Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/52a1e5-86f1-49f7-a773-cb3e29b6ad32/1/sh47KsUJcPsSbL3xnX-zFdzBxF0.mft
File: sh47KsUJcPsSbL3xnX-zFdzBxF0.mft (raw, json)
Hash identifier: aWV9B1WJ4XhwTVlIGEk5EyRKBdNIRDMWjKyrtIsDNNs=
Subject key identifier: 27:B6:14:82:1F:74:33:F8:87:58:C1:87:ED:1B:5C:68:0E:F6:CA:C6
Authority key identifier: B2:1E:3B:2A:C5:09:70:FB:12:6C:BD:F1:9D:7F:B3:15:DC:C1:C4:5D
Certificate issuer: /CN=b21e3b2ac50970fb126cbdf19d7fb315dcc1c45d
Certificate serial: 019845899D0E3C3112BD4E899CE80CA4F6E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sh47KsUJcPsSbL3xnX-zFdzBxF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/52a1e5-86f1-49f7-a773-cb3e29b6ad32/1/sh47KsUJcPsSbL3xnX-zFdzBxF0.mft
Manifest number: 8C
Signing time: Sat 26 Jul 2025 07:01:43 +0000
Manifest this update: Sat 26 Jul 2025 07:01:43 +0000
Manifest next update: Sun 27 Jul 2025 07:01:43 +0000
Files and hashes: 1: 5wrNYPlSCkVTpZCOkOfJiVfHH1s.roa (hash: vV52rVETrxDxRFyAGhG26EED/lJXHQxzwHDXgoc8s8o=)
2: sh47KsUJcPsSbL3xnX-zFdzBxF0.crl (hash: tOjDRf8OxXNLYxCdO8WH7XIyNzC8zk/Y5cNbkMV58/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/52a1e5-86f1-49f7-a773-cb3e29b6ad32/1/sh47KsUJcPsSbL3xnX-zFdzBxF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/52a1e5-86f1-49f7-a773-cb3e29b6ad32/1/sh47KsUJcPsSbL3xnX-zFdzBxF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sh47KsUJcPsSbL3xnX-zFdzBxF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:89:9d:0e:3c:31:12:bd:4e:89:9c:e8:0c:a4:f6:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b21e3b2ac50970fb126cbdf19d7fb315dcc1c45d
Validity
Not Before: Jul 26 07:01:43 2025 GMT
Not After : Jul 27 07:01:43 2025 GMT
Subject: CN=27b614821f7433f88758c187ed1b5c680ef6cac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a4:6a:d3:cd:c9:eb:bf:36:e7:2c:91:6b:27:
1b:3a:f7:1f:de:28:bc:14:89:c8:6c:d2:e5:27:37:
d2:0b:24:41:ed:d6:64:6b:31:eb:e6:86:59:d3:ad:
da:6e:f6:86:37:29:24:5b:57:41:76:30:c8:55:96:
0a:b9:3c:0e:21:03:bd:93:9b:20:1a:aa:87:ac:0a:
b1:2a:48:fe:ed:68:da:f4:57:56:a1:1f:cc:d3:d7:
29:53:ee:b5:ad:96:75:07:32:c7:ec:c1:56:4f:53:
51:67:3a:1c:ce:2b:64:6f:52:cd:a8:b1:ee:f4:b6:
08:a5:a9:d4:5d:84:f1:93:85:c8:b8:3c:2b:6a:ad:
5b:58:4a:09:f5:52:96:9b:2a:fe:3b:a6:40:85:e6:
de:57:b7:62:e3:19:00:80:e1:77:9d:ff:0f:72:f0:
ba:e3:3c:d8:63:8f:59:de:cf:4f:9b:82:2e:12:4f:
3c:01:64:21:ee:15:ed:05:9f:29:8d:d8:e8:1e:6e:
5f:8b:e8:a8:d7:75:77:b8:f1:75:4e:28:56:c2:71:
c9:28:e4:84:91:9c:68:20:57:62:74:be:6d:52:04:
a7:a6:bc:3d:81:67:e2:75:00:c3:c7:4f:06:d1:fd:
8d:40:df:cb:e7:ac:7a:96:37:80:01:f7:70:1d:90:
be:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:B6:14:82:1F:74:33:F8:87:58:C1:87:ED:1B:5C:68:0E:F6:CA:C6
X509v3 Authority Key Identifier:
keyid:B2:1E:3B:2A:C5:09:70:FB:12:6C:BD:F1:9D:7F:B3:15:DC:C1:C4:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sh47KsUJcPsSbL3xnX-zFdzBxF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/52a1e5-86f1-49f7-a773-cb3e29b6ad32/1/sh47KsUJcPsSbL3xnX-zFdzBxF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/52a1e5-86f1-49f7-a773-cb3e29b6ad32/1/sh47KsUJcPsSbL3xnX-zFdzBxF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:32:29:0e:7a:aa:68:79:a6:40:71:8a:56:e9:8d:a5:c4:2b:
9b:69:fa:3d:b1:12:ea:d0:f7:7a:f9:e1:31:6f:96:ec:f4:16:
fa:19:80:ce:21:2b:32:12:67:16:70:87:b3:3f:02:fb:f3:b0:
29:05:ff:94:0e:e2:f9:76:21:1a:b1:c6:e0:d7:48:22:2c:77:
0f:6a:72:16:ac:60:60:e3:a1:d8:77:9a:82:83:f8:7d:5a:7b:
67:2d:05:24:b7:b6:fb:e5:54:a9:3d:71:5e:ba:e3:e7:de:88:
1a:bf:8e:e9:08:88:ad:a6:84:ee:1d:38:54:1f:08:a3:fd:96:
fb:22:f1:5f:95:56:e4:ce:f7:a7:99:93:9a:e2:56:ba:0e:4a:
4b:ea:d8:06:f2:0d:89:fd:b1:4e:0d:af:3e:1e:dc:4d:7b:e0:
bc:ce:5c:a8:f5:17:6f:1c:fc:79:a1:72:44:bb:f9:52:22:6e:
fe:01:74:4c:0c:19:b7:0f:90:ec:08:0b:1b:c5:65:67:58:15:
29:ce:51:f0:05:6e:e8:3c:6f:b0:ce:55:b3:05:bc:ad:76:43:
dd:1e:c9:4e:f6:38:4b:8d:c7:70:24:b4:d4:23:86:50:14:27:
1c:a0:c0:8a:e6:2d:35:51:43:4e:b4:d1:38:ae:d8:da:b6:4f:
98:af:0e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:14:55 2025 by rpki-client