Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
File: SHaJAk8W57wukJcGwG2RkDxcfaw.mft (raw, json)
Hash identifier: ED86pOY0Lu5+NzLPsSNcTg/fct2BpobmgBQG6pHAXVQ=
Subject key identifier: DC:49:36:59:C3:D7:6F:19:7F:71:6E:A8:CD:EE:C5:F5:6D:DC:27:29
Authority key identifier: 48:76:89:02:4F:16:E7:BC:2E:90:97:06:C0:6D:91:90:3C:5C:7D:AC
Certificate issuer: /CN=487689024f16e7bc2e909706c06d91903c5c7dac
Certificate serial: 0197469DEA503BBFB63828364A993135CDFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SHaJAk8W57wukJcGwG2RkDxcfaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
Manifest number: 1398
Signing time: Fri 06 Jun 2025 19:00:43 +0000
Manifest this update: Fri 06 Jun 2025 19:00:43 +0000
Manifest next update: Sat 07 Jun 2025 19:00:43 +0000
Files and hashes: 1: SHaJAk8W57wukJcGwG2RkDxcfaw.crl (hash: AAVNj/lIaxVMFFap5oqTiseLQvAX/u44ov0JjfD4oCc=)
2: SVWxJ2D9LYiMT8ED3t8Rtdt3qF0.roa (hash: CkroRGpwN+yaYir/P5uXG8yRXWWta2US1fRZkwQ1RIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/SHaJAk8W57wukJcGwG2RkDxcfaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 19:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9d:ea:50:3b:bf:b6:38:28:36:4a:99:31:35:cd:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=487689024f16e7bc2e909706c06d91903c5c7dac
Validity
Not Before: Jun 6 19:00:43 2025 GMT
Not After : Jun 7 19:00:43 2025 GMT
Subject: CN=dc493659c3d76f197f716ea8cdeec5f56ddc2729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ec:0c:ff:ad:bd:f7:e0:87:bb:3e:a6:0a:de:
66:3b:a5:b8:e2:a0:76:de:31:ee:a2:ed:37:c0:5d:
aa:f8:f6:db:9d:c4:ba:21:3d:b2:2b:b7:42:5f:f4:
8b:5d:a4:a3:3d:62:fa:5c:f8:c0:0d:32:18:f1:7b:
bc:ac:06:ae:45:56:57:3c:24:b7:8c:5f:28:0d:f4:
d7:88:b8:bd:d9:1c:96:5a:ad:32:2a:1b:eb:b5:0b:
39:02:0b:a2:d0:9a:11:1c:39:f2:8b:f7:c6:49:37:
3b:39:8a:ae:18:2a:f5:69:24:2e:aa:b0:6a:5e:25:
76:1e:97:f4:f6:ea:80:af:a2:e3:30:da:91:67:fb:
b7:f7:ac:86:08:59:4f:4c:44:ac:77:90:b5:7a:af:
46:89:8a:26:0c:7f:33:4e:37:c4:0e:20:f7:66:71:
f6:83:f7:bd:93:41:0f:ba:b5:8b:4a:91:0b:d7:30:
41:90:3a:43:25:2e:24:e6:7a:2d:37:ae:3d:7b:82:
54:39:f3:e7:68:1c:a2:ca:70:19:27:d0:17:88:51:
3d:48:fa:54:52:30:cb:8c:5c:a3:da:41:1c:c6:7c:
96:ff:07:43:09:19:0f:b1:2a:bb:11:e2:11:b9:c0:
f5:62:16:83:6b:93:4f:17:f3:c6:51:19:ce:15:a1:
cc:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:49:36:59:C3:D7:6F:19:7F:71:6E:A8:CD:EE:C5:F5:6D:DC:27:29
X509v3 Authority Key Identifier:
keyid:48:76:89:02:4F:16:E7:BC:2E:90:97:06:C0:6D:91:90:3C:5C:7D:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SHaJAk8W57wukJcGwG2RkDxcfaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:c4:c8:a3:ba:aa:bf:52:11:74:e3:d4:61:c5:e6:cc:f4:94:
