Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/77482d-4830-49f7-b6bd-7650d9732a52/1/shna0BUe3wUqLxyX34hKWoeotfU.mft
File: shna0BUe3wUqLxyX34hKWoeotfU.mft (raw, json)
Hash identifier: F5q40xoCzW79KVlP9AZ201z9ts5A/w0Yje3xgIT+MKw=
Subject key identifier: 26:A7:DB:87:34:00:E9:D2:02:63:3E:A1:9D:B9:7D:CB:A3:A6:32:92
Authority key identifier: B2:19:DA:D0:15:1E:DF:05:2A:2F:1C:97:DF:88:4A:5A:87:A8:B5:F5
Certificate issuer: /CN=b219dad0151edf052a2f1c97df884a5a87a8b5f5
Certificate serial: 01965DCD088316F5B0D5A7274F7A5FA9316A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/shna0BUe3wUqLxyX34hKWoeotfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/77482d-4830-49f7-b6bd-7650d9732a52/1/shna0BUe3wUqLxyX34hKWoeotfU.mft
Manifest number: 06A6
Signing time: Tue 22 Apr 2025 14:00:40 +0000
Manifest this update: Tue 22 Apr 2025 14:00:40 +0000
Manifest next update: Wed 23 Apr 2025 14:00:40 +0000
Files and hashes: 1: shna0BUe3wUqLxyX34hKWoeotfU.crl (hash: Xg+HvpcR5TChumQrEDJxkAdvuVjj2jMQJvy7+0bKTZY=)
2: yqdi2I4mvyqmB4-2BzPkMkJ3hIY.roa (hash: oTSjwH5eKf8we68+dtERfn9uiSN2W5Nb5pDWgRrwsxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/77482d-4830-49f7-b6bd-7650d9732a52/1/shna0BUe3wUqLxyX34hKWoeotfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/77482d-4830-49f7-b6bd-7650d9732a52/1/shna0BUe3wUqLxyX34hKWoeotfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/shna0BUe3wUqLxyX34hKWoeotfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:cd:08:83:16:f5:b0:d5:a7:27:4f:7a:5f:a9:31:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b219dad0151edf052a2f1c97df884a5a87a8b5f5
Validity
Not Before: Apr 22 14:00:40 2025 GMT
Not After : Apr 23 14:00:40 2025 GMT
Subject: CN=26a7db873400e9d202633ea19db97dcba3a63292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ec:64:10:23:07:69:7b:89:9a:36:06:63:b4:
f4:9a:4a:c7:d4:a0:23:3f:c3:2b:76:60:ed:07:0d:
0b:ad:84:82:b8:3f:af:4b:9a:13:d7:dc:50:99:c2:
9e:c6:80:51:77:2a:b7:d5:69:fb:09:7b:b3:05:a4:
82:b8:cd:24:0c:e8:6a:e3:1f:18:e3:01:4e:26:09:
49:d2:5f:f9:d4:4f:6a:75:42:46:8b:08:36:34:ed:
44:7d:c9:ca:14:6d:21:a2:e2:e8:58:a0:ab:d2:f7:
fb:08:ca:cf:cd:f1:b6:e8:9f:cb:de:50:b9:67:4e:
9f:37:92:77:1c:1f:83:74:37:5d:eb:25:da:7c:1b:
f9:56:dc:a6:4f:f8:7a:4d:77:be:49:53:a2:28:4b:
81:7b:d1:70:cd:e3:13:3e:a0:e6:74:b4:53:61:3f:
42:b9:82:d6:8d:bd:dd:ed:13:95:aa:0d:a1:65:a8:
cb:51:c5:94:c3:f1:23:3f:b9:18:2f:78:96:da:af:
5c:fe:df:51:b2:c5:4b:50:20:90:1d:52:56:33:4c:
83:1a:b6:8d:77:12:6d:67:0c:e6:fc:4e:15:f7:c7:
1a:36:6d:60:6b:5f:17:1a:66:5c:86:0d:68:94:47:
62:91:87:cd:ea:76:77:eb:02:61:3b:9d:6f:be:d5:
cf:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A7:DB:87:34:00:E9:D2:02:63:3E:A1:9D:B9:7D:CB:A3:A6:32:92
X509v3 Authority Key Identifier:
keyid:B2:19:DA:D0:15:1E:DF:05:2A:2F:1C:97:DF:88:4A:5A:87:A8:B5:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/shna0BUe3wUqLxyX34hKWoeotfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/77482d-4830-49f7-b6bd-7650d9732a52/1/shna0BUe3wUqLxyX34hKWoeotfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/77482d-4830-49f7-b6bd-7650d9732a52/1/shna0BUe3wUqLxyX34hKWoeotfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:12:1f:87:88:d7:6f:81:93:00:88:07:37:b0:24:6e:f0:59:
be:06:a2:9c:8c:e2:a2:ce:02:9f:0a:ad:51:70:ac:b4:a0:c1:
01:87:d4:c6:91:1c:99:8a:77:9a:26:0d:f1:b1:50:1e:78:e3:
a5:8e:ce:0e:23:0c:09:c6:c3:b7:32:17:2c:b2:a9:56:2c:9a:
7d:f3:09:da:92:c7:4f:35:72:7e:29:9e:9c:75:46:76:26:a8:
3b:1f:cf:3b:1f:bf:dc:3e:a5:79:a6:40:1e:05:55:56:8b:a7:
7f:a6:f9:b2:e8:6f:18:67:3e:ac:74:92:a1:e3:e5:2a:a0:5e:
21:35:d3:00:30:34:5c:ea:23:ba:24:cf:3c:c9:56:8d:ad:ee:
f6:e4:bd:54:ca:98:8d:80:84:66:e6:26:69:14:49:cb:2a:68:
fc:b4:40:9b:88:7f:d1:36:6b:5f:93:da:df:6f:b2:cf:ff:85:
d4:aa:f5:90:8d:7e:3b:50:ba:a3:de:b2:c8:a8:79:32:65:e4:
c5:e5:9f:a8:62:da:61:ae:d5:14:01:3d:e5:0e:f5:17:a8:bd:
7e:b8:0b:4e:e1:b0:09:07:60:61:4d:a8:fe:36:a5:87:bf:0c:
50:54:24:f9:4f:a6:74:df:0b:74:ef:9a:45:96:7d:b7:04:d9:
c8:06:04:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 16:38:26 2025 by rpki-client