Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/f21883-177d-4083-bfb7-6b9805286100/1/SHYmY7ST8OpZ-v34R6AYuzipoYY.mft
File: SHYmY7ST8OpZ-v34R6AYuzipoYY.mft (raw, json)
Hash identifier: gzprEeUtG8p2UQqdshftspWdQngH99vWeLOTElTLNvE=
Subject key identifier: AF:B0:D3:33:E8:1F:15:40:C4:AD:33:FC:C7:4A:09:21:AE:8B:FE:E6
Authority key identifier: 48:76:26:63:B4:93:F0:EA:59:FA:FD:F8:47:A0:18:BB:38:A9:A1:86
Certificate issuer: /CN=48762663b493f0ea59fafdf847a018bb38a9a186
Certificate serial: 0197B6A09659D8763F060120EF3FE95FC168
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SHYmY7ST8OpZ-v34R6AYuzipoYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/f21883-177d-4083-bfb7-6b9805286100/1/SHYmY7ST8OpZ-v34R6AYuzipoYY.mft
Manifest number: 0971
Signing time: Sat 28 Jun 2025 13:01:06 +0000
Manifest this update: Sat 28 Jun 2025 13:01:06 +0000
Manifest next update: Sun 29 Jun 2025 13:01:06 +0000
Files and hashes: 1: SHYmY7ST8OpZ-v34R6AYuzipoYY.crl (hash: Ho59NrQeU3UiiZlJlQAsIsQrmLX+htSbQd5jSF5qVs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/f21883-177d-4083-bfb7-6b9805286100/1/SHYmY7ST8OpZ-v34R6AYuzipoYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/f21883-177d-4083-bfb7-6b9805286100/1/SHYmY7ST8OpZ-v34R6AYuzipoYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SHYmY7ST8OpZ-v34R6AYuzipoYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:96:59:d8:76:3f:06:01:20:ef:3f:e9:5f:c1:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48762663b493f0ea59fafdf847a018bb38a9a186
Validity
Not Before: Jun 28 13:01:06 2025 GMT
Not After : Jun 29 13:01:06 2025 GMT
Subject: CN=afb0d333e81f1540c4ad33fcc74a0921ae8bfee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fd:27:f0:0d:36:24:03:97:14:ed:9e:e7:b2:
db:20:52:95:be:2a:38:e9:ed:53:49:88:ce:d8:74:
a5:10:09:21:35:29:44:cf:f8:be:ab:36:ba:73:30:
f1:36:74:0a:e9:fa:7a:d6:61:c3:ed:b8:db:a7:4e:
9d:d2:71:b8:32:8d:ef:84:c8:a5:80:29:7a:5c:da:
64:b3:cf:ec:90:2f:9b:46:34:6a:b7:6e:44:4b:9d:
81:31:f1:a1:38:d7:c7:9b:e4:13:57:b0:7b:d0:de:
3b:6c:f3:0b:b6:98:6b:c6:89:08:75:2d:54:75:57:
fe:ed:56:99:b4:00:2e:2e:0c:f6:0e:27:c8:75:c5:
2f:89:c9:b2:7b:9d:05:d9:9d:49:e8:a0:87:95:9d:
f0:bd:c5:0c:c7:20:cc:09:86:85:d5:55:0b:a2:bf:
7b:51:5a:97:59:aa:f1:3a:e6:2c:51:ba:a7:a2:7d:
b8:8d:b1:a3:5d:1b:ee:13:58:42:b0:78:62:21:d8:
79:b4:33:75:d4:89:d0:8f:57:11:c1:14:d5:8f:81:
2c:cd:7b:ba:d5:ad:0b:bf:3b:df:39:aa:78:cc:4b:
b9:74:e5:b1:67:f2:64:4c:a2:5f:f2:5e:f5:b4:0b:
28:c7:09:5b:77:8f:bd:16:cd:d2:31:ee:3c:4a:2e:
9d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:B0:D3:33:E8:1F:15:40:C4:AD:33:FC:C7:4A:09:21:AE:8B:FE:E6
X509v3 Authority Key Identifier:
keyid:48:76:26:63:B4:93:F0:EA:59:FA:FD:F8:47:A0:18:BB:38:A9:A1:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SHYmY7ST8OpZ-v34R6AYuzipoYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f21883-177d-4083-bfb7-6b9805286100/1/SHYmY7ST8OpZ-v34R6AYuzipoYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f21883-177d-4083-bfb7-6b9805286100/1/SHYmY7ST8OpZ-v34R6AYuzipoYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:b6:b9:ed:ee:00:06:60:d9:3b:fc:b7:67:7f:a9:57:0b:91:
6e:6b:e8:fe:09:b5:f8:ed:f9:d8:5d:a9:aa:fb:0e:7e:86:cc:
6d:e4:dc:f4:61:ae:6a:d6:15:94:02:04:5b:55:50:fb:65:4e:
00:fb:e0:18:64:c9:67:68:c3:8e:73:b3:d1:a4:3c:e4:8f:28:
db:18:22:49:f3:f8:74:68:eb:4a:29:30:8b:ff:eb:46:f7:9c:
de:22:71:80:59:85:a4:b6:15:d3:55:fa:5f:b7:f7:9a:0b:50:
78:8a:b2:eb:5f:7c:c5:25:58:dd:36:38:84:bb:92:16:ae:38:
2b:c6:5a:8c:d2:97:1a:fa:e9:8a:fd:57:63:c2:14:32:73:2e:
b7:e9:3b:f2:cc:5a:f6:32:88:ec:e0:03:fe:00:d2:12:c5:2d:
00:4e:06:4a:71:79:b5:ab:a9:95:31:f2:b5:6a:aa:01:6b:f9:
b1:63:ea:a3:40:52:f8:b9:cb:a3:4e:89:77:d1:f6:bb:bb:73:
1f:f2:3d:9d:52:55:41:07:58:92:20:7e:1e:54:d7:92:e1:8c:
d6:01:e6:f9:f0:6a:69:a8:a2:ee:de:df:bb:a9:cb:d9:51:b7:
c3:ec:fd:bb:ed:8a:b9:77:5b:c9:b9:11:eb:15:44:26:b2:94:
0b:c9:eb:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:28:39 2025 by rpki-client