Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/52a1e5-86f1-49f7-a773-cb3e29b6ad32/1/sh47KsUJcPsSbL3xnX-zFdzBxF0.mft
File: sh47KsUJcPsSbL3xnX-zFdzBxF0.mft (raw, json)
Hash identifier: 1xJ96fTzmxi84ufdvexQXl31UHAbiSwGqR8Z7MqW9G0=
Subject key identifier: 2A:26:2B:B4:5E:04:72:47:55:C5:19:E7:95:0A:A8:6A:6B:73:FB:B6
Authority key identifier: B2:1E:3B:2A:C5:09:70:FB:12:6C:BD:F1:9D:7F:B3:15:DC:C1:C4:5D
Certificate issuer: /CN=b21e3b2ac50970fb126cbdf19d7fb315dcc1c45d
Certificate serial: 01976D06BF0B2764D1F978FFAF88F71FC827
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sh47KsUJcPsSbL3xnX-zFdzBxF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/52a1e5-86f1-49f7-a773-cb3e29b6ad32/1/sh47KsUJcPsSbL3xnX-zFdzBxF0.mft
Manifest number: 1C
Signing time: Sat 14 Jun 2025 06:00:48 +0000
Manifest this update: Sat 14 Jun 2025 06:00:48 +0000
Manifest next update: Sun 15 Jun 2025 06:00:48 +0000
Files and hashes: 1: 5wrNYPlSCkVTpZCOkOfJiVfHH1s.roa (hash: vV52rVETrxDxRFyAGhG26EED/lJXHQxzwHDXgoc8s8o=)
2: sh47KsUJcPsSbL3xnX-zFdzBxF0.crl (hash: 8m+z0V1QQDXcR5UwjQD1wLQaxb1Xw9C5s3T7BRlaDaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/52a1e5-86f1-49f7-a773-cb3e29b6ad32/1/sh47KsUJcPsSbL3xnX-zFdzBxF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/52a1e5-86f1-49f7-a773-cb3e29b6ad32/1/sh47KsUJcPsSbL3xnX-zFdzBxF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sh47KsUJcPsSbL3xnX-zFdzBxF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:bf:0b:27:64:d1:f9:78:ff:af:88:f7:1f:c8:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b21e3b2ac50970fb126cbdf19d7fb315dcc1c45d
Validity
Not Before: Jun 14 06:00:48 2025 GMT
Not After : Jun 15 06:00:48 2025 GMT
Subject: CN=2a262bb45e04724755c519e7950aa86a6b73fbb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:89:f3:a8:3a:5d:2b:7c:e2:f7:fb:95:b2:29:
6c:ad:48:5d:05:07:ba:7c:e8:69:83:e3:c2:0f:74:
8d:f7:ac:5b:0c:19:9f:cb:82:88:6d:b9:14:7a:d5:
96:01:56:f0:3a:d4:26:44:79:87:f0:22:cf:28:48:
a0:6d:5a:cf:9e:76:ef:bb:8d:e1:79:44:71:81:36:
57:a9:25:18:a2:bd:42:23:1d:03:bf:c6:b0:e7:09:
a0:c1:2c:f3:d2:a2:6f:bd:d8:d9:dd:04:5b:64:2d:
dd:d2:9e:25:cd:b4:50:ee:39:0c:11:5f:4d:c2:75:
e9:ba:fe:f1:39:28:6e:0d:80:d6:17:be:4c:2a:8a:
65:39:12:d5:ac:bf:1c:d5:06:10:cf:29:7c:26:46:
29:90:0d:43:c3:69:ec:34:43:04:f3:bc:7c:c3:dd:
9e:a6:6a:28:4e:61:75:15:e5:72:0c:ff:e6:64:df:
1d:16:47:e0:9c:ca:2b:87:2b:34:46:bc:6d:61:87:
f2:47:9c:71:a5:ab:7e:fc:11:64:99:fe:83:6d:51:
18:7f:7d:92:5b:11:13:95:dc:63:70:1a:cf:48:03:
d6:bf:25:e8:bd:fc:16:2b:95:d7:92:1a:7b:e9:cd:
45:cf:61:c5:c2:59:2f:e9:81:27:f0:66:f3:91:e3:
f4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:26:2B:B4:5E:04:72:47:55:C5:19:E7:95:0A:A8:6A:6B:73:FB:B6
X509v3 Authority Key Identifier:
keyid:B2:1E:3B:2A:C5:09:70:FB:12:6C:BD:F1:9D:7F:B3:15:DC:C1:C4:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sh47KsUJcPsSbL3xnX-zFdzBxF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/52a1e5-86f1-49f7-a773-cb3e29b6ad32/1/sh47KsUJcPsSbL3xnX-zFdzBxF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/52a1e5-86f1-49f7-a773-cb3e29b6ad32/1/sh47KsUJcPsSbL3xnX-zFdzBxF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:6e:29:98:ce:38:de:38:86:b2:8d:09:c0:0f:53:65:89:45:
aa:55:40:af:9f:81:07:51:35:1f:3e:b2:63:e5:54:e7:d8:e5:
46:fc:52:a2:12:96:99:2d:65:91:11:2e:32:5a:c1:07:51:8a:
43:78:f3:9c:8f:2d:b4:52:8d:27:ef:e3:07:56:ef:e4:50:0d:
c9:fd:a9:73:fd:63:70:08:b5:57:c2:b1:b5:01:3a:6c:eb:8b:
04:fd:64:9a:7d:67:18:31:96:81:48:ea:5b:38:b7:3a:b7:44:
29:e3:ca:6f:74:35:2a:ee:84:e4:4d:2f:aa:ea:61:4a:55:d7:
f3:88:93:df:a6:b7:d9:ce:7b:5d:88:62:90:44:b3:dd:f7:ad:
d4:8f:f9:c8:f5:02:9a:de:37:de:31:05:19:1e:0e:db:de:76:
fe:a6:50:d8:fd:7e:ed:7f:9a:ef:fc:8f:24:7d:96:04:c3:77:
5d:e6:28:23:ef:24:59:85:f9:99:2b:51:42:2d:7f:03:39:06:
bf:1d:5c:2a:59:61:f4:73:7e:cc:a3:62:05:85:00:f4:92:d3:
b3:fd:3d:e1:03:4c:14:d3:d9:74:bc:c0:a9:8d:8d:4a:ff:ca:
9f:e3:58:6e:64:46:50:3d:d9:68:ec:08:f6:89:3c:f7:8c:e3:
9c:dc:70:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtBr8LJ2TR+Xj/r4j3H8gnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyMWUzYjJhYzUwOTcwZmIxMjZjYmRmMTlkN2ZiMzE1ZGNj
MWM0NWQwHhcNMjUwNjE0MDYwMDQ4WhcNMjUwNjE1MDYwMDQ4WjAzMTEwLwYDVQQD
EygyYTI2MmJiNDVlMDQ3MjQ3NTVjNTE5ZTc5NTBhYTg2YTZiNzNmYmI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvInzqDpdK3zi9/uVsilsrUhdBQe6
fOhpg+PCD3SN96xbDBmfy4KIbbkUetWWAVbwOtQmRHmH8CLPKEigbVrPnnbvu43h
eURxgTZXqSUYor1CIx0Dv8aw5wmgwSzz0qJvvdjZ3QRbZC3d0p4lzbRQ7jkMEV9N
wnXpuv7xOShuDYDWF75MKoplORLVrL8c1QYQzyl8JkYpkA1Dw2nsNEME87x8w92e
pmooTmF1FeVyDP/mZN8dFkfgnMorhys0RrxtYYfyR5xxpat+/BFkmf6DbVEYf32S
WxETldxjcBrPSAPWvyXovfwWK5XXkhp76c1Fz2HFwlkv6YEn8GbzkeP0wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFComK7ReBHJHVcUZ55UKqGprc/u2MB8GA1UdIwQY
MBaAFLIeOyrFCXD7Emy98Z1/sxXcwcRdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2g0N0tzVUpjUHNTYkwzeG5YLXpGZHpCeEYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy81MmExZTUtODZmMS00OWY3LWE3NzMt
Y2IzZTI5YjZhZDMyLzEvc2g0N0tzVUpjUHNTYkwzeG5YLXpGZHpCeEYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy81MmExZTUtODZmMS00OWY3LWE3NzMtY2IzZTI5YjZhZDMy
LzEvc2g0N0tzVUpjUHNTYkwzeG5YLXpGZHpCeEYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHm4pmM44
3jiGso0JwA9TZYlFqlVAr5+BB1E1Hz6yY+VU59jlRvxSohKWmS1lkREuMlrBB1GK
Q3jznI8ttFKNJ+/jB1bv5FANyf2pc/1jcAi1V8KxtQE6bOuLBP1kmn1nGDGWgUjq
Wzi3OrdEKePKb3Q1Ku6E5E0vquphSlXX84iT36a32c57XYhikESz3fet1I/5yPUC
mt433jEFGR4O2952/qZQ2P1+7X+a7/yPJH2WBMN3XeYoI+8kWYX5mStRQi1/AzkG
vx1cKllh9HN+zKNiBYUA9JLTs/094QNMFNPZdLzAqY2NSv/Kn+NYbmRGUD3ZaOwI
9ok894zjnNxwnw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:58:06 2025 by rpki-client