Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft
File: SHJHQsP1ThebguavjjPg2dL71NU.mft (raw, json)
Hash identifier: ZxwNO3UL5tZLqU7z583mirL+RlQpl7Nk6+A7SQQ9si4=
Subject key identifier: EB:37:51:EA:F4:9F:1A:D8:6F:17:02:94:FA:83:D9:B1:19:84:A6:23
Authority key identifier: 48:72:47:42:C3:F5:4E:17:9B:82:E6:AF:8E:33:E0:D9:D2:FB:D4:D5
Certificate issuer: /CN=48724742c3f54e179b82e6af8e33e0d9d2fbd4d5
Certificate serial: 0197B5FC43E25B686A4419B4380C571093A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 10:01:37 +0000
Manifest this update: Sat 28 Jun 2025 10:01:37 +0000
Manifest next update: Sun 29 Jun 2025 10:01:37 +0000
Files and hashes: 1: SHJHQsP1ThebguavjjPg2dL71NU.crl (hash: ao+f8CoDsA1OmY3y7arsQdHmgdo3U0WfRi0tcwyrpxE=)
2: fw6EErcKUkE6wVnp4BcQXOeheJE.roa (hash: X3Re7oVemXlG1F0GxrgY8aRLn+cfxjtelXf5RJOURd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:43:e2:5b:68:6a:44:19:b4:38:0c:57:10:93:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48724742c3f54e179b82e6af8e33e0d9d2fbd4d5
Validity
Not Before: Jun 28 10:01:37 2025 GMT
Not After : Jun 29 10:01:37 2025 GMT
Subject: CN=eb3751eaf49f1ad86f170294fa83d9b11984a623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cd:08:7b:8e:ba:5d:0e:48:5d:6e:09:07:dc:
d8:d1:06:9b:da:af:66:32:d8:23:a8:d3:1b:9d:68:
f8:cb:07:e1:ab:65:9e:cb:9a:a0:f7:5b:63:e3:30:
21:e8:17:9b:c5:bb:bc:f6:a5:71:cb:7a:a4:8a:8c:
68:c8:3d:0d:24:ef:70:c0:4a:f8:17:c8:76:f8:bd:
2d:7a:9d:dc:66:4d:40:eb:ab:49:03:05:f7:dc:e6:
1c:43:8b:0d:ea:c7:6c:24:66:b2:2e:9d:ee:63:57:
9f:e4:80:4b:c8:29:18:e5:f9:a2:ef:71:7b:c6:42:
a2:11:46:f7:4a:9c:d7:03:d2:6b:4e:32:7b:b0:65:
13:9f:c5:a7:31:ce:1a:3a:90:9e:ba:cc:eb:a7:d6:
9a:5b:84:d8:15:6e:1c:3b:80:12:57:c5:9b:db:75:
6e:e0:09:73:43:3f:25:e2:83:8e:da:a7:2e:6d:98:
19:8c:60:5b:f4:92:68:02:26:59:90:57:88:dc:db:
22:a0:cf:28:56:01:3c:a8:ff:98:01:75:60:77:30:
a0:7b:77:44:11:03:00:8e:12:3c:89:79:0d:e1:8b:
92:f5:6f:87:fb:24:b3:f8:30:bb:a8:af:0b:12:9a:
d7:b8:21:8f:93:97:a1:e9:1b:61:5e:ff:25:0e:9e:
f4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:37:51:EA:F4:9F:1A:D8:6F:17:02:94:FA:83:D9:B1:19:84:A6:23
X509v3 Authority Key Identifier:
keyid:48:72:47:42:C3:F5:4E:17:9B:82:E6:AF:8E:33:E0:D9:D2:FB:D4:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:ff:90:f8:82:92:db:23:77:c4:61:67:a2:7f:26:0f:32:82:
a0:8d:20:5a:6b:af:02:ff:01:dd:43:9a:a4:90:9b:3e:d9:d7:
fb:2a:09:f8:cc:f3:a2:a9:89:d8:7a:76:03:37:64:47:28:b1:
b6:ff:f3:75:04:6a:2e:88:75:42:0c:f9:6b:7b:64:5b:62:94:
dd:46:8f:cf:6e:a9:65:1c:70:e3:01:24:b0:bd:b0:81:51:e6:
4a:4e:22:0d:e2:a2:76:c2:83:1b:d4:0c:2e:f5:a8:eb:52:c8:
93:ce:72:71:bf:fd:cf:b1:20:85:07:35:eb:7b:72:b7:e7:4b:
da:32:2b:09:d2:d5:31:19:55:64:23:89:d8:e6:99:69:48:68:
a4:b5:60:8b:90:90:de:6d:3c:82:48:8a:38:f6:1f:e0:8a:8c:
a4:b0:2c:5a:c2:7b:6a:8d:a9:34:d4:e0:df:ba:b9:7f:2b:c1:
19:1b:87:68:a0:ce:32:25:cf:5d:99:d5:c6:bd:3a:22:60:e4:
b5:0b:2d:4b:df:6c:7d:91:96:32:dc:a0:fc:29:66:fe:9a:f1:
10:cc:78:94:f8:91:5a:b8:d4:57:bb:7d:3a:17:a3:9c:6b:97:
06:fe:0a:3d:b0:af:5f:8b:a3:73:57:31:95:07:25:67:4a:b2:
4c:2c:57:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:16:19 2025 by rpki-client