Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft
File: SHJHQsP1ThebguavjjPg2dL71NU.mft (raw, json)
Hash identifier: ifJy3buMGur0C7hvHJXm6/hIAnK1rMQRSDaBppLFU98=
Subject key identifier: CB:23:11:3B:88:DB:FF:E0:FA:7E:08:22:6A:43:78:90:A5:63:09:34
Authority key identifier: 48:72:47:42:C3:F5:4E:17:9B:82:E6:AF:8E:33:E0:D9:D2:FB:D4:D5
Certificate issuer: /CN=48724742c3f54e179b82e6af8e33e0d9d2fbd4d5
Certificate serial: 01984AAF044F208369D9AA40FF65F6A671F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 07:00:40 +0000
Manifest this update: Sun 27 Jul 2025 07:00:40 +0000
Manifest next update: Mon 28 Jul 2025 07:00:40 +0000
Files and hashes: 1: SHJHQsP1ThebguavjjPg2dL71NU.crl (hash: pg9/k9/NA/nuVX8xH5/soPY5LO1uFa04jQsw4tppkKQ=)
2: fw6EErcKUkE6wVnp4BcQXOeheJE.roa (hash: X3Re7oVemXlG1F0GxrgY8aRLn+cfxjtelXf5RJOURd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:af:04:4f:20:83:69:d9:aa:40:ff:65:f6:a6:71:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48724742c3f54e179b82e6af8e33e0d9d2fbd4d5
Validity
Not Before: Jul 27 07:00:40 2025 GMT
Not After : Jul 28 07:00:40 2025 GMT
Subject: CN=cb23113b88dbffe0fa7e08226a437890a5630934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ff:57:81:17:e6:c5:dc:05:72:6e:8d:6a:95:
04:87:95:1c:20:ae:ce:ad:46:5f:72:c4:a5:37:5a:
1b:ef:92:89:33:5d:a6:21:6c:3e:bc:13:6a:e0:11:
c8:a7:7c:df:02:73:2d:41:5f:69:c0:f4:fb:91:bd:
3b:b7:79:5c:40:69:a8:1e:03:66:1f:4d:63:4d:9f:
a8:c5:82:c1:1e:d7:6f:00:11:3a:c4:61:86:36:ed:
a8:5c:f0:2e:10:91:6b:72:47:c7:cb:21:9a:a5:49:
ed:73:7d:9a:03:4c:6e:7d:14:5f:b5:85:ad:c1:c5:
d7:be:58:da:63:2a:66:89:b6:d3:a5:ba:67:09:c3:
ed:5d:f2:d1:00:98:d8:e0:f5:c0:82:fb:cf:aa:57:
51:2a:8e:af:bf:42:d4:e4:d8:da:f4:c2:e6:9b:e0:
26:f5:dc:26:4c:19:ed:a4:c3:e6:36:d5:47:50:e1:
3f:80:1f:09:b3:c4:bd:a1:69:8a:8c:bb:c7:c7:26:
09:66:a4:30:e5:f5:bf:12:5b:67:c5:f7:ed:9c:ed:
46:26:c9:4a:93:83:87:6e:e6:80:8e:46:ff:46:21:
5d:fc:06:3e:1d:b4:f2:2b:41:a0:d3:07:bc:cb:d2:
59:7c:5d:38:6d:ab:97:30:d3:fb:1b:78:46:0e:df:
f6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:23:11:3B:88:DB:FF:E0:FA:7E:08:22:6A:43:78:90:A5:63:09:34
X509v3 Authority Key Identifier:
keyid:48:72:47:42:C3:F5:4E:17:9B:82:E6:AF:8E:33:E0:D9:D2:FB:D4:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:76:e1:df:92:4b:39:c3:50:79:35:6d:12:e4:2d:b5:61:06:
9d:ed:0f:4c:32:d2:56:b5:46:15:9c:49:d1:3d:1c:81:fe:39:
23:35:fd:9a:54:ea:40:16:c3:d7:11:eb:5b:57:4c:ac:b2:f5:
3f:f7:f3:85:1a:e8:23:e1:2a:3f:41:0a:e1:ba:05:17:21:16:
19:81:7b:1d:f0:77:67:a2:47:4b:13:b7:9f:09:bc:25:4a:10:
aa:bd:f0:56:c5:bc:1c:02:29:67:68:6e:6e:18:f7:3e:2e:0a:
4c:28:ec:77:d6:43:da:d9:a1:55:75:19:9b:89:48:60:08:64:
e3:b7:15:47:4b:de:25:fc:81:96:0b:a9:42:8b:4a:71:d7:39:
e1:27:e4:e8:4a:fb:20:bd:67:53:18:3a:d0:24:71:ec:43:ba:
d5:34:c9:69:f2:17:a1:20:de:9f:79:d2:82:9a:ad:3d:df:f5:
c0:0d:ea:13:b0:eb:a0:9d:dc:e9:eb:db:33:e8:1e:ae:5d:54:
d3:1e:51:a8:ea:66:fb:c2:78:5c:72:96:77:eb:fc:fe:de:e0:
f6:c1:b4:d9:55:08:07:b2:89:ea:70:e3:b0:84:f1:ac:9b:be:
d0:9f:44:2b:5a:2e:0c:2b:0a:87:40:fe:bd:6d:8c:f9:7b:0e:
74:9b:89:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:52:36 2025 by rpki-client