Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.mft
File: she1rEZ0EuJJxE4nOcKJ67BM0zc.mft (raw, json)
Hash identifier: Eurb4HxlbzCTy9VYatSm6uefM0cYqPOgFo6c7f1hnd0=
Subject key identifier: 53:D3:97:FF:82:26:1B:6D:04:3A:D8:56:F6:CB:EB:A6:11:89:1F:ED
Authority key identifier: B2:17:B5:AC:46:74:12:E2:49:C4:4E:27:39:C2:89:EB:B0:4C:D3:37
Certificate issuer: /CN=b217b5ac467412e249c44e2739c289ebb04cd337
Certificate serial: 019A71B8866CA4F689764D63C14811B7587E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/she1rEZ0EuJJxE4nOcKJ67BM0zc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.mft
Manifest number: 0AC7
Signing time: Tue 11 Nov 2025 07:01:49 +0000
Manifest this update: Tue 11 Nov 2025 07:01:49 +0000
Manifest next update: Wed 12 Nov 2025 07:01:49 +0000
Files and hashes: 1: Ftnb9Ud8kWttM5-w7OSz4uHafco.roa (hash: 2d7vx7DexYl0/ojCB78Rdwk/rdaUo+im6ReM1HOn2aE=)
2: she1rEZ0EuJJxE4nOcKJ67BM0zc.crl (hash: Uoo4rRRS4YdNfrMf57ubIvdgIV1zaWMi9B/qxVbYQAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.mft
rsync://rpki.ripe.net/repository/DEFAULT/she1rEZ0EuJJxE4nOcKJ67BM0zc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:86:6c:a4:f6:89:76:4d:63:c1:48:11:b7:58:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b217b5ac467412e249c44e2739c289ebb04cd337
Validity
Not Before: Nov 11 07:01:49 2025 GMT
Not After : Nov 12 07:01:49 2025 GMT
Subject: CN=53d397ff82261b6d043ad856f6cbeba611891fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d8:75:5c:7a:1f:15:ec:e2:03:2d:b2:3f:52:
6b:2c:01:54:fc:85:e5:ee:d7:03:90:d7:c0:d1:31:
27:6c:e9:e6:dc:a3:3e:26:19:58:a7:ee:7b:61:35:
9f:ea:35:c3:34:b5:f8:f2:9a:b7:93:7e:cf:6d:c8:
8e:db:b0:c8:ce:da:08:dd:df:38:37:c8:7c:78:77:
06:9c:8a:a0:ad:6e:31:4a:f5:31:36:b4:3b:41:44:
22:2f:ce:ac:05:87:5d:a2:48:f0:42:61:a5:04:a8:
ca:a3:7c:19:7a:7e:b6:1c:c9:34:c0:ff:72:3b:70:
cb:69:55:f9:43:0d:db:fc:a9:ed:ac:3b:30:6a:ca:
d9:bb:f3:2b:55:6f:52:b7:a7:5c:87:53:91:5a:df:
d8:37:25:37:35:c2:d8:f0:61:d2:9f:fa:7f:9b:51:
e9:a1:bb:41:7f:28:35:95:58:1d:8f:22:78:c5:48:
ba:c3:bd:02:59:c6:fe:8a:94:6a:c3:e2:ab:de:b5:
db:96:35:d6:43:42:c0:1f:36:68:33:07:5f:7f:11:
3a:66:91:89:d1:2f:77:57:66:27:82:84:6e:e8:a3:
ac:0b:68:d1:c1:20:ea:a2:d9:88:63:45:9a:92:df:
a8:21:fa:bb:ee:18:dc:ef:28:2c:84:b7:4a:3f:4f:
12:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:D3:97:FF:82:26:1B:6D:04:3A:D8:56:F6:CB:EB:A6:11:89:1F:ED
X509v3 Authority Key Identifier:
keyid:B2:17:B5:AC:46:74:12:E2:49:C4:4E:27:39:C2:89:EB:B0:4C:D3:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/she1rEZ0EuJJxE4nOcKJ67BM0zc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:d7:70:02:3a:90:74:9a:b4:57:b9:65:e2:5c:f6:43:1a:10:
84:98:c7:14:95:85:20:e6:b7:47:7a:dc:d2:40:f7:d2:5d:be:
ed:ff:e4:df:f6:3a:cf:d6:f0:6f:d5:5f:e6:a4:b2:4c:34:09:
64:58:45:5b:b4:97:79:9e:13:ec:60:84:c7:5b:20:7b:06:db:
4c:15:67:e7:51:df:33:66:32:a3:5e:cc:d1:9e:eb:72:8e:e3:
5c:a4:f8:b9:47:7b:dc:58:05:d8:ef:b8:ae:4f:74:38:5d:36:
8f:0a:d3:b3:61:39:7c:41:94:8f:dd:7b:e2:36:c5:98:bf:b4:
75:77:ca:af:ca:4c:74:33:73:7f:80:c3:20:37:66:53:c9:32:
ae:3d:be:8f:ea:cf:66:1c:94:a0:10:19:5b:12:2a:72:dd:61:
18:89:af:af:6e:cc:9c:a4:d9:e3:bf:49:18:86:c2:14:1a:02:
22:b6:18:0a:3d:9d:e0:ef:80:dc:85:bd:c2:76:0c:b8:31:9e:
7c:43:a3:73:c4:c7:6e:de:7a:4a:69:9a:56:40:da:43:35:99:
ab:90:fa:62:2d:bf:10:55:39:54:30:c0:bc:6b:20:83:41:4a:
92:f8:be:6c:a4:c4:b1:76:98:f4:e6:0a:40:cd:a7:ff:3f:eb:
ff:fe:3b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:12:52 2025 by rpki-client