Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/77482d-4830-49f7-b6bd-7650d9732a52/1/shna0BUe3wUqLxyX34hKWoeotfU.mft
File: shna0BUe3wUqLxyX34hKWoeotfU.mft (raw, json)
Hash identifier: LuhQkkcW67k2TrsvOqbOKqtVUFvcOuY0kAbWs2FZqVk=
Subject key identifier: A8:5E:1F:34:DC:FE:6E:4A:51:47:34:E7:4A:0C:47:78:62:98:8D:2A
Authority key identifier: B2:19:DA:D0:15:1E:DF:05:2A:2F:1C:97:DF:88:4A:5A:87:A8:B5:F5
Certificate issuer: /CN=b219dad0151edf052a2f1c97df884a5a87a8b5f5
Certificate serial: 01978B110FF56E7B2B6CDC7E63619312AF7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/shna0BUe3wUqLxyX34hKWoeotfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/77482d-4830-49f7-b6bd-7650d9732a52/1/shna0BUe3wUqLxyX34hKWoeotfU.mft
Manifest number: 0742
Signing time: Fri 20 Jun 2025 02:00:40 +0000
Manifest this update: Fri 20 Jun 2025 02:00:40 +0000
Manifest next update: Sat 21 Jun 2025 02:00:40 +0000
Files and hashes: 1: shna0BUe3wUqLxyX34hKWoeotfU.crl (hash: NZP/9qwEA/QbTFcCwIKvdbUGKVm78gsKe18PxJuMUpQ=)
2: yqdi2I4mvyqmB4-2BzPkMkJ3hIY.roa (hash: oTSjwH5eKf8we68+dtERfn9uiSN2W5Nb5pDWgRrwsxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/77482d-4830-49f7-b6bd-7650d9732a52/1/shna0BUe3wUqLxyX34hKWoeotfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/77482d-4830-49f7-b6bd-7650d9732a52/1/shna0BUe3wUqLxyX34hKWoeotfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/shna0BUe3wUqLxyX34hKWoeotfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8b:11:0f:f5:6e:7b:2b:6c:dc:7e:63:61:93:12:af:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b219dad0151edf052a2f1c97df884a5a87a8b5f5
Validity
Not Before: Jun 20 02:00:40 2025 GMT
Not After : Jun 21 02:00:40 2025 GMT
Subject: CN=a85e1f34dcfe6e4a514734e74a0c477862988d2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9d:68:8d:c4:48:57:b5:7b:5e:21:f8:9e:87:
21:5a:5a:2c:93:ca:c7:de:7b:37:b0:a5:11:23:67:
ba:4c:b9:0f:44:94:5e:36:e8:e1:03:02:bf:d7:33:
6e:e2:0f:0a:42:07:bb:dd:59:8e:51:3f:49:1c:83:
92:ea:56:8a:9d:5e:4f:fa:5c:68:28:14:20:00:62:
d5:fa:ff:60:c7:01:3a:18:5e:72:14:26:54:9b:29:
60:45:71:8f:1b:1d:b3:88:aa:b9:d3:b9:66:d3:2e:
88:d7:53:19:ab:88:ef:df:86:ed:1a:0c:47:25:7e:
93:c2:c2:5a:95:44:24:20:e9:2f:3a:02:6f:a3:73:
6a:8a:b8:9e:14:8d:f1:3c:ba:18:7c:b0:71:fd:4c:
8e:6c:70:c6:24:8c:8a:d5:27:10:33:ba:5f:37:87:
bd:1c:54:a0:fb:47:70:d4:71:f7:18:dc:ee:e3:13:
56:24:48:86:97:04:36:34:c6:eb:af:9a:d2:fd:12:
87:7f:5c:7d:26:66:53:49:de:da:13:e3:04:25:4a:
8a:91:d4:fe:ad:4f:d1:2b:c5:61:e2:97:71:bc:2b:
5d:18:f4:da:d9:b0:ba:f9:7e:30:f1:02:c5:5b:a9:
b8:b6:df:4a:cb:75:c8:57:c8:3d:f4:1a:72:12:8a:
d7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:5E:1F:34:DC:FE:6E:4A:51:47:34:E7:4A:0C:47:78:62:98:8D:2A
X509v3 Authority Key Identifier:
