Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/97c916-81b1-4b3a-9fee-356a19f55506/1/Sh7Uv1AsDy2LyHAmwYrJhZsPHew.mft
File: Sh7Uv1AsDy2LyHAmwYrJhZsPHew.mft (raw, json)
Hash identifier: JLyAyU+vh+fpX0JiBDOm8Q8XRCo2YO2cTrhDlCaom5I=
Subject key identifier: B7:9B:F4:2D:9A:77:A8:60:7A:2D:55:8E:1C:CA:8A:30:99:CB:A9:0D
Authority key identifier: 4A:1E:D4:BF:50:2C:0F:2D:8B:C8:70:26:C1:8A:C9:85:9B:0F:1D:EC
Certificate issuer: /CN=4a1ed4bf502c0f2d8bc87026c18ac9859b0f1dec
Certificate serial: 019853B20191A70DA32589AFD1F9A46EBC5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sh7Uv1AsDy2LyHAmwYrJhZsPHew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/97c916-81b1-4b3a-9fee-356a19f55506/1/Sh7Uv1AsDy2LyHAmwYrJhZsPHew.mft
Manifest number: 1605
Signing time: Tue 29 Jul 2025 01:00:31 +0000
Manifest this update: Tue 29 Jul 2025 01:00:31 +0000
Manifest next update: Wed 30 Jul 2025 01:00:31 +0000
Files and hashes: 1: Sh7Uv1AsDy2LyHAmwYrJhZsPHew.crl (hash: AjuUpLMIdwKNFAWvLwopHNAOPgm9+z+FCjf7thtN9+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/97c916-81b1-4b3a-9fee-356a19f55506/1/Sh7Uv1AsDy2LyHAmwYrJhZsPHew.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/97c916-81b1-4b3a-9fee-356a19f55506/1/Sh7Uv1AsDy2LyHAmwYrJhZsPHew.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sh7Uv1AsDy2LyHAmwYrJhZsPHew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:b2:01:91:a7:0d:a3:25:89:af:d1:f9:a4:6e:bc:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a1ed4bf502c0f2d8bc87026c18ac9859b0f1dec
Validity
Not Before: Jul 29 01:00:31 2025 GMT
Not After : Jul 30 01:00:31 2025 GMT
Subject: CN=b79bf42d9a77a8607a2d558e1cca8a3099cba90d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:59:78:c2:bc:ea:d0:d9:d7:ee:3a:3b:e8:a9:
19:9b:9e:6c:80:ce:9b:d2:a2:6c:cd:74:f8:e9:21:
fb:e9:93:a4:9c:14:a0:34:9f:34:eb:eb:e2:a7:e4:
11:17:06:e9:68:d5:b1:5b:1f:42:a2:7d:d2:e2:fd:
a4:17:fd:59:f7:97:42:ff:87:42:92:95:8b:51:19:
8e:46:a7:b0:bd:98:44:3a:6e:a8:72:6c:c5:43:83:
9c:d0:bf:71:a2:60:8f:0d:af:de:6a:14:f5:a4:17:
5e:62:a0:06:d2:f7:22:a8:7e:2b:b6:39:85:17:34:
36:81:b4:93:14:31:61:8d:8b:98:ed:cf:1b:81:05:
6b:d6:84:fa:74:32:0e:39:19:9d:d4:29:a6:b3:4e:
fd:29:6d:6a:18:30:b7:aa:0b:e8:32:b0:7a:34:ce:
81:55:bb:28:3b:85:04:59:ff:be:4e:08:0b:d0:7f:
53:32:58:2d:ff:e8:16:09:30:64:c6:b0:0e:8a:43:
3c:0d:9e:b6:1f:f8:53:8b:aa:0e:01:09:c4:83:39:
cd:47:80:83:4e:f4:54:5a:0d:51:c7:b9:a2:00:a6:
6d:b0:4f:a4:8e:8a:0e:6c:d7:a8:c5:3a:fc:72:df:
be:89:2a:37:ac:98:94:d4:85:3f:48:f4:f9:d7:99:
d7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:9B:F4:2D:9A:77:A8:60:7A:2D:55:8E:1C:CA:8A:30:99:CB:A9:0D
X509v3 Authority Key Identifier:
keyid:4A:1E:D4:BF:50:2C:0F:2D:8B:C8:70:26:C1:8A:C9:85:9B:0F:1D:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sh7Uv1AsDy2LyHAmwYrJhZsPHew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/97c916-81b1-4b3a-9fee-356a19f55506/1/Sh7Uv1AsDy2LyHAmwYrJhZsPHew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/97c916-81b1-4b3a-9fee-356a19f55506/1/Sh7Uv1AsDy2LyHAmwYrJhZsPHew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:fe:03:94:56:e2:57:b7:58:37:a0:f4:a8:e1:8c:f5:98:8b:
02:75:22:81:50:4e:a8:a0:46:02:9d:d0:60:f2:5d:5e:70:36:
c5:f7:c7:96:6a:b5:32:b0:76:a5:55:45:85:0b:fc:55:b0:5d:
9d:c5:20:c3:fc:a2:2c:af:83:46:06:60:cb:64:c8:71:e5:3f:
9c:ba:12:65:71:7e:d1:92:76:98:95:c6:9a:bb:64:06:4b:52:
fc:b2:e7:d5:2f:06:03:c1:74:be:14:c6:1f:ec:ee:dd:5f:ed:
2d:59:f2:55:3b:1c:51:bb:b1:29:25:6e:75:37:fb:20:ee:dc:
a4:18:0e:bf:4c:8d:62:49:7b:1c:01:f8:0b:65:d7:f9:75:e9:
63:93:8b:b2:98:1e:94:df:41:5c:a8:ae:2e:2a:05:ba:8f:26:
84:4e:96:8d:f1:af:4f:05:5f:41:2c:f5:2c:13:c8:82:08:17:
19:d0:31:03:e6:e8:9b:a1:82:4e:6b:46:4c:0a:3a:5b:dd:4b:
cd:8a:92:39:a3:db:1e:d1:af:4a:43:ae:4c:0b:1a:00:27:09:
bd:0c:34:d0:92:ed:40:61:55:9f:61:74:eb:3f:d0:aa:d0:cc:
98:3d:c6:23:9f:a0:6a:e9:24:df:42:63:d8:8b:3b:c5:75:79:
40:02:57:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:24:52 2025 by rpki-client