Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.mft
File: she1rEZ0EuJJxE4nOcKJ67BM0zc.mft (raw, json)
Hash identifier: 8dJ8svXPh7RmrzujS0Sfsz1A4hcMh1EHSqZsKH+htpw=
Subject key identifier: 63:AE:BD:59:05:2F:A5:A3:CF:97:C4:C8:3C:56:02:54:83:EB:A5:00
Authority key identifier: B2:17:B5:AC:46:74:12:E2:49:C4:4E:27:39:C2:89:EB:B0:4C:D3:37
Certificate issuer: /CN=b217b5ac467412e249c44e2739c289ebb04cd337
Certificate serial: 0198A04D6CF0AC639F8E94C332C357D98BC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/she1rEZ0EuJJxE4nOcKJ67BM0zc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.mft
Manifest number: 09D6
Signing time: Tue 12 Aug 2025 22:01:25 +0000
Manifest this update: Tue 12 Aug 2025 22:01:25 +0000
Manifest next update: Wed 13 Aug 2025 22:01:25 +0000
Files and hashes: 1: Ftnb9Ud8kWttM5-w7OSz4uHafco.roa (hash: 2d7vx7DexYl0/ojCB78Rdwk/rdaUo+im6ReM1HOn2aE=)
2: she1rEZ0EuJJxE4nOcKJ67BM0zc.crl (hash: E1QOqzZNJdhz6YhzEAQue15J00aeCKPIxsuxOatbWRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.mft
rsync://rpki.ripe.net/repository/DEFAULT/she1rEZ0EuJJxE4nOcKJ67BM0zc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4d:6c:f0:ac:63:9f:8e:94:c3:32:c3:57:d9:8b:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b217b5ac467412e249c44e2739c289ebb04cd337
Validity
Not Before: Aug 12 22:01:25 2025 GMT
Not After : Aug 13 22:01:25 2025 GMT
Subject: CN=63aebd59052fa5a3cf97c4c83c56025483eba500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:46:2f:0c:25:90:d1:f4:09:60:a2:38:fc:8a:
ba:6c:f0:77:27:45:1a:2f:b1:cf:9c:5d:1f:b7:d1:
ab:55:c5:53:d4:de:c1:a5:c1:e4:6e:f8:5f:ff:88:
13:c5:2b:6b:80:a7:6c:fd:a9:1f:f5:6d:fd:b6:80:
8a:a2:2c:45:b8:b3:65:04:b9:43:ef:7b:72:94:59:
64:17:9e:30:fd:21:73:05:43:8b:30:2a:0c:7e:e1:
78:1a:d5:a1:29:eb:e3:76:94:51:e8:7f:b3:f2:8f:
96:92:a1:32:38:4a:d7:5f:7b:e7:be:ce:14:48:54:
bb:bc:43:23:5d:67:5e:c7:55:76:fe:bb:28:18:cd:
2f:6a:a3:fd:de:d6:be:9a:93:15:2c:73:f8:41:a9:
47:91:09:34:5d:e4:b8:65:d4:64:39:0b:ff:e5:a1:
14:2c:48:5b:90:ca:fc:3e:07:f9:4f:c3:d4:79:9a:
a0:d8:83:d6:09:4b:ad:c8:9e:ea:e0:d3:61:18:47:
ca:87:86:cf:15:d9:e1:3e:bc:de:fd:1b:83:89:e8:
9b:74:c3:a9:2d:9f:21:f9:94:af:9e:c1:6c:b0:ba:
f9:cc:d7:d2:5e:58:0f:b9:2d:76:b8:65:54:2f:f1:
98:62:03:4b:b6:14:c8:03:65:41:d9:48:dd:f1:69:
8a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:AE:BD:59:05:2F:A5:A3:CF:97:C4:C8:3C:56:02:54:83:EB:A5:00
X509v3 Authority Key Identifier:
keyid:B2:17:B5:AC:46:74:12:E2:49:C4:4E:27:39:C2:89:EB:B0:4C:D3:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/she1rEZ0EuJJxE4nOcKJ67BM0zc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:bd:0c:eb:01:f2:35:fd:21:20:41:25:1e:18:ee:8f:00:68:
d7:3f:11:1f:f8:22:0d:5b:67:3d:51:38:1d:8c:7e:cd:87:b7:
71:7f:4e:c3:88:19:31:a4:5c:97:94:f1:4b:a1:3c:46:88:52:
46:03:f3:bc:83:0c:7a:33:ab:13:2c:00:7b:c6:d6:98:fe:44:
1d:9f:16:77:56:a7:93:39:bf:8f:64:60:1d:7f:6c:c7:fd:01:
60:26:b0:05:5a:ad:eb:c6:72:c7:6c:3a:d1:0c:50:44:ed:e7:
30:6e:e7:c4:6d:37:7c:cc:33:f2:ae:29:db:f5:d5:b9:57:59:
f7:2a:96:c3:12:ea:62:16:3a:47:94:b8:23:5d:9e:d4:80:fd:
d5:0f:ea:e5:20:14:4c:89:99:49:32:e8:3c:7e:ee:e9:1b:55:
b3:d5:d9:3c:c9:9c:82:c2:2b:66:aa:b4:0c:e7:73:8d:fb:27:
89:1a:37:3b:dd:ba:fb:36:ea:51:9c:2a:10:e1:c5:ae:66:35:
90:ca:0f:80:7b:0a:7d:e5:1a:7d:24:7d:5d:b5:93:51:6e:32:
3a:15:1a:fe:df:8e:30:16:24:48:18:4e:ae:4f:2d:9b:dd:40:
40:17:d5:6f:75:a5:2d:c7:97:80:53:64:75:4c:d8:0d:c8:c7:
01:77:f0:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 00:38:15 2025 by rpki-client