Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.mft
File: she1rEZ0EuJJxE4nOcKJ67BM0zc.mft (raw, json)
Hash identifier: KANT+Rpe3zjcGaDqR0LlipXQJJ2ET/MhSh8VXw83rr4=
Subject key identifier: 5A:66:0F:81:7F:8F:D8:90:06:8A:81:CB:F0:AE:6A:71:01:AC:C0:72
Authority key identifier: B2:17:B5:AC:46:74:12:E2:49:C4:4E:27:39:C2:89:EB:B0:4C:D3:37
Certificate issuer: /CN=b217b5ac467412e249c44e2739c289ebb04cd337
Certificate serial: 0199FDD8D5B4AE4309B4A3F63D418FD4177C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/she1rEZ0EuJJxE4nOcKJ67BM0zc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.mft
Manifest number: 0A8B
Signing time: Sun 19 Oct 2025 19:01:10 +0000
Manifest this update: Sun 19 Oct 2025 19:01:10 +0000
Manifest next update: Mon 20 Oct 2025 19:01:10 +0000
Files and hashes: 1: Ftnb9Ud8kWttM5-w7OSz4uHafco.roa (hash: 2d7vx7DexYl0/ojCB78Rdwk/rdaUo+im6ReM1HOn2aE=)
2: she1rEZ0EuJJxE4nOcKJ67BM0zc.crl (hash: EonikqteBmGwak0XgGEkFMe+eQJaA95NKjQlLCyJIAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.mft
rsync://rpki.ripe.net/repository/DEFAULT/she1rEZ0EuJJxE4nOcKJ67BM0zc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:d5:b4:ae:43:09:b4:a3:f6:3d:41:8f:d4:17:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b217b5ac467412e249c44e2739c289ebb04cd337
Validity
Not Before: Oct 19 19:01:10 2025 GMT
Not After : Oct 20 19:01:10 2025 GMT
Subject: CN=5a660f817f8fd890068a81cbf0ae6a7101acc072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:85:ee:74:05:ee:51:9b:20:f2:ce:47:18:a1:
fa:48:d4:3a:c4:3c:21:52:3d:bd:e9:4c:07:f6:82:
f8:c7:3a:5e:3d:4b:94:1e:94:d4:d4:95:a9:97:3e:
01:0c:93:57:42:58:30:19:f6:8e:8c:56:35:94:54:
2b:27:e4:82:7b:92:6d:5b:c0:a6:87:db:72:40:df:
a9:77:24:b6:01:43:c4:8e:88:5e:fa:5a:94:9f:7a:
0b:2e:86:5f:1a:a9:38:76:9b:c2:c0:c1:31:c7:b7:
50:11:00:c5:6b:10:c0:a9:9a:b5:f1:e1:33:26:99:
2c:b2:7e:eb:27:ff:a6:c9:1c:02:7e:48:47:90:41:
5b:c8:f0:82:74:ba:21:90:e1:be:6f:2e:78:f7:80:
f6:e7:3d:ed:50:d7:49:e9:89:64:da:96:06:99:f6:
2e:d5:42:aa:23:82:aa:7d:7d:c4:69:85:ef:ec:db:
c9:6b:c3:bc:0e:e3:0d:cd:97:7b:5d:49:22:c0:4b:
72:03:74:27:c2:78:4c:8c:32:95:32:da:6b:a5:9f:
0b:02:45:d3:46:17:1a:81:a7:71:f7:f6:93:70:b3:
38:a7:84:79:a6:c6:03:42:8a:f2:fb:a0:f4:b8:45:
27:1c:6b:cf:47:30:b4:7e:b1:ec:ac:4c:03:e9:a6:
10:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:66:0F:81:7F:8F:D8:90:06:8A:81:CB:F0:AE:6A:71:01:AC:C0:72
X509v3 Authority Key Identifier:
keyid:B2:17:B5:AC:46:74:12:E2:49:C4:4E:27:39:C2:89:EB:B0:4C:D3:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/she1rEZ0EuJJxE4nOcKJ67BM0zc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:dc:ec:cd:26:e2:8d:53:74:0e:2c:c2:dd:ea:b0:c9:f2:15:
0f:d8:41:19:b1:e1:b4:94:e6:a0:41:da:31:81:d6:4e:d8:4d:
e4:d6:01:08:d4:86:9e:a5:7b:f5:6b:cd:7c:84:aa:11:be:f6:
53:41:74:e9:45:17:83:be:d6:cc:3b:75:1a:e5:97:1f:b8:f9:
4d:be:d9:45:59:6f:13:bc:2a:33:44:d2:d8:46:3a:69:b6:c5:
98:b3:38:76:e1:9a:2f:7d:ce:9b:db:1a:6c:1a:17:7d:a6:57:
90:3e:1c:a5:29:a5:0a:ff:ff:1a:e0:0c:31:33:1c:02:de:af:
4a:ef:4c:a0:77:08:8d:a5:9e:da:c7:01:bc:87:98:1c:98:93:
6c:42:2b:8a:0c:9a:cf:47:d2:e2:7f:c7:fa:7a:61:6c:bb:c1:
c7:a9:58:d9:dd:e7:fd:5d:f4:ce:9e:cc:53:5e:89:f4:1b:8c:
62:96:80:ee:0b:ca:6a:76:f1:ea:d4:d7:a8:70:23:36:f4:24:
e8:a6:9c:a7:cd:d5:da:72:ab:87:b8:63:7b:bb:22:7e:3b:16:
83:21:1e:76:82:d4:95:a7:de:80:fe:22:10:62:09:d9:fb:93:
c3:65:82:8c:fb:31:dd:27:d1:43:ec:c4:96:0b:06:1a:96:09:
ce:64:f1:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:49:20 2025 by rpki-client