Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.mft
File: shXNjm2zVEGYTZx9_Jr7ZT5V3_E.mft (raw, json)
Hash identifier: iIYDCho/IG2+QYGO5RG/UWNbFl/Zo7zKAtOIvb0Sh5E=
Subject key identifier: 0A:3F:91:C0:10:2E:2F:AC:CB:6C:CF:C1:E5:F5:DC:AC:EB:F5:0D:BB
Authority key identifier: B2:15:CD:8E:6D:B3:54:41:98:4D:9C:7D:FC:9A:FB:65:3E:55:DF:F1
Certificate issuer: /CN=b215cd8e6db35441984d9c7dfc9afb653e55dff1
Certificate serial: 0199C78EA747AC5EAA5261CA702719568AF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.mft
Manifest number: 162F
Signing time: Thu 09 Oct 2025 06:00:38 +0000
Manifest this update: Thu 09 Oct 2025 06:00:38 +0000
Manifest next update: Fri 10 Oct 2025 06:00:38 +0000
Files and hashes: 1: UkWKB7R6wSYKBpsuiwwV880UfCk.roa (hash: pQhrMKgkx/zqcMJYjMVoXY14ZtF5KkWfSepRK8YAXxs=)
2: shXNjm2zVEGYTZx9_Jr7ZT5V3_E.crl (hash: BQI7rGbmkRlkJpggX6N4oMEKSNhFIyGCet6U0pkyPIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Oct 2025 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c7:8e:a7:47:ac:5e:aa:52:61:ca:70:27:19:56:8a:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b215cd8e6db35441984d9c7dfc9afb653e55dff1
Validity
Not Before: Oct 9 06:00:38 2025 GMT
Not After : Oct 10 06:00:38 2025 GMT
Subject: CN=0a3f91c0102e2faccb6ccfc1e5f5dcacebf50dbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:57:01:53:70:8f:40:9a:e1:62:51:e8:4e:65:
e5:98:49:0a:40:67:a6:d7:7f:22:ed:82:12:48:60:
24:5e:df:45:91:0c:f5:77:57:26:28:c7:4c:99:5f:
3d:8c:9d:ca:b5:82:52:cc:0d:f1:4a:f3:b1:b3:fe:
ec:a9:d8:a7:c6:88:fa:b2:ad:61:8e:df:00:a2:dc:
37:97:20:d3:09:8d:d4:2e:6f:39:f1:95:7e:c5:7b:
af:7b:6a:1c:6c:cf:c6:81:5c:15:13:ae:04:b0:e0:
f2:a2:28:ab:60:4d:85:dc:69:c3:54:c6:3d:14:b5:
c4:8b:f6:c2:36:f8:1b:8e:80:d1:0a:8e:5b:9d:06:
0d:48:c5:a2:9b:03:c1:29:3c:66:0d:18:24:ad:9f:
48:ff:98:cf:ee:e9:ac:83:02:6c:c2:b8:f4:e6:ee:
33:4b:1b:97:fe:e2:14:1f:5b:a7:81:6f:e2:da:8e:
98:2f:9b:c9:b7:59:11:22:93:30:ad:94:c4:38:d1:
f4:b8:5e:45:c8:c3:44:f8:9a:fd:dc:b8:12:35:26:
89:f9:19:14:51:53:5c:6a:6f:10:8e:4b:fd:be:f1:
72:cf:18:4e:35:52:2d:0d:76:22:c4:c5:03:e3:cb:
6e:e3:c4:3b:d4:51:db:85:20:97:6d:f3:49:27:6a:
cc:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:3F:91:C0:10:2E:2F:AC:CB:6C:CF:C1:E5:F5:DC:AC:EB:F5:0D:BB
X509v3 Authority Key Identifier:
keyid:B2:15:CD:8E:6D:B3:54:41:98:4D:9C:7D:FC:9A:FB:65:3E:55:DF:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:33:78:b4:5b:7a:df:f4:43:26:d1:c0:96:64:5f:09:49:d8:
d6:2e:2a:5e:40:9d:f5:3b:ec:9b:c0:36:53:5a:94:29:42:5c:
b8:33:9f:41:df:66:73:73:ca:8c:87:d4:b9:f5:cb:a5:46:4c:
d5:ad:cf:79:3a:87:81:e1:93:b3:ca:da:0a:2c:b2:91:29:d1:
f1:a9:71:9c:05:4d:0e:05:55:35:73:a5:8a:73:fe:2b:82:fa:
86:58:dc:06:82:0f:5e:0a:7e:f6:b2:b2:e0:75:bb:bf:0c:de:
3d:06:28:67:4a:75:de:a2:cd:66:d0:b8:8b:97:ea:4c:d1:2b:
1c:4b:e1:51:d2:13:fe:61:44:69:8b:29:f7:ba:e5:a9:23:f9:
33:68:a2:cb:f7:4b:53:34:88:50:35:e6:8f:aa:e1:1f:20:18:
59:21:6c:4b:0f:5a:c2:5a:ac:9c:72:29:4e:32:10:5f:0c:fd:
4e:3a:f9:9c:db:ea:2a:7f:16:46:78:2b:3e:4a:