
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.mft
File: she1rEZ0EuJJxE4nOcKJ67BM0zc.mft (raw, json)
Hash identifier: p1Br2358+YnYxc7FuSTxsdqlsSXT1RVie7RV9Mxp+LQ=
Subject key identifier: 01:13:94:40:11:65:0A:AC:73:4B:5B:07:9B:40:0E:0E:0A:F1:16:7B
Authority key identifier: B2:17:B5:AC:46:74:12:E2:49:C4:4E:27:39:C2:89:EB:B0:4C:D3:37
Certificate issuer: /CN=b217b5ac467412e249c44e2739c289ebb04cd337
Certificate serial: 01974E2058FEB9A3023D392F0555AD75CEA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/she1rEZ0EuJJxE4nOcKJ67BM0zc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.mft
Manifest number: 0927
Signing time: Sun 08 Jun 2025 06:00:31 +0000
Manifest this update: Sun 08 Jun 2025 06:00:31 +0000
Manifest next update: Mon 09 Jun 2025 06:00:31 +0000
Files and hashes: 1: Ftnb9Ud8kWttM5-w7OSz4uHafco.roa (hash: 2d7vx7DexYl0/ojCB78Rdwk/rdaUo+im6ReM1HOn2aE=)
2: she1rEZ0EuJJxE4nOcKJ67BM0zc.crl (hash: bF/7Y93+h4L38BaEiF5NV2RZPSW2G2Pt/MwVcGBqr/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.mft
rsync://rpki.ripe.net/repository/DEFAULT/she1rEZ0EuJJxE4nOcKJ67BM0zc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:20:58:fe:b9:a3:02:3d:39:2f:05:55:ad:75:ce:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b217b5ac467412e249c44e2739c289ebb04cd337
Validity
Not Before: Jun 8 06:00:31 2025 GMT
Not After : Jun 9 06:00:31 2025 GMT
Subject: CN=0113944011650aac734b5b079b400e0e0af1167b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:93:64:24:9e:ef:c0:06:d1:c4:13:b4:4e:9a:
ae:b2:2e:e5:a7:69:c6:bd:ff:52:d8:35:5f:11:bd:
67:5d:6e:36:d6:e1:74:e1:b2:65:c6:b5:ca:1a:3f:
b4:d2:9c:bd:e0:8d:f5:01:9d:22:a2:8e:52:a6:af:
26:8f:67:dc:55:e8:b3:64:3d:43:a0:02:30:02:f4:
e8:8d:05:d2:13:9f:47:64:80:50:3e:cc:4a:44:01:
26:4f:70:22:9c:90:19:69:3a:a2:8c:7b:c3:8d:60:
38:62:b7:f4:ad:7b:32:ce:2a:da:07:52:2b:5d:82:
3a:94:c7:58:50:ee:8a:3c:03:af:98:ca:56:fd:3e:
f8:81:91:8b:18:d6:87:54:e0:1c:96:cd:4f:28:be:
01:2f:36:e9:f2:51:59:95:de:b8:14:9e:56:47:8e:
e9:b9:df:a2:4f:39:a9:b7:ac:28:0f:90:44:12:cb:
ab:e7:ce:18:e1:24:a6:6b:45:b4:40:df:6f:cb:c1:
5e:dd:21:2d:35:cc:a1:bb:da:28:0b:8d:36:86:49:
b1:9f:31:37:3b:15:b6:60:58:66:69:7d:e4:8c:a5:
7d:46:0d:2d:29:be:39:22:88:87:f0:19:2a:61:6d:
f6:a1:dd:6d:5e:31:89:09:02:76:ab:f8:01:6b:1b:
ac:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:13:94:40:11:65:0A:AC:73:4B:5B:07:9B:40:0E:0E:0A:F1:16:7B
X509v3 Authority Key Identifier:
keyid:B2:17:B5:AC:46:74:12:E2:49:C4:4E:27:39:C2:89:EB:B0:4C:D3:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/she1rEZ0EuJJxE4nOcKJ67BM0zc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:52:fc:1a:b9:10:40:53:24:92:1d:27:e8:58:ef:16:f2:cd:
da:4c:3a:bd:18:cd:e1:b1:85:a1:20:8a:42:c3:f9:95:5e:6c:
2c:c7:83:b2:57:4b:70:c5:37:6a:95:af:1a:59:e8:a3:85:22:
0d:ee:c3:df:04:89:72:ba:66:a3:4e:56:a1:ec:c5:13:d9:00:
47:7e:c8:59:fa:24:3e:48:21:53:12:2e:36:2d:a0:9f:45:a9:
11:47:93:7f:7f:62:65:b5:d1:69:b2:a3:36:7d:e1:e5:ff:9b:
72:d9:5f:b0:2d:fe:ce:49:4c:a8:17:45:78:76:fd:e3:d9:43:
44:f3:80:18:f9:47:6e:25:98:27:7c:b8:20:03:8f:f9:79:ce:
fa:4b:83:d6:19:0f:ef:51:2a:4c:ba:30:14:3b:26:6a:08:d5:
01:a3:90:db:b3:ba:6c:08:a4:04:47:fd:74:74:4b:f1:04:b8:
f4:d1:d1:4a:ac:24:ef:43:0e:b1:ad:cc:d8:f3:6f:b3:ad:29:
81:a0:fc:c5:6d:ad:27:42:ee:66:36:b8:4f:31:a3:04:c6:39:
29:c3:13:b8:38:56:6d:c0:07:40:79:b7:59:d3:9b:28:44:72:
5d:ca:16:03:75:cb:f0:50:85:c7:dd:9d:d8:2b:4b:1f:fb:08:
6c:db:48:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:16:40 2025 by rpki-client