Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.mft
File: she1rEZ0EuJJxE4nOcKJ67BM0zc.mft (raw, json)
Hash identifier: E8q1K2CeztvZcEg024MBRFfBYieOsFpn4QxjOD9wHwQ=
Subject key identifier: 14:20:A1:0F:72:7C:DD:59:D5:68:FA:F1:89:08:47:26:D5:E3:AA:26
Authority key identifier: B2:17:B5:AC:46:74:12:E2:49:C4:4E:27:39:C2:89:EB:B0:4C:D3:37
Certificate issuer: /CN=b217b5ac467412e249c44e2739c289ebb04cd337
Certificate serial: 01964D46EA8297EC5F8AEB308F05DB330B9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/she1rEZ0EuJJxE4nOcKJ67BM0zc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.mft
Manifest number: 08A2
Signing time: Sat 19 Apr 2025 09:00:15 +0000
Manifest this update: Sat 19 Apr 2025 09:00:15 +0000
Manifest next update: Sun 20 Apr 2025 09:00:15 +0000
Files and hashes: 1: Ftnb9Ud8kWttM5-w7OSz4uHafco.roa (hash: 2d7vx7DexYl0/ojCB78Rdwk/rdaUo+im6ReM1HOn2aE=)
2: she1rEZ0EuJJxE4nOcKJ67BM0zc.crl (hash: 9yz399BazIqM2CfdvzU4HS2BgBSHtKSPweR7mffpiAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.mft
rsync://rpki.ripe.net/repository/DEFAULT/she1rEZ0EuJJxE4nOcKJ67BM0zc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:46:ea:82:97:ec:5f:8a:eb:30:8f:05:db:33:0b:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b217b5ac467412e249c44e2739c289ebb04cd337
Validity
Not Before: Apr 19 09:00:15 2025 GMT
Not After : Apr 20 09:00:15 2025 GMT
Subject: CN=1420a10f727cdd59d568faf189084726d5e3aa26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:99:c1:51:3a:7a:fe:7e:bb:24:6f:a8:7b:43:
6a:a1:0e:56:d9:81:5b:d1:9d:06:8a:7e:f8:fb:4f:
dd:0c:20:75:59:85:fe:77:d8:dc:97:c6:89:ed:81:
cd:ca:fd:75:15:eb:3a:eb:7e:c3:c6:6f:8a:16:60:
26:78:91:58:01:d0:9e:6e:2d:f1:10:a1:92:79:f5:
e4:3d:c1:87:8c:5e:78:9a:60:36:9e:19:8f:57:a7:
cc:8d:81:a3:c2:90:c3:ac:a0:c7:99:bf:f0:d5:e7:
31:04:95:8a:28:72:3c:1d:e8:5d:8e:da:b1:a3:99:
45:5a:5b:2e:61:46:58:82:51:27:a7:1c:a2:63:89:
77:a2:68:1b:0b:61:bf:0c:82:53:07:b8:d5:21:f6:
90:ec:11:85:55:8b:59:b4:da:b3:63:64:56:e1:1d:
25:46:d5:70:ca:49:65:2f:e5:b5:52:43:6f:bf:40:
de:9b:be:d5:93:74:5c:08:6f:41:5d:a5:72:80:88:
3e:6e:0b:44:55:16:e9:1a:b3:03:c5:b0:6d:a2:0a:
49:35:60:95:c4:f2:a7:d1:0e:ca:50:b4:38:03:40:
c3:13:dc:e2:d9:e3:1e:79:42:ba:89:31:d5:69:2e:
9f:e6:93:cd:f1:34:3e:56:6f:8e:59:21:bd:a9:d5:
f1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:20:A1:0F:72:7C:DD:59:D5:68:FA:F1:89:08:47:26:D5:E3:AA:26
X509v3 Authority Key Identifier:
keyid:B2:17:B5:AC:46:74:12:E2:49:C4:4E:27:39:C2:89:EB:B0:4C:D3:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/she1rEZ0EuJJxE4nOcKJ67BM0zc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:e9:08:0e:0d:60:76:4f:ff:cd:5a:37:04:6c:4f:42:69:a5:
71:fd:42:1a:f1:02:be:2c:3e:6f:af:ab:5b:9e:d1:c5:0b:0f:
5b:dc:c2:a7:6b:79:35:f6:3d:c5:13:b1:11:ab:2d:6c:a0:ea:
87:2b:55:fc:89:e6:c7:84:00:f9:bd:95:23:f4:5b:da:98:be:
b2:68:74:67:c2:08:9b:b2:dc:b1:f5:4e:70:51:1a:97:83:ee:
38:74:84:f4:aa:4d:c1:62:5b:a2:9f:e5:ad:fd:a8:bb:d0:5e:
00:3b:7f:7e:58:37:af:0d:73:bb:7a:c7:c7:93:7b:ec:ee:c6:
7b:2d:ce:d2:47:a5:cc:36:e7:50:cf:6b:1c:40:69:bf:48:38:
84:0d:b7:16:7c:10:a4:ac:5a:e2:f4:85:80:8a:c3:24:33:27:
5e:86:fd:7d:a9:1f:53:ed:fa:f0:26:76:fc:4a:a7:30:0e:a7:
bb:7e:da:26:45:ce:8e:7f:38:f8:4d:d8:aa:0f:1d:24:71:1e:
4c:8c:18:9c:b6:31:42:bd:6e:cc:e8:96:a3:12:40:cd:8f:0b:
3a:33:10:e0:8c:e1:3f:73:c6:22:7f:1b:20:ba:4e:b7:56:2b:
9b:e5:6f:9a:42:aa:40:15:f6:0f:8e:1e:c1:5f:4c:82:4b:31:
db:f6:4b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:43:56 2025 by rpki-client