Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/52a1e5-86f1-49f7-a773-cb3e29b6ad32/1/sh47KsUJcPsSbL3xnX-zFdzBxF0.mft
File: sh47KsUJcPsSbL3xnX-zFdzBxF0.mft (raw, json)
Hash identifier: U3B9kHdiR/h4Xs8dLRup5EMT4f0i7PTPVmwPViAyCg8=
Subject key identifier: 33:37:99:77:CB:F7:DA:6E:EE:B4:CD:DA:98:D3:66:44:92:17:2B:F0
Authority key identifier: B2:1E:3B:2A:C5:09:70:FB:12:6C:BD:F1:9D:7F:B3:15:DC:C1:C4:5D
Certificate issuer: /CN=b21e3b2ac50970fb126cbdf19d7fb315dcc1c45d
Certificate serial: 01974C31F31467FC82BC5AA0B3B6AE03EA26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sh47KsUJcPsSbL3xnX-zFdzBxF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/52a1e5-86f1-49f7-a773-cb3e29b6ad32/1/sh47KsUJcPsSbL3xnX-zFdzBxF0.mft
Manifest number: 0B
Signing time: Sat 07 Jun 2025 21:00:31 +0000
Manifest this update: Sat 07 Jun 2025 21:00:31 +0000
Manifest next update: Sun 08 Jun 2025 21:00:31 +0000
Files and hashes: 1: 5wrNYPlSCkVTpZCOkOfJiVfHH1s.roa (hash: vV52rVETrxDxRFyAGhG26EED/lJXHQxzwHDXgoc8s8o=)
2: sh47KsUJcPsSbL3xnX-zFdzBxF0.crl (hash: 1KyIRKr7lnJ3L41z72ydJe8tzf+HvjMBXNOEuifsf3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/52a1e5-86f1-49f7-a773-cb3e29b6ad32/1/sh47KsUJcPsSbL3xnX-zFdzBxF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/52a1e5-86f1-49f7-a773-cb3e29b6ad32/1/sh47KsUJcPsSbL3xnX-zFdzBxF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sh47KsUJcPsSbL3xnX-zFdzBxF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:31:f3:14:67:fc:82:bc:5a:a0:b3:b6:ae:03:ea:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b21e3b2ac50970fb126cbdf19d7fb315dcc1c45d
Validity
Not Before: Jun 7 21:00:31 2025 GMT
Not After : Jun 8 21:00:31 2025 GMT
Subject: CN=33379977cbf7da6eeeb4cdda98d3664492172bf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:77:58:55:9d:36:c5:a0:a3:27:e0:75:f6:d9:
b9:3b:ad:4f:b7:aa:9d:00:c4:c5:ce:e7:2c:76:6c:
7e:c5:e2:37:8c:20:df:cc:3b:47:74:a9:53:d6:af:
7d:f6:a0:f2:b6:50:12:74:7f:e5:0c:e4:d2:28:e3:
cd:cb:26:aa:14:7f:d5:22:9a:06:28:b2:90:cc:71:
7c:b5:f0:12:bf:5d:6d:a7:bf:c2:c4:9f:3c:12:bb:
57:51:57:a6:ac:5f:65:b2:9c:06:1c:a1:9d:21:bf:
de:93:b4:75:86:54:39:31:ab:54:d1:15:2d:11:36:
63:1d:d9:71:4e:b1:d7:df:dc:6e:13:81:32:2e:72:
fa:7c:11:e9:b5:95:24:29:4b:8f:f5:32:06:82:b3:
d8:ee:9a:01:e5:82:00:c5:26:43:1e:e4:e1:a0:34:
28:60:6f:b3:d8:25:65:da:85:57:df:50:ef:df:6a:
52:2d:4f:4d:b1:9a:de:bd:75:4e:ee:0e:ca:97:9e:
62:9f:b7:cb:ee:2c:c8:cd:45:b4:a7:b6:e9:be:6b:
2d:bd:57:96:f2:bf:05:a7:43:44:1f:b6:04:e7:f3:
2b:ee:38:0c:18:bb:e7:c7:fd:89:25:00:d4:99:e3:
e2:2e:ed:67:d8:9e:25:b8:82:c6:5d:06:82:f1:b3:
cd:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:37:99:77:CB:F7:DA:6E:EE:B4:CD:DA:98:D3:66:44:92:17:2B:F0
X509v3 Authority Key Identifier:
keyid:B2:1E:3B:2A:C5:09:70:FB:12:6C:BD:F1:9D:7F:B3:15:DC:C1:C4:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sh47KsUJcPsSbL3xnX-zFdzBxF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/52a1e5-86f1-49f7-a773-cb3e29b6ad32/1/sh47KsUJcPsSbL3xnX-zFdzBxF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/52a1e5-86f1-49f7-a773-cb3e29b6ad32/1/sh47KsUJcPsSbL3xnX-zFdzBxF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:d2:5c:42:0d:73:20:1a:9d:85:d6:3b:2a:46:8d:68:e5:9b:
72:a6:72:3d:6a:cf:1a:1a:b5:37:f3:ce:af:1d:5d:73:e1:47:
3e:c7:a1:fb:ed:34:3b:92:b9:f1:81:e0:da:af:db:b0:8a:84:
9c:fe:05:59:9b:70:e3:be:28:60:bb:3a:26:23:c6:44:ab:bd:
a7:92:87:c6:81:8f:55:b8:ff:17:50:03:7a:b8:41:de:1a:ba:
bc:4e:a0:8f:49:a1:a5:0d:59:8f:2b:b2:02:59:3d:dd:90:09:
53:9e:8a:ed:8c:a4:c2:c3:9d:b1:3e:1f:c8:a1:55:1e:f7:e7:
40:18:47:47:4e:68:39:fd:96:7e:55:36:00:56:d9:50:f6:44:
79:af:5f:0e:6c:70:c9:b6:d3:5d:2d:23:8c:bb:f7:d0:8d:fe:
00:e3:16:3a:1a:36:31:6c:b4:ff:07:6d:eb:05:3a:8c:bf:6b:
5f:52:b7:aa:50:8b:89:8e:d8:fd:16:17:cf:76:d0:72:a6:3e:
79:8a:5e:11:f9:49:6c:87:fd:83:9c:fd:17:7d:67:ac:06:e0:
9a:87:35:d3:29:47:ad:2e:51:c0:48:3d:73:ba:aa:88:13:db:
61:da:50:c5:ae:49:7e:27:9c:1d:bf:c4:10:ef:54:8e:9a:d7:
bf:e9:e3:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:14:38 2025 by rpki-client