Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
File: SHaJAk8W57wukJcGwG2RkDxcfaw.mft (raw, json)
Hash identifier: 5/PtgXsWWtKkcyi0LD1oAR4X3/vH2IHYTr0euqeTjEU=
Subject key identifier: E4:5A:DF:11:79:DC:4F:85:35:41:49:D0:CE:D2:06:F1:1C:FB:B7:99
Authority key identifier: 48:76:89:02:4F:16:E7:BC:2E:90:97:06:C0:6D:91:90:3C:5C:7D:AC
Certificate issuer: /CN=487689024f16e7bc2e909706c06d91903c5c7dac
Certificate serial: 0197B6A0724A0D2DE844A7F4044640929752
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SHaJAk8W57wukJcGwG2RkDxcfaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
Manifest number: 13D2
Signing time: Sat 28 Jun 2025 13:00:57 +0000
Manifest this update: Sat 28 Jun 2025 13:00:57 +0000
Manifest next update: Sun 29 Jun 2025 13:00:57 +0000
Files and hashes: 1: SHaJAk8W57wukJcGwG2RkDxcfaw.crl (hash: KlGWQuTbJym/svA5JjVjddjuAOX7H350wYTYcJxJLYU=)
2: SVWxJ2D9LYiMT8ED3t8Rtdt3qF0.roa (hash: CkroRGpwN+yaYir/P5uXG8yRXWWta2US1fRZkwQ1RIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/SHaJAk8W57wukJcGwG2RkDxcfaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:72:4a:0d:2d:e8:44:a7:f4:04:46:40:92:97:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=487689024f16e7bc2e909706c06d91903c5c7dac
Validity
Not Before: Jun 28 13:00:57 2025 GMT
Not After : Jun 29 13:00:57 2025 GMT
Subject: CN=e45adf1179dc4f85354149d0ced206f11cfbb799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e4:a6:1a:35:5f:43:1e:3a:ef:a1:03:89:63:
ad:cd:d9:dd:d4:d7:b6:55:75:b4:e6:7f:f7:00:69:
7b:03:0a:35:49:f7:70:d0:ba:5b:49:d5:97:6a:31:
89:50:f0:d4:0f:ec:66:f0:86:cf:a0:f4:46:2a:3e:
4a:b6:42:c2:2d:c8:9f:6e:6f:be:88:12:a3:6d:f6:
f6:e3:a7:10:c0:dd:bc:ca:47:50:a2:98:0d:89:34:
f4:bc:73:1b:42:47:c0:8b:76:1c:1d:0e:a1:45:1f:
f3:19:51:64:bb:c5:c6:5e:1a:1b:81:e8:d1:61:4d:
43:23:30:7b:66:ff:2e:5d:d9:d8:25:f1:b5:ce:ce:
65:2d:52:98:61:d1:a0:79:dd:b4:41:4d:28:aa:25:
49:c6:10:73:40:b5:bd:dc:6d:e6:12:6f:2b:a7:08:
c4:f2:36:bf:d9:33:b8:4b:da:8e:9d:1e:eb:de:19:
07:7f:bd:1d:8f:76:31:f8:af:13:b1:6f:83:bd:7f:
16:fc:f8:9e:e4:b6:d9:a9:86:3a:a0:6c:56:39:fb:
74:1a:0e:2a:60:44:52:6e:49:4d:66:77:59:92:85:
8c:c0:71:eb:c5:fa:02:6a:e0:e9:b5:8c:17:44:d8:
ff:5f:9e:9d:2f:2f:0c:af:c8:57:77:1d:bf:0c:14:
ea:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:5A:DF:11:79:DC:4F:85:35:41:49:D0:CE:D2:06:F1:1C:FB:B7:99
X509v3 Authority Key Identifier:
keyid:48:76:89:02:4F:16:E7:BC:2E:90:97:06:C0:6D:91:90:3C:5C:7D:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SHaJAk8W57wukJcGwG2RkDxcfaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:1f:e3:43:f1:ed:a8:9e:dd:a2:ee:0f:90:c5:5e:f8:12:9a:
f5:1f:50:14:6f:bd:c9:ba:0c:93:6a:44:68:0e:84:92:3a:11:
ba:84:37:20:06:2c:89:31:91:31:fd:1e:7c:22:6a:93:24:49:
17:5a:8f:d7:ca:ae:83:9d:86:89:a1:d1:d2:0e:69:bf:5f:e4:
ae:2f:fd:d0:76:26:1d:cd:f8:ae:56:70:f1:9d:49:32:7d:e5:
bb:b0:7d:95:84:7b:09:10:10:ac:ba:16:66:df:ba:6e:b8:9a:
fd:7a:88:b8:14:13:d8:e5:b9:51:8e:96:82:50:15:f2:f9:b7:
ab:da:37:61:4a:2a:11:74:2f:38:87:02:12:12:0d:bf:24:8d:
0f:57:ae:d4:dc:d2:18:a0:f2:cd:4a:b0:fc:6b:78:5e:0f:72:
02:56:b7:d2:51:9b:1b:03:38:1a:2d:8a:c8:1c:8d:6d:19:c4:
0e:12:93:99:be:31:10:b5:99:98:d7:82:c4:94:ec:22:25:8b:
40:39:37:93:69:6a:df:b5:8f:3a:e5:3d:2a:a9:93:eb:d9:88:
20:1b:ef:83:36:64:a9:54:ea:ed:f5:5f:12:72:4a:50:0b:78:
46:ad:4e:8e:f2:99:83:cd:2b:07:48:89:4d:24:67:07:be:54:
35:ba:4a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:16:05 2025 by rpki-client