Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/f21883-177d-4083-bfb7-6b9805286100/1/SHYmY7ST8OpZ-v34R6AYuzipoYY.mft
File: SHYmY7ST8OpZ-v34R6AYuzipoYY.mft (raw, json)
Hash identifier: jMz5Rl7CrmNLvDHiLVJ+Gi7idTapSNWih3GVnz/2PsQ=
Subject key identifier: D7:E0:9C:8C:F3:DB:93:93:E1:71:0E:3D:2C:BF:E7:1E:13:D9:65:40
Authority key identifier: 48:76:26:63:B4:93:F0:EA:59:FA:FD:F8:47:A0:18:BB:38:A9:A1:86
Certificate issuer: /CN=48762663b493f0ea59fafdf847a018bb38a9a186
Certificate serial: 0198D4737C808282E647BBA862CCCA2F8148
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SHYmY7ST8OpZ-v34R6AYuzipoYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/f21883-177d-4083-bfb7-6b9805286100/1/SHYmY7ST8OpZ-v34R6AYuzipoYY.mft
Manifest number: 0A05
Signing time: Sat 23 Aug 2025 01:03:14 +0000
Manifest this update: Sat 23 Aug 2025 01:03:14 +0000
Manifest next update: Sun 24 Aug 2025 01:03:14 +0000
Files and hashes: 1: SHYmY7ST8OpZ-v34R6AYuzipoYY.crl (hash: 7apRP5aM91Af/ZcZpCXHB8wKadV4wuNUA8mprPKDooA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/f21883-177d-4083-bfb7-6b9805286100/1/SHYmY7ST8OpZ-v34R6AYuzipoYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/f21883-177d-4083-bfb7-6b9805286100/1/SHYmY7ST8OpZ-v34R6AYuzipoYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SHYmY7ST8OpZ-v34R6AYuzipoYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:7c:80:82:82:e6:47:bb:a8:62:cc:ca:2f:81:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48762663b493f0ea59fafdf847a018bb38a9a186
Validity
Not Before: Aug 23 01:03:14 2025 GMT
Not After : Aug 24 01:03:14 2025 GMT
Subject: CN=d7e09c8cf3db9393e1710e3d2cbfe71e13d96540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:54:05:b3:0f:a3:28:22:21:a7:21:9f:8f:1d:
04:34:68:99:ef:54:be:8e:a1:fc:3d:91:56:01:d1:
d8:58:3e:c4:7a:08:65:5f:5d:5b:95:95:4d:7f:7b:
bb:d9:c7:04:71:cb:f0:74:84:27:66:ae:d2:5b:cd:
78:72:bc:a6:82:d7:df:99:cf:04:d9:18:f7:07:ee:
41:ec:2b:03:d9:ff:1b:d3:1b:9f:f8:a1:08:09:0f:
61:26:05:88:b7:2b:b9:3c:f9:5e:e6:8c:b7:78:51:
39:a0:b5:8a:bb:75:5b:f1:23:9c:d0:c8:21:a7:69:
b9:1e:5f:ef:13:8b:d6:43:2c:4d:6c:b1:ce:27:1c:
a3:58:47:13:57:09:df:3b:09:e2:69:43:b3:b8:ab:
9d:ba:20:81:25:04:d5:04:82:10:1c:6c:62:1d:7d:
22:33:93:fe:ba:7a:8b:1c:53:29:da:b2:31:9d:2e:
18:14:51:4b:32:34:00:7d:7d:c0:fe:8a:b6:0d:1d:
f3:ca:be:62:75:11:23:71:89:fe:bd:76:38:85:e5:
e6:6a:c0:38:01:3d:6d:ee:61:26:f5:a6:9f:6f:52:
7d:b0:63:61:af:aa:19:25:e2:af:a9:59:71:a5:86:
a2:c7:6c:76:d6:f8:2f:aa:69:a5:84:4b:86:00:32:
a6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E0:9C:8C:F3:DB:93:93:E1:71:0E:3D:2C:BF:E7:1E:13:D9:65:40
X509v3 Authority Key Identifier:
keyid:48:76:26:63:B4:93:F0:EA:59:FA:FD:F8:47:A0:18:BB:38:A9:A1:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SHYmY7ST8OpZ-v34R6AYuzipoYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f21883-177d-4083-bfb7-6b9805286100/1/SHYmY7ST8OpZ-v34R6AYuzipoYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f21883-177d-4083-bfb7-6b9805286100/1/SHYmY7ST8OpZ-v34R6AYuzipoYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:64:8c:82:7e:9e:7d:78:4a:42:0d:45:82:24:90:aa:53:3b:
14:0e:58:30:b3:f4:d8:2f:7d:35:4d:16:40:7f:a8:0d:81:7b:
d8:fe:32:2a:57:d6:c5:b4:81:5b:c4:96:43:d9:d1:8d:12:02:
3d:c5:f2:89:08:f6:74:5c:a5:be:91:bb:31:80:cf:6d:d0:6d:
cd:d7:5a:a4:06:2f:6b:96:3b:88:38:05:eb:22:de:b3:9c:a1:
5e:98:43:83:02:ee:bf:1e:9f:ef:93:85:51:89:b5:c9:4d:82:
6d:73:77:a3:77:ba:38:81:5e:c0:18:24:0d:d6:2e:80:00:f6:
c5:d6:a3:b6:f1:9d:b2:0e:69:59:ca:c5:95:ab:6b:7e:96:48:
5c:9d:44:58:12:8e:e8:5b:e1:b5:c0:6e:08:91:81:5d:52:b2:
e1:20:6b:ad:79:ef:e5:a5:fe:48:79:97:4b:8a:ea:77:bb:21:
41:1f:3f:e9:9c:ae:40:64:8c:be:bc:0e:c9:8a:53:c2:9a:c0:
a3:b4:3f:b9:d6:5f:b3:a8:ca:e0:7e:17:88:d2:be:24:0b:d8:
ef:05:0c:3c:16:ef:d8:2d:7d:2e:a0:7e:5e:43:4c:e2:a5:df:
80:34:3d:c9:4f:8d:79:ce:68:4d:91:fc:b7:4d:c5:f7:81:83:
61:d2:c8:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:21 2025 by rpki-client