keyid:B2:19:DA:D0:15:1E:DF:05:2A:2F:1C:97:DF:88:4A:5A:87:A8:B5:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/shna0BUe3wUqLxyX34hKWoeotfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/77482d-4830-49f7-b6bd-7650d9732a52/1/shna0BUe3wUqLxyX34hKWoeotfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/77482d-4830-49f7-b6bd-7650d9732a52/1/shna0BUe3wUqLxyX34hKWoeotfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:3c:8f:34:08:56:06:0a:d6:0f:e8:31:7d:32:b0:2e:1e:de:
a3:f3:8b:27:57:c9:6b:0d:f2:8e:78:38:87:b5:77:bb:07:0c:
ac:28:18:ed:0e:ca:7b:e8:04:47:d4:ad:db:61:5b:3c:fb:9d:
d8:91:26:41:0f:2c:9e:6f:38:ee:d8:52:ab:12:60:61:4c:3c:
43:81:76:26:13:ae:e5:8d:00:2f:20:e5:0b:a8:6f:d1:25:ae:
b5:55:59:5b:e7:64:68:54:b6:f0:e1:f9:85:a4:f9:c3:d6:53:
af:ea:4f:02:a3:3c:1e:29:ee:57:11:1f:e7:b4:9e:a7:41:11:
88:15:ee:dd:6b:7d:69:2a:96:21:12:5e:91:bc:ff:c0:8b:5b:
89:4e:71:ff:39:1e:f7:e3:af:cc:e5:18:26:f5:9c:df:25:9a:
0c:17:9f:a2:cf:41:54:82:e7:3e:9f:71:5c:bc:e5:5a:bc:e9:
50:38:4c:91:49:aa:d2:d5:96:38:bd:85:43:24:9e:f0:b3:39:
1b:a3:e6:0d:27:0d:99:7f:23:b4:42:73:6d:da:ef:e1:4b:5e:
6f:23:a9:a1:bc:c0:02:c8:86:e4:f0:79:38:7f:62:33:7e:a7:
d8:fa:e1:a7:bf:3b:72:28:26:f1:b0:c0:0d:c9:43:86:a5:a0:
04:8b:8c:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeLEQ/1bnsrbNx+Y2GTEq98MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyMTlkYWQwMTUxZWRmMDUyYTJmMWM5N2RmODg0YTVhODdh
OGI1ZjUwHhcNMjUwNjIwMDIwMDQwWhcNMjUwNjIxMDIwMDQwWjAzMTEwLwYDVQQD
EyhhODVlMWYzNGRjZmU2ZTRhNTE0NzM0ZTc0YTBjNDc3ODYyOTg4ZDJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZ1ojcRIV7V7XiH4nochWlosk8rH
3ns3sKURI2e6TLkPRJReNujhAwK/1zNu4g8KQge73VmOUT9JHIOS6laKnV5P+lxo
KBQgAGLV+v9gxwE6GF5yFCZUmylgRXGPGx2ziKq507lm0y6I11MZq4jv34btGgxH
JX6TwsJalUQkIOkvOgJvo3NqirieFI3xPLoYfLBx/UyObHDGJIyK1ScQM7pfN4e9
HFSg+0dw1HH3GNzu4xNWJEiGlwQ2NMbrr5rS/RKHf1x9JmZTSd7aE+MEJUqKkdT+
rU/RK8Vh4pdxvCtdGPTa2bC6+X4w8QLFW6m4tt9Ky3XIV8g99BpyEorXnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKheHzTc/m5KUUc050oMR3himI0qMB8GA1UdIwQY
MBaAFLIZ2tAVHt8FKi8cl9+ISlqHqLX1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2huYTBCVWUzd1VxTHh5WDM0aEtXb2VvdGZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni83NzQ4MmQtNDgzMC00OWY3LWI2YmQt
NzY1MGQ5NzMyYTUyLzEvc2huYTBCVWUzd1VxTHh5WDM0aEtXb2VvdGZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni83NzQ4MmQtNDgzMC00OWY3LWI2YmQtNzY1MGQ5NzMyYTUy
LzEvc2huYTBCVWUzd1VxTHh5WDM0aEtXb2VvdGZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAezyPNAhW
BgrWD+gxfTKwLh7eo/OLJ1fJaw3yjng4h7V3uwcMrCgY7Q7Ke+gER9St22FbPPud
2JEmQQ8snm847thSqxJgYUw8Q4F2JhOu5Y0ALyDlC6hv0SWutVVZW+dkaFS28OH5
haT5w9ZTr+pPAqM8HinuVxEf57Sep0ERiBXu3Wt9aSqWIRJekbz/wItbiU5x/zke
9+OvzOUYJvWc3yWaDBefos9BVILnPp9xXLzlWrzpUDhMkUmq0tWWOL2FQySe8LM5
G6PmDScNmX8jtEJzbdrv4UtebyOpobzAAsiG5PB5OH9iM36n2Prhp787cigm8bDA
DclDhqWgBIuMHg==
-----END CERTIFICATE-----
Generated at Fri Jun 20 07:01:35 2025 by rpki-client