Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.mft
File: she1rEZ0EuJJxE4nOcKJ67BM0zc.mft (raw, json)
Hash identifier: VBJSfL0SCSsMhxKCWexrsRXXX0DIDXT3kgJ+9OFQBC0=
Subject key identifier: 25:4A:14:3F:D3:C4:EA:60:70:3B:54:5C:17:0A:C6:7C:DC:22:5B:8C
Authority key identifier: B2:17:B5:AC:46:74:12:E2:49:C4:4E:27:39:C2:89:EB:B0:4C:D3:37
Certificate issuer: /CN=b217b5ac467412e249c44e2739c289ebb04cd337
Certificate serial: 019679B22641C8C5BFECF98F1FBE2E63A96C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/she1rEZ0EuJJxE4nOcKJ67BM0zc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.mft
Manifest number: 08B9
Signing time: Mon 28 Apr 2025 00:00:40 +0000
Manifest this update: Mon 28 Apr 2025 00:00:40 +0000
Manifest next update: Tue 29 Apr 2025 00:00:40 +0000
Files and hashes: 1: Ftnb9Ud8kWttM5-w7OSz4uHafco.roa (hash: 2d7vx7DexYl0/ojCB78Rdwk/rdaUo+im6ReM1HOn2aE=)
2: she1rEZ0EuJJxE4nOcKJ67BM0zc.crl (hash: q+4ssUctQbD+5D/9+8uPlGtxZ6ctBHIVi1cwNCHsHXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.mft
rsync://rpki.ripe.net/repository/DEFAULT/she1rEZ0EuJJxE4nOcKJ67BM0zc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:b2:26:41:c8:c5:bf:ec:f9:8f:1f:be:2e:63:a9:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b217b5ac467412e249c44e2739c289ebb04cd337
Validity
Not Before: Apr 28 00:00:40 2025 GMT
Not After : Apr 29 00:00:40 2025 GMT
Subject: CN=254a143fd3c4ea60703b545c170ac67cdc225b8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:1a:75:a0:87:cc:53:6f:ff:ee:9e:94:2f:67:
fa:85:42:34:c4:8d:d3:78:86:cb:c4:b2:9e:a6:a2:
d8:af:d9:0d:f3:76:1d:d9:11:73:8b:97:54:64:60:
29:55:53:66:d3:1f:b3:9b:71:61:fe:5d:a6:46:4a:
d8:07:07:6c:9e:18:c8:28:8a:ab:5d:57:33:5f:53:
7d:d6:6b:70:fd:7a:6f:13:67:22:97:75:85:dd:b4:
21:2b:9c:ec:bb:0b:0e:cf:a3:09:06:d0:b5:2d:20:
50:95:c5:3e:36:6a:c2:cb:a7:a5:65:88:dc:1e:8e:
b9:03:17:f3:12:e2:c2:e3:cd:74:16:9f:e6:71:18:
dc:4c:a1:99:7c:51:b7:a3:cd:1a:52:bc:c6:30:21:
48:81:d6:a5:55:c0:5a:30:04:fe:6d:66:f0:2e:c7:
ca:8f:35:e6:f0:b8:cb:8b:2f:5e:74:ba:a6:8f:a8:
37:ef:aa:d7:b6:ee:9a:92:91:bb:5a:7a:1e:36:b7:
ce:20:97:15:c1:71:f3:a5:e6:2b:17:ca:d1:ab:8e:
4a:85:0f:97:b1:7f:cf:e4:67:98:b8:3b:17:ac:57:
49:2d:4e:58:40:77:aa:29:08:42:60:fd:d2:87:03:
72:23:74:2c:56:45:c2:e7:52:0e:52:ea:82:33:9c:
58:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:4A:14:3F:D3:C4:EA:60:70:3B:54:5C:17:0A:C6:7C:DC:22:5B:8C
X509v3 Authority Key Identifier:
keyid:B2:17:B5:AC:46:74:12:E2:49:C4:4E:27:39:C2:89:EB:B0:4C:D3:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/she1rEZ0EuJJxE4nOcKJ67BM0zc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:a8:19:63:47:3a:68:58:df:29:f7:fb:33:5d:b7:dd:a1:fd:
e8:0f:b7:ca:2c:82:24:80:84:00:99:59:6d:60:8e:bb:b2:d5:
33:f3:65:00:d0:fa:b2:91:d5:da:75:50:d8:35:c5:7c:2c:81:
36:55:68:60:7b:b4:fd:4a:d8:a6:c4:97:39:81:60:a7:e7:24:
bb:80:c8:cc:69:06:c9:77:1f:4e:7a:d0:ac:3d:64:d9:ed:2e:
ad:99:d0:4f:d0:c8:2a:5c:9e:21:6d:59:27:70:24:26:56:3c:
c6:0b:7b:61:33:67:20:9d:eb:50:d2:f1:d8:52:0a:b8:67:cb:
7d:d1:66:90:a4:cb:bc:50:16:e0:be:59:f2:38:48:f5:79:86:
da:a7:f2:8c:69:80:0f:de:8d:76:f5:d1:f0:79:4a:0f:5c:a8:
f3:4a:86:f7:8a:b8:60:f4:ac:cf:8c:61:a0:c8:de:31:df:49:
c0:79:0b:97:cf:a6:09:5a:85:d1:3b:18:05:fe:7e:bb:00:4c:
08:6d:4e:f0:aa:c7:06:12:56:44:bf:82:bc:ac:b5:66:d8:42:
8f:53:47:52:c3:9b:f4:07:df:e9:b6:b1:ec:cc:52:78:93:ae:
11:57:95:c1:91:63:99:76:ad:47:34:11:cb:86:80:40:f7:32:
74:ba:14:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 07:30:37 2025 by rpki-client