5e:38:34:89:44:da:ba:97:28:ae:64:98:ca:7b:06:75:cf:42:
5b:ea:21:d6:c0:ac:dc:17:c7:b3:a9:2b:44:ca:7c:00:4a:fa:
ec:87:0d:26:c4:8f:f6:92:fa:80:fa:0f:30:1d:87:f4:c3:30:
86:4e:59:00:86:83:a0:58:c1:8f:de:51:d1:70:62:5a:0f:f6:
9e:73:e5:10:53:89:3e:95:17:18:81:ee:93:f4:67:56:b2:06:
35:65:11:a7:29:91:c0:59:a8:10:4e:1e:8b:46:49:67:1e:f5:
42:af:9d:72:4d:5b:79:3a:9a:ad:10:06:74:9d:ab:83:6b:9a:
5f:96:31:bc:ea:c4:46:a9:4b:6c:5d:8b:81:85:15:75:12:93:
1f:f0:b1:0a:17:ee:65:86:9b:50:4c:59:d6:69:21:6a:a2:e8:
6a:ef:0e:65:a1:7f:67:09:83:27:81:8b:ac:53:35:77:cb:c5:
b0:c5:83:75:d9:b6:b8:a5:ae:22:46:85:7b:d4:22:e1:3c:56:
ca:28:a5:60:3e:da:b8:6d:d3:46:54:79:f3:e6:33:1b:25:c7:
3d:ee:41:df:bc:5f:f4:37:9f:72:de:d5:f1:f7:35:cd:d0:a6:
61:99:79:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdGnepQO7+2OCg2SpkxNc38MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4NzY4OTAyNGYxNmU3YmMyZTkwOTcwNmMwNmQ5MTkwM2M1
YzdkYWMwHhcNMjUwNjA2MTkwMDQzWhcNMjUwNjA3MTkwMDQzWjAzMTEwLwYDVQQD
EyhkYzQ5MzY1OWMzZDc2ZjE5N2Y3MTZlYThjZGVlYzVmNTZkZGMyNzI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuwM/6299+CHuz6mCt5mO6W44qB2
3jHuou03wF2q+PbbncS6IT2yK7dCX/SLXaSjPWL6XPjADTIY8Xu8rAauRVZXPCS3
jF8oDfTXiLi92RyWWq0yKhvrtQs5Agui0JoRHDnyi/fGSTc7OYquGCr1aSQuqrBq
XiV2Hpf09uqAr6LjMNqRZ/u396yGCFlPTESsd5C1eq9GiYomDH8zTjfEDiD3ZnH2
g/e9k0EPurWLSpEL1zBBkDpDJS4k5notN649e4JUOfPnaByiynAZJ9AXiFE9SPpU
UjDLjFyj2kEcxnyW/wdDCRkPsSq7EeIRucD1YhaDa5NPF/PGURnOFaHMjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNxJNlnD128Zf3FuqM3uxfVt3CcpMB8GA1UdIwQY
MBaAFEh2iQJPFue8LpCXBsBtkZA8XH2sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0hhSkFrOFc1N3d1a0pjR3dHMlJrRHhjZmF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9jN2FmYjEtZjAwZi00OWQ3LTlmMTEt
NmU2MzYxYmVhOTg5LzEvU0hhSkFrOFc1N3d1a0pjR3dHMlJrRHhjZmF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9jN2FmYjEtZjAwZi00OWQ3LTlmMTEtNmU2MzYxYmVhOTg5
LzEvU0hhSkFrOFc1N3d1a0pjR3dHMlJrRHhjZmF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWcTIo7qq
v1IRdOPUYcXmzPSUXjg0iUTaupcormSYynsGdc9CW+oh1sCs3BfHs6krRMp8AEr6
7IcNJsSP9pL6gPoPMB2H9MMwhk5ZAIaDoFjBj95R0XBiWg/2nnPlEFOJPpUXGIHu
k/RnVrIGNWURpymRwFmoEE4ei0ZJZx71Qq+dck1beTqarRAGdJ2rg2uaX5YxvOrE
RqlLbF2LgYUVdRKTH/CxChfuZYabUExZ1mkhaqLoau8OZaF/ZwmDJ4GLrFM1d8vF
sMWDddm2uKWuIkaFe9Qi4TxWyiilYD7auG3TRlR58+YzGyXHPe5B37xf9Defct7V
8fc1zdCmYZl5hw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 02:49:23 2025 by rpki-client