Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/63c9db-8ab9-4c1e-af27-ed28851ecb76/1/Sh0gvnfhIjIyPBQi-1GY_qAIYDQ.mft
File: Sh0gvnfhIjIyPBQi-1GY_qAIYDQ.mft (raw, json)
Hash identifier: rBgQbM/724p6mvCSdKhoKljWlRBw5V8hEUDmmLryPEM=
Subject key identifier: CB:3C:A2:97:05:0A:2A:91:E3:4A:E0:F0:7B:BA:E4:0F:9B:C7:E1:D9
Authority key identifier: 4A:1D:20:BE:77:E1:22:32:32:3C:14:22:FB:51:98:FE:A0:08:60:34
Certificate issuer: /CN=4a1d20be77e12232323c1422fb5198fea0086034
Certificate serial: 019896DC84687D41D622E9A7AF72D2893E6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sh0gvnfhIjIyPBQi-1GY_qAIYDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/63c9db-8ab9-4c1e-af27-ed28851ecb76/1/Sh0gvnfhIjIyPBQi-1GY_qAIYDQ.mft
Manifest number: 1629
Signing time: Mon 11 Aug 2025 02:01:30 +0000
Manifest this update: Mon 11 Aug 2025 02:01:30 +0000
Manifest next update: Tue 12 Aug 2025 02:01:30 +0000
Files and hashes: 1: Sh0gvnfhIjIyPBQi-1GY_qAIYDQ.crl (hash: u1nA97sgEM+x6wAxvMPUkQwNTetyRLjE/kkqXUL/dZU=)
2: mN2qB1BO4S5r9HWkXJU36eJQAJo.roa (hash: CEQM9W3lMs7LPoWAqhYjN1IkeHCfM/C5tJypbGgHYt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/63c9db-8ab9-4c1e-af27-ed28851ecb76/1/Sh0gvnfhIjIyPBQi-1GY_qAIYDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/63c9db-8ab9-4c1e-af27-ed28851ecb76/1/Sh0gvnfhIjIyPBQi-1GY_qAIYDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sh0gvnfhIjIyPBQi-1GY_qAIYDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:dc:84:68:7d:41:d6:22:e9:a7:af:72:d2:89:3e:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a1d20be77e12232323c1422fb5198fea0086034
Validity
Not Before: Aug 11 02:01:30 2025 GMT
Not After : Aug 12 02:01:30 2025 GMT
Subject: CN=cb3ca297050a2a91e34ae0f07bbae40f9bc7e1d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d3:52:c7:0f:38:44:af:d9:1e:15:af:be:94:
28:f5:17:e3:ce:7c:2c:30:f0:06:85:83:09:2c:90:
68:10:84:09:6f:6a:fc:73:c6:ba:cc:9e:2b:91:a0:
9f:5f:27:ae:57:8c:e2:9f:48:e8:c3:b9:f4:7f:60:
d8:b4:d5:36:0c:03:17:25:fa:0b:40:6b:e8:09:fc:
e5:12:ec:bb:27:62:f1:cd:20:6e:52:c7:df:99:5d:
3e:4a:60:0a:fd:df:f2:a4:38:ea:10:58:82:f2:bf:
be:ee:02:2b:8d:46:d8:f3:e5:82:de:87:da:99:71:
ba:f1:ab:04:03:f3:bd:f7:91:55:15:69:0f:7a:dd:
2a:69:75:f9:70:82:bd:5d:72:9a:c8:78:a4:e4:89:
0d:2e:e8:03:44:48:bc:8f:20:18:dd:15:a7:b5:9f:
35:95:a9:82:4b:60:5a:ce:a8:00:67:40:4c:9e:af:
fd:a2:c5:d4:7b:c4:ef:c3:29:09:56:1f:36:aa:f1:
74:a6:03:09:a8:ba:51:4d:2b:84:45:65:cd:cb:97:
f8:ff:6a:21:dd:c5:85:02:6e:54:bb:27:43:2c:17:
e0:49:ad:7b:83:7b:89:79:58:14:6a:4b:46:ac:e5:
e8:1d:df:29:7d:30:02:88:a4:f9:f0:46:74:72:48:
28:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:3C:A2:97:05:0A:2A:91:E3:4A:E0:F0:7B:BA:E4:0F:9B:C7:E1:D9
X509v3 Authority Key Identifier:
keyid:4A:1D:20:BE:77:E1:22:32:32:3C:14:22:FB:51:98:FE:A0:08:60:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sh0gvnfhIjIyPBQi-1GY_qAIYDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/63c9db-8ab9-4c1e-af27-ed28851ecb76/1/Sh0gvnfhIjIyPBQi-1GY_qAIYDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/63c9db-8ab9-4c1e-af27-ed28851ecb76/1/Sh0gvnfhIjIyPBQi-1GY_qAIYDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:03:a2:e5:36:fd:58:a9:1d:59:58:60:b1:5e:81:35:8f:67:
0a:64:ff:de:ac:4a:86:23:ab:22:91:a1:b3:9a:62:28:31:5b:
75:dd:02:d5:60:d3:a2:16:a9:f2:48:49:2f:93:58:d4:f6:fa:
c9:97:34:f4:85:6f:fb:5b:d4:85:70:41:14:ae:1e:cf:65:c5:
0e:5a:2e:38:4f:72:da:ec:13:b6:5f:7f:9c:ad:8b:35:6c:ea:
18:d7:52:f6:57:3d:80:3a:01:a3:3e:e7:ad:bd:22:3f:5c:da:
d4:94:e4:46:e6:c1:8a:f6:0b:09:ad:e3:64:2c:10:fd:08:34:
58:73:ce:c4:75:f9:cf:a2:92:09:e5:f1:90:43:18:48:3b:9b:
98:e1:78:c7:00:66:cf:57:6a:07:fb:c6:ca:0a:86:96:4e:11:
ef:5e:80:00:5e:d1:1c:aa:4d:62:98:84:0f:0a:38:8f:63:c3:
d0:fe:92:8a:3d:27:39:9a:72:73:74:24:53:73:0a:35:5a:aa:
4c:18:1f:96:f6:c2:60:77:b6:66:d0:24:bc:94:ad:cf:fd:a5:
4d:10:66:e0:d9:47:e3:60:6a:d2:c3:0a:c3:ac:06:cd:50:b6:
f7:b7:0e:40:89:96:58:5b:82:49:96:b3:13:bb:19:9d:bc:a2:
03:af:82:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:23:59 2025 by rpki-client