
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/97c916-81b1-4b3a-9fee-356a19f55506/1/Sh7Uv1AsDy2LyHAmwYrJhZsPHew.mft
File: Sh7Uv1AsDy2LyHAmwYrJhZsPHew.mft (raw, json)
Hash identifier: M/5s3N5u6tHvbV5p5yz3Zw8ACIvIJTg4IFiksxAX0cc=
Subject key identifier: 30:F8:F0:74:A5:08:AE:18:00:6F:81:4B:A5:3C:AC:24:A3:68:08:7B
Authority key identifier: 4A:1E:D4:BF:50:2C:0F:2D:8B:C8:70:26:C1:8A:C9:85:9B:0F:1D:EC
Certificate issuer: /CN=4a1ed4bf502c0f2d8bc87026c18ac9859b0f1dec
Certificate serial: 01974931A31D12A2E499CBB2B29875693048
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sh7Uv1AsDy2LyHAmwYrJhZsPHew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/97c916-81b1-4b3a-9fee-356a19f55506/1/Sh7Uv1AsDy2LyHAmwYrJhZsPHew.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 07:01:19 +0000
Manifest this update: Sat 07 Jun 2025 07:01:19 +0000
Manifest next update: Sun 08 Jun 2025 07:01:19 +0000
Files and hashes: 1: Sh7Uv1AsDy2LyHAmwYrJhZsPHew.crl (hash: WeKv2GLL+8OqZeR2zXQZaMaNfhXQDKfsiA9sQZzi54E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/97c916-81b1-4b3a-9fee-356a19f55506/1/Sh7Uv1AsDy2LyHAmwYrJhZsPHew.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/97c916-81b1-4b3a-9fee-356a19f55506/1/Sh7Uv1AsDy2LyHAmwYrJhZsPHew.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sh7Uv1AsDy2LyHAmwYrJhZsPHew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:a3:1d:12:a2:e4:99:cb:b2:b2:98:75:69:30:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a1ed4bf502c0f2d8bc87026c18ac9859b0f1dec
Validity
Not Before: Jun 7 07:01:19 2025 GMT
Not After : Jun 8 07:01:19 2025 GMT
Subject: CN=30f8f074a508ae18006f814ba53cac24a368087b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2b:da:f4:0c:da:3b:7e:12:3f:25:e5:59:c3:
76:fe:da:e6:8c:44:cc:46:ff:f0:2b:a0:23:1f:52:
46:24:07:14:b4:57:7c:7c:08:a7:9b:de:26:7f:52:
90:52:03:da:1d:89:f7:4a:cd:f0:55:54:49:66:a5:
bf:eb:09:55:33:90:f1:e9:49:d8:8c:77:dd:82:7a:
bd:50:33:37:1c:98:30:24:ff:18:98:c8:fd:fa:33:
29:89:44:3b:27:f8:cb:b9:07:e8:52:55:17:2b:41:
5a:88:d7:af:18:7a:4e:ba:36:b4:fe:5a:ce:dc:8b:
c5:ff:ac:01:bf:35:a6:dc:83:2f:7f:2f:b2:ce:39:
56:be:78:4f:ba:0b:d0:93:54:75:67:6b:4b:48:07:
ff:ce:e2:62:01:09:97:c7:e5:ce:87:6c:7a:8f:66:
c2:32:3f:73:7d:41:cb:7f:3c:1b:db:87:f2:b0:fd:
f3:4e:56:a8:a8:88:cb:ea:fa:f5:7b:3d:0b:0f:1b:
76:43:5a:64:1a:8f:3f:53:af:bc:fe:49:63:0a:2e:
63:11:ab:5e:09:fd:fe:fb:78:48:69:48:33:cb:22:
c0:7b:9f:7e:83:b6:51:4c:33:5a:3f:33:c9:be:50:
2c:b5:89:e2:03:f7:2f:ee:a1:3e:26:ba:dd:a4:0f:
8d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:F8:F0:74:A5:08:AE:18:00:6F:81:4B:A5:3C:AC:24:A3:68:08:7B
X509v3 Authority Key Identifier:
keyid:4A:1E:D4:BF:50:2C:0F:2D:8B:C8:70:26:C1:8A:C9:85:9B:0F:1D:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sh7Uv1AsDy2LyHAmwYrJhZsPHew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/97c916-81b1-4b3a-9fee-356a19f55506/1/Sh7Uv1AsDy2LyHAmwYrJhZsPHew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/97c916-81b1-4b3a-9fee-356a19f55506/1/Sh7Uv1AsDy2LyHAmwYrJhZsPHew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:27:29:62:f1:a7:8d:c4:f1:94:b7:0f:1d:a0:9a:bd:40:91:
00:d2:47:f6:14:0a:2c:01:ab:f3:51:ba:c6:46:5e:1f:9a:53:
bc:23:ba:14:14:cf:ba:a6:11:d2:71:5a:c4:3e:82:10:6c:c3:
a4:41:1a:ad:57:48:af:79:f2:69:ab:3d:af:69:e8:a5:96:9f:
21:d8:ed:7d:1a:20:7a:fc:ba:05:47:e6:86:86:3f:38:2f:9a:
cf:c9:d3:fa:6e:38:b9:eb:95:be:bc:8e:b8:d4:b8:3f:e7:0c:
41:15:6b:61:2b:74:ff:2e:13:51:43:3b:60:c5:64:b5:d5:d5:
e6:67:53:e4:21:9d:37:00:3d:bc:5c:37:c6:34:22:9c:e3:f1:
91:e3:3a:c3:ab:08:b4:97:a8:b6:b4:d9:dd:5e:57:da:4b:72:
1a:73:d1:1b:11:77:9a:b3:f6:87:a3:9e:2c:7d:21:20:a1:e4:
fd:03:30:0d:e3:4c:65:a9:a8:7e:d1:03:0c:a6:ed:16:0c:d2:
4f:2f:36:32:12:ad:d8:9f:b6:af:5d:0e:8b:2e:57:6f:df:7b:
b1:e8:7f:d4:96:aa:5c:72:69:48:02:d1:f8:1a:c9:3b:cb:8c:
e0:eb:a1:9f:a8:7b:aa:2f:4e:d2:3c:1b:9d:ef:2d:8f:d5:be:
77:6b:ea:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:12:02 2025 by rpki-client