Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.mft
File: she1rEZ0EuJJxE4nOcKJ67BM0zc.mft (raw, json)
Hash identifier: hJWrDFtp3Vf21B5KVwzKKPXsi0VsCU+0ZPcvr9Lj3Rc=
Subject key identifier: CE:EE:09:CB:56:21:1F:96:C9:C5:3F:B3:A2:0C:7F:2B:59:CE:8C:88
Authority key identifier: B2:17:B5:AC:46:74:12:E2:49:C4:4E:27:39:C2:89:EB:B0:4C:D3:37
Certificate issuer: /CN=b217b5ac467412e249c44e2739c289ebb04cd337
Certificate serial: 0199239FC66B7AD8F347B8075BA71858342F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/she1rEZ0EuJJxE4nOcKJ67BM0zc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.mft
Manifest number: 0A1A
Signing time: Sun 07 Sep 2025 10:01:37 +0000
Manifest this update: Sun 07 Sep 2025 10:01:37 +0000
Manifest next update: Mon 08 Sep 2025 10:01:37 +0000
Files and hashes: 1: Ftnb9Ud8kWttM5-w7OSz4uHafco.roa (hash: 2d7vx7DexYl0/ojCB78Rdwk/rdaUo+im6ReM1HOn2aE=)
2: she1rEZ0EuJJxE4nOcKJ67BM0zc.crl (hash: mewNwtflD4xSmmaqrEkaUF1oOyJTCwysXcYN+8fiFQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.mft
rsync://rpki.ripe.net/repository/DEFAULT/she1rEZ0EuJJxE4nOcKJ67BM0zc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:c6:6b:7a:d8:f3:47:b8:07:5b:a7:18:58:34:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b217b5ac467412e249c44e2739c289ebb04cd337
Validity
Not Before: Sep 7 10:01:37 2025 GMT
Not After : Sep 8 10:01:37 2025 GMT
Subject: CN=ceee09cb56211f96c9c53fb3a20c7f2b59ce8c88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:68:b3:83:82:6f:ff:b7:f1:89:14:e5:6c:97:
c9:fc:d0:e2:68:5f:2e:58:eb:fe:e4:ab:03:03:dc:
e6:96:f0:ca:e3:3a:05:87:b4:c1:1e:90:dd:cc:2c:
f8:08:5d:1f:37:a4:2e:53:53:6c:3c:04:bc:6f:8c:
3e:0f:5b:4c:6f:63:b5:48:d8:4b:5a:0b:6f:ba:4e:
cb:91:75:ca:a4:e3:95:0f:75:08:6d:91:51:42:26:
f1:de:b3:98:25:ae:72:8c:1d:74:c2:cd:8a:75:fa:
68:58:9a:1d:b8:1c:09:52:14:6d:dd:fa:0b:48:57:
aa:0b:44:f2:24:de:78:36:da:4d:c4:12:ba:e3:d5:
e0:64:07:ba:23:41:3f:ef:8f:89:b4:0c:7e:dd:ff:
ca:da:18:42:9c:65:3e:0c:9a:8c:e8:61:e6:44:77:
3f:3f:5b:d4:46:9b:9f:ee:eb:c8:df:d5:46:a9:bd:
db:a6:e1:63:95:5a:ce:34:36:89:fe:70:5a:0b:6a:
90:b2:ee:55:0b:fb:06:bb:7d:cd:aa:cc:5e:73:4b:
50:4f:fe:2b:42:b9:5a:4d:f8:34:64:73:04:b2:eb:
38:12:b3:a0:09:bf:2d:37:03:f2:35:7b:32:78:04:
2b:73:6a:18:37:80:05:e7:ec:c8:77:8b:51:c4:d6:
e2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:EE:09:CB:56:21:1F:96:C9:C5:3F:B3:A2:0C:7F:2B:59:CE:8C:88
X509v3 Authority Key Identifier:
keyid:B2:17:B5:AC:46:74:12:E2:49:C4:4E:27:39:C2:89:EB:B0:4C:D3:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/she1rEZ0EuJJxE4nOcKJ67BM0zc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:9c:ac:f1:93:97:fc:68:58:9f:26:ea:99:64:9d:35:96:64:
e7:3c:a5:19:3c:34:8c:da:f0:86:36:69:c7:fa:23:88:32:7b:
74:0e:49:31:e3:d4:8b:b5:df:ac:80:8d:58:9e:f2:8d:ba:fc:
8f:75:53:a3:a0:8b:a4:54:08:3d:7d:77:86:20:a8:45:71:b3:
c4:46:5c:df:37:36:d5:89:0a:ca:bb:06:61:4b:cb:bc:fe:63:
20:cf:95:d8:14:7a:17:10:1c:f3:37:fa:23:d2:fb:1e:9d:13:
84:45:53:12:03:3e:f1:6b:46:91:9f:0c:d8:26:98:0e:37:fa:
6b:7e:9a:9e:d2:66:4f:3c:74:93:a8:74:18:dc:80:ad:c7:c1:
2e:c3:f8:c5:96:8e:09:37:1e:82:5b:8f:a2:a6:54:51:23:af:
83:02:d2:5a:cb:e1:95:97:84:d4:d1:bb:50:52:30:fb:a3:62:
23:58:8a:ae:4b:c8:50:1d:a6:ee:8a:41:8a:ac:72:f4:47:4b:
4f:f8:64:19:6a:1a:49:1a:dc:4f:59:cf:67:4b:2f:d8:a9:50:
eb:a0:39:e9:a8:44:69:ad:97:4f:f3:05:db:61:34:aa:6c:d2:
58:5a:6c:fd:38:0c:92:4e:d8:b3:0e:b3:df:3c:cd:f0:b9:3d:
c3:66:25:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:49:29 2025 by rpki-client