Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft
File: SHJHQsP1ThebguavjjPg2dL71NU.mft (raw, json)
Hash identifier: H1HMqdbVOYn5FSxgNWa7EE2dvNH3aa+1/UtoqJIBfFQ=
Subject key identifier: 75:04:C6:C0:90:44:80:A2:0B:DB:CC:0A:6C:F0:23:71:96:BF:FC:FC
Authority key identifier: 48:72:47:42:C3:F5:4E:17:9B:82:E6:AF:8E:33:E0:D9:D2:FB:D4:D5
Certificate issuer: /CN=48724742c3f54e179b82e6af8e33e0d9d2fbd4d5
Certificate serial: 01976E86E2EDF018229619380583883C9B5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 13:00:23 +0000
Manifest this update: Sat 14 Jun 2025 13:00:23 +0000
Manifest next update: Sun 15 Jun 2025 13:00:23 +0000
Files and hashes: 1: SHJHQsP1ThebguavjjPg2dL71NU.crl (hash: sCfFeiJoodTCESLELytHDXqa9ta+4Cihj7FMV0rQj0s=)
2: fw6EErcKUkE6wVnp4BcQXOeheJE.roa (hash: X3Re7oVemXlG1F0GxrgY8aRLn+cfxjtelXf5RJOURd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 13:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:86:e2:ed:f0:18:22:96:19:38:05:83:88:3c:9b:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48724742c3f54e179b82e6af8e33e0d9d2fbd4d5
Validity
Not Before: Jun 14 13:00:23 2025 GMT
Not After : Jun 15 13:00:23 2025 GMT
Subject: CN=7504c6c0904480a20bdbcc0a6cf0237196bffcfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b3:89:2d:e4:06:1d:ff:1b:d3:47:45:cf:ee:
97:1c:b5:90:fc:c5:f2:ef:82:0d:60:ad:cc:82:5d:
e8:8e:63:cd:ec:22:9a:7f:70:39:b4:00:64:30:5b:
c8:f2:9e:3c:56:bf:9e:0a:87:48:4b:ec:ac:84:ea:
6c:24:72:f4:14:4b:19:34:36:62:83:a3:61:81:17:
29:95:3d:67:89:5b:f7:e9:b2:b2:f5:c8:f1:c3:ab:
33:e8:eb:5e:ea:58:90:2f:66:19:75:71:45:8e:eb:
83:17:84:24:66:b2:0d:89:c1:0d:b5:c2:09:3b:34:
65:bc:ea:37:ec:70:aa:37:15:e7:55:b5:fe:03:15:
44:06:52:ef:bd:be:27:a1:d3:9f:84:af:12:44:85:
7a:6d:be:73:d9:e6:99:f4:2a:c6:29:11:f2:0a:89:
2f:63:3c:58:24:8a:49:48:b3:71:91:26:25:be:d9:
77:a7:08:b0:fd:81:33:50:b1:6e:59:89:b3:b8:24:
44:68:d1:28:9a:c5:9f:eb:e2:ae:3b:15:46:31:92:
73:04:c6:64:23:8c:5d:b3:db:34:6b:e7:a0:76:95:
c0:9d:d4:fe:f0:6b:0b:66:ad:2e:f7:6d:3a:01:6b:
2e:7a:a4:9a:f9:f4:3e:c3:b6:a5:da:a1:6b:8f:60:
28:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:04:C6:C0:90:44:80:A2:0B:DB:CC:0A:6C:F0:23:71:96:BF:FC:FC
X509v3 Authority Key Identifier:
keyid:48:72:47:42:C3:F5:4E:17:9B:82:E6:AF:8E:33:E0:D9:D2:FB:D4:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:4a:cd:e0:6c:b6:ed:f1:2e:6c:56:9b:2b:ce:be:7d:8a:3b:
8c:da:03:f3:3f:67:cf:8c:64:dc:39:54:96:05:a1:5e:84:5c:
aa:ea:a5:1f:d2:7f:d2:60:c6:bc:38:1c:2d:d5:65:ad:4e:da:
77:71:69:2e:02:6e:7b:fd:e9:f1:08:5e:c3:e4:49:ed:f0:d9:
60:10:38:91:36:25:d9:e0:5d:2f:28:32:5a:40:ae:a8:5b:12:
ba:df:43:77:d6:7b:2f:37:4d:96:d0:d4:c4:d5:52:3c:3f:9f:
cb:28:87:60:23:88:e9:65:53:bb:80:40:0a:72:04:bf:e5:5a:
af:a8:8c:fa:13:a1:af:6e:0c:51:d3:e6:08:ed:01:9a:8f:a8:
b0:17:78:b0:3c:50:98:f9:2c:e1:bc:d8:fe:af:79:62:8a:11:
f0:69:fe:e3:56:de:f9:67:df:8f:36:83:c8:c1:03:7c:ad:4e:
d8:35:c6:94:6e:7f:4d:1d:69:2f:bb:c0:bb:72:81:c2:7e:ef:
b5:9f:3e:0a:33:f1:9b:a3:26:65:f1:64:be:45:b7:d6:bc:6d:
5b:b6:38:2f:ce:bc:6c:44:bb:94:2d:55:98:7c:2d:7b:37:e3:
54:58:8c:90:d5:f4:30:1a:cf:fd:bd:67:2b:bc:13:39:5b:8f:
c8:53:70:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:51:48 2025 by rpki-client