48:1A:55:6F
Authority key identifier: B2:15:27:0E:3B:59:76:B4:4F:3A:DE:CE:57:04:7D:1E:07:87:BA:75
Certificate issuer: /CN=b215270e3b5976b44f3adece57047d1e0787ba75
Certificate serial: 0198D4E03D6AA45C41251DA8EAF52848461F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/shUnDjtZdrRPOt7OVwR9HgeHunU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/bd59ae-5b7d-4c26-8e14-24b9e8211885/1/shUnDjtZdrRPOt7OVwR9HgeHunU.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 03:02:02 +0000
Manifest this update: Sat 23 Aug 2025 03:02:02 +0000
Manifest next update: Sun 24 Aug 2025 03:02:02 +0000
Files and hashes: 1: P2sE-3tUICXx7cfC0favLdtRCZ0.roa (hash: ayIaE8Pk074Tx7I6FVVUWCPvr0NKwOuaUa8Xe24IzDg=)
2: eGoVDFCAKRgMU7yFCgUyj1lHOYk.roa (hash: i9IHtchSCoTvu2jWZ+d1LDgXIzrS7PbiIZtxvaQvRRk=)
3: shUnDjtZdrRPOt7OVwR9HgeHunU.crl (hash: PUr2mqC+20JXJetb9C6aH8nwo10kRX39hq5EGTc2FIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/bd59ae-5b7d-4c26-8e14-24b9e8211885/1/shUnDjtZdrRPOt7OVwR9HgeHunU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/bd59ae-5b7d-4c26-8e14-24b9e8211885/1/shUnDjtZdrRPOt7OVwR9HgeHunU.mft
rsync://rpki.ripe.net/repository/DEFAULT/shUnDjtZdrRPOt7OVwR9HgeHunU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:3d:6a:a4:5c:41:25:1d:a8:ea:f5:28:48:46:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b215270e3b5976b44f3adece57047d1e0787ba75
Validity
Not Before: Aug 23 03:02:02 2025 GMT
Not After : Aug 24 03:02:02 2025 GMT
Subject: CN=fa4cdc8f241a461064f381c36af9c98b481a556f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6c:56:b9:fa:e8:1f:18:28:74:1c:5c:02:03:
f0:aa:c6:8e:d4:da:2f:3a:12:b4:80:e4:00:05:1d:
87:9a:90:32:39:3a:b7:0b:32:90:82:39:81:82:2d:
06:10:c4:f1:03:a3:bf:e9:74:34:b1:4b:57:9b:f5:
a2:c8:29:d9:39:92:35:f2:c9:80:ec:7d:32:92:32:
8e:86:99:c3:3f:78:8f:56:d4:5a:2b:11:2d:e5:20:
00:a7:fb:c3:9c:92:df:9f:3e:62:b2:2f:1c:19:ea:
7a:b6:2d:87:14:93:8f:ee:fc:d4:c9:dc:3b:d3:32:
a4:66:70:11:85:16:45:d0:cf:f0:33:30:41:6d:71:
77:b9:ab:98:ea:2f:e0:fe:f7:c2:56:48:48:7e:2e:
7c:2f:73:ce:3b:79:ef:fb:9d:55:3a:bb:bd:a2:bf:
3b:8c:d0:f8:9a:d9:57:e5:96:16:50:04:95:dc:e4:
bb:ca:87:2d:94:d4:ba:50:d6:ef:20:56:e2:36:40:
1d:e4:1d:0c:da:70:59:62:15:75:78:b9:d8:c4:0e:
8c:79:27:e8:56:e0:97:c7:c4:9d:67:81:91:a4:0d:
4a:0c:c2:81:f5:2e:88:4d:f3:27:91:9a:eb:75:22:
67:cd:d4:10:dc:67:09:62:4b:e2:f3:1c:13:22:b4:
62:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:4C:DC:8F:24:1A:46:10:64:F3:81:C3:6A:F9:C9:8B:48:1A:55:6F
X509v3 Authority Key Identifier:
keyid:B2:15:27:0E:3B:59:76:B4:4F:3A:DE:CE:57:04:7D:1E:07:87:BA:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/shUnDjtZdrRPOt7OVwR9HgeHunU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bd59ae-5b7d-4c26-8e14-24b9e8211885/1/shUnDjtZdrRPOt7OVwR9HgeHunU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bd59ae-5b7d-4c26-8e14-24b9e8211885/1/shUnDjtZdrRPOt7OVwR9HgeHunU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:e4:4b:b1:09:55:63:58:f5:fe:08:02:f6:f3:12:f6:2d:b4:
33:57:bc:1f:70:47:9a:a1:7e:c3:04:05:9e:7f:ba:65:9f:7a:
87:11:a0:8f:6e:b0:e7:fb:c8:cd:7a:a3:d1:fc:3b:54:17:54:
07:8b:be:99:7a:26:ca:dd:2f:e2:d8:05:e0:06:27:37:34:0d:
e9:fa:91:b8:7b:01:54:e5:68:fe:61:99:f8:d9:cd:d0:98:e5:
4a:79:a2:04:80:4f:26:64:b8:c3:77:06:b1:6b:87:55:55:5f:
a9:52:8d:31:d4:42:ca:96:fe:0f:f0:1e:1d:63:91:6d:fa:e0:
2e:1c:f7:ed:6c:ee:bd:79:ca:61:a8:3c:1d:40:96:19:8b:f4:
bb:09:ce:e9:28:89:d3:58:48:36:f1:44:36:8e:76:4c:90:28:
11:ed:21:94:db:8d:9c:c0:c6:9c:0d:e6:f4:fe:ae:bd:d7:b3:
65:93:19:0d:ba:83:cd:01:34:1d:32:77:1d:e3:db:08:ab:8b:
4f:f6:56:a6:60:93:c5:db:72:83:7c:a5:47:5c:af:c2:41:0d:
e2:3d:66:ca:00:8e:61:7a:2d:38:d8:7b:68:72:2e:11:04:3d:
df:7c:e2:b7:a4:c5:9e:90:89:52:5b:0b:05:ec:de:58:01:19:
68:1d:ef:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:34:53 2025 by rpki-client