Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.mft
File: she1rEZ0EuJJxE4nOcKJ67BM0zc.mft (raw, json)
Hash identifier: rJgz52EGw7m1BBWVwpTCdJEH8E8USr6LaVse61J2RUs=
Subject key identifier: E4:AA:2D:0B:0C:E1:FE:0D:93:F2:58:A3:E3:72:0D:B5:95:29:7F:2C
Authority key identifier: B2:17:B5:AC:46:74:12:E2:49:C4:4E:27:39:C2:89:EB:B0:4C:D3:37
Certificate issuer: /CN=b217b5ac467412e249c44e2739c289ebb04cd337
Certificate serial: 0198D65FD430B68E04EDB986465357001211
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/she1rEZ0EuJJxE4nOcKJ67BM0zc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.mft
Manifest number: 09F2
Signing time: Sat 23 Aug 2025 10:01:00 +0000
Manifest this update: Sat 23 Aug 2025 10:01:00 +0000
Manifest next update: Sun 24 Aug 2025 10:01:00 +0000
Files and hashes: 1: Ftnb9Ud8kWttM5-w7OSz4uHafco.roa (hash: 2d7vx7DexYl0/ojCB78Rdwk/rdaUo+im6ReM1HOn2aE=)
2: she1rEZ0EuJJxE4nOcKJ67BM0zc.crl (hash: 1yEVbPbiI1ut3HXqDcMtJ8u/oAOty3jXx7MZdj3mpOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.mft
rsync://rpki.ripe.net/repository/DEFAULT/she1rEZ0EuJJxE4nOcKJ67BM0zc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:d4:30:b6:8e:04:ed:b9:86:46:53:57:00:12:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b217b5ac467412e249c44e2739c289ebb04cd337
Validity
Not Before: Aug 23 10:01:00 2025 GMT
Not After : Aug 24 10:01:00 2025 GMT
Subject: CN=e4aa2d0b0ce1fe0d93f258a3e3720db595297f2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e3:70:21:8f:1f:4b:c4:5a:fd:0b:35:d0:48:
76:b1:c7:53:a5:f0:64:4a:64:ec:73:dc:1a:04:51:
e9:f6:98:af:2f:6a:9d:e4:1e:bb:e5:30:49:26:71:
a3:fe:80:50:32:a6:33:11:ef:ab:56:57:8d:ab:45:
cc:d0:5e:1c:d2:51:ea:02:d4:b1:69:d4:8c:71:31:
77:e1:bf:98:c0:93:2b:54:05:e8:fc:2e:90:8d:7e:
97:75:26:e9:bf:9f:80:1e:9e:34:6e:ff:4d:c9:66:
e1:09:aa:b3:68:d3:2d:1e:1e:dc:7f:9d:98:8d:85:
53:a2:4c:6f:03:9e:ef:24:50:d3:3e:17:52:5f:9e:
5a:9f:8e:cd:55:ec:ae:6b:a5:f3:33:00:20:8c:b4:
99:11:45:a4:ab:5f:c9:21:3d:81:08:8c:39:2c:cd:
6a:03:3c:0b:68:8e:fd:04:fa:3d:7c:2b:6d:b7:69:
84:55:c7:e7:bc:60:45:5e:28:70:8b:a9:ac:44:95:
fe:7a:cd:bf:e1:43:ab:2f:4b:ab:ed:59:f5:fc:35:
db:94:c3:f3:6c:b4:c9:43:d9:77:cc:01:56:40:31:
26:34:34:3d:04:2d:cd:4d:1a:65:83:66:aa:cf:87:
52:e6:41:b2:6b:1a:f1:6b:6d:72:23:fa:3a:71:2a:
0c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:AA:2D:0B:0C:E1:FE:0D:93:F2:58:A3:E3:72:0D:B5:95:29:7F:2C
X509v3 Authority Key Identifier:
keyid:B2:17:B5:AC:46:74:12:E2:49:C4:4E:27:39:C2:89:EB:B0:4C:D3:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/she1rEZ0EuJJxE4nOcKJ67BM0zc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:e0:0c:48:76:64:96:c9:a3:17:50:eb:48:5b:25:0a:d1:c2:
cb:df:b1:07:ab:1f:da:2e:a6:46:e9:8c:98:1f:84:a8:ba:fc:
e8:5e:fb:fe:5c:f5:a0:49:69:bf:fb:6c:8f:8f:20:13:e4:bc:
80:94:1a:f8:a2:6a:13:86:e1:8a:66:f6:41:46:1a:14:0b:a0:
8d:77:89:7e:91:2b:ed:85:aa:51:43:5c:70:12:f6:4d:c3:88:
68:43:36:30:6a:24:7c:11:4a:1c:75:fe:18:a6:96:11:a4:5c:
ba:88:9a:13:cf:9f:79:93:5e:6d:b6:52:32:19:07:e6:3b:16:
3c:d9:18:6d:51:7a:3d:59:de:51:bd:58:72:17:b8:f1:98:20:
28:d7:bd:08:bc:86:f6:f9:a0:ce:db:d4:30:c7:ef:81:0c:93:
ea:41:4b:40:b5:83:6c:b9:70:9f:27:ab:98:9f:d9:e6:43:04:
99:52:06:a6:17:81:7e:57:2f:c0:d3:95:23:13:c9:cf:12:2a:
8e:ea:59:84:51:49:94:ca:1a:51:68:d7:27:db:c3:3b:56:75:
1f:95:1e:c8:82:b2:06:73:01:f4:63:09:ed:ca:be:fb:bd:5c:
f7:8b:ec:b5:1d:58:46:cb:fc:0f:d3:66:d1:0c:d9:6d:c3:ae:
e0:d5:c8:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:29:57 2025 by rpki-client