Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/52a1e5-86f1-49f7-a773-cb3e29b6ad32/1/sh47KsUJcPsSbL3xnX-zFdzBxF0.mft
File: sh47KsUJcPsSbL3xnX-zFdzBxF0.mft (raw, json)
Hash identifier: 4STi41KJ5jCos70+Ik+FpSKdEaex8gFQEEMUjpHTlPk=
Subject key identifier: AC:48:88:4D:3A:E1:9D:E8:45:E3:7C:E7:24:42:F6:88:5F:FD:D8:12
Authority key identifier: B2:1E:3B:2A:C5:09:70:FB:12:6C:BD:F1:9D:7F:B3:15:DC:C1:C4:5D
Certificate issuer: /CN=b21e3b2ac50970fb126cbdf19d7fb315dcc1c45d
Certificate serial: 019892C950FDBBDC3C2AFAE4BCE21EE6D2A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sh47KsUJcPsSbL3xnX-zFdzBxF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/52a1e5-86f1-49f7-a773-cb3e29b6ad32/1/sh47KsUJcPsSbL3xnX-zFdzBxF0.mft
Manifest number: B4
Signing time: Sun 10 Aug 2025 07:02:03 +0000
Manifest this update: Sun 10 Aug 2025 07:02:03 +0000
Manifest next update: Mon 11 Aug 2025 07:02:03 +0000
Files and hashes: 1: 5wrNYPlSCkVTpZCOkOfJiVfHH1s.roa (hash: vV52rVETrxDxRFyAGhG26EED/lJXHQxzwHDXgoc8s8o=)
2: sh47KsUJcPsSbL3xnX-zFdzBxF0.crl (hash: Ikr52i2Nb6vD3bve82Na5uL0JpCLL9pcDQ+N6hlxNbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/52a1e5-86f1-49f7-a773-cb3e29b6ad32/1/sh47KsUJcPsSbL3xnX-zFdzBxF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/52a1e5-86f1-49f7-a773-cb3e29b6ad32/1/sh47KsUJcPsSbL3xnX-zFdzBxF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sh47KsUJcPsSbL3xnX-zFdzBxF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 07:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:c9:50:fd:bb:dc:3c:2a:fa:e4:bc:e2:1e:e6:d2:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b21e3b2ac50970fb126cbdf19d7fb315dcc1c45d
Validity
Not Before: Aug 10 07:02:03 2025 GMT
Not After : Aug 11 07:02:03 2025 GMT
Subject: CN=ac48884d3ae19de845e37ce72442f6885ffdd812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c4:a9:b2:65:1d:99:8e:69:f3:c5:8f:bd:ac:
a4:2a:5a:99:9b:50:47:5b:8f:31:ab:41:a1:cb:b4:
1b:0c:6f:8a:30:69:04:69:c0:79:4c:ef:76:e2:29:
47:2c:f7:7e:d1:7d:8d:15:3b:5a:f1:9c:75:6e:95:
8f:fb:d4:42:31:c5:a3:7d:d7:5e:5d:f4:0d:c7:f1:
bc:11:ab:82:7c:b8:a7:1b:f1:c4:85:58:fb:a3:cf:
d0:9a:93:ef:ca:6b:e6:74:e0:cd:19:b0:15:7a:fb:
62:5f:e9:99:b0:80:74:7d:19:e6:9b:c1:2e:ab:d5:
95:95:e9:1f:91:f4:f8:83:cf:63:d0:de:5a:78:1f:
f2:6f:64:4f:4a:57:49:10:40:9c:3a:11:c0:5c:0d:
45:3e:01:19:e7:cc:4e:64:de:32:22:dc:d5:ce:95:
1a:b9:63:3e:2d:83:ee:be:d0:00:ae:0b:d6:f9:91:
26:d2:b4:ff:04:b3:36:11:f8:25:7a:f3:17:96:2d:
13:bd:4f:04:3c:20:5c:bc:11:20:5a:d0:70:62:d7:
51:3b:23:58:56:80:eb:39:8a:49:e9:4b:63:ec:3d:
8d:37:29:b7:9c:54:56:6a:eb:51:f1:2d:c0:4b:74:
5f:b8:43:78:4c:cf:64:41:73:77:c3:8f:d0:8b:36:
c6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:48:88:4D:3A:E1:9D:E8:45:E3:7C:E7:24:42:F6:88:5F:FD:D8:12
X509v3 Authority Key Identifier:
keyid:B2:1E:3B:2A:C5:09:70:FB:12:6C:BD:F1:9D:7F:B3:15:DC:C1:C4:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sh47KsUJcPsSbL3xnX-zFdzBxF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/52a1e5-86f1-49f7-a773-cb3e29b6ad32/1/sh47KsUJcPsSbL3xnX-zFdzBxF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/52a1e5-86f1-49f7-a773-cb3e29b6ad32/1/sh47KsUJcPsSbL3xnX-zFdzBxF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:f2:5e:84:24:04:68:0b:c9:8d:fe:e5:f0:98:5d:2c:3c:11:
a7:c8:d9:81:86:c6:47:53:88:7a:21:ed:17:c9:a5:d8:7b:99:
30:76:3b:30:36:52:d6:53:5c:9e:cd:3e:9c:fb:f0:40:51:03:
49:84:8d:23:19:6c:a0:0f:7c:70:2c:ef:a6:11:e9:53:71:31:
7c:1c:a2:09:05:be:bd:13:47:ce:c9:be:3d:ee:a0:d7:32:92:
b7:fb:4a:96:74:c7:c2:ac:87:51:98:c4:2c:98:da:45:6a:df:
29:da:0c:7f:e7:9a:2d:db:9e:4e:a5:18:a9:ef:e8:24:a9:c7:
52:81:7f:2e:da:40:ea:fa:fe:65:7c:a7:23:f6:d9:73:8c:9f:
bb:74:62:89:f3:d2:98:cd:ec:88:65:27:a2:51:a0:2b:45:e8:
a8:ec:70:d3:6f:82:e9:c3:27:52:9c:39:64:25:53:ef:19:ec:
71:1a:73:93:d2:fb:84:d2:07:c2:f6:ea:2c:30:5b:d6:dc:7b:
ea:3f:77:3e:7e:d1:a8:f8:0c:61:39:8b:2f:c2:e8:a0:d6:73:
1c:e6:61:ef:32:4a:16:81:48:e0:5d:ee:18:1b:07:bb:ed:52:
a5:91:ee:ce:4d:3e:2e:4c:04:ab:93:92:fb:1f:b8:9b:3c:37:
6c:1b:f2:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:41:35 2025 by rpki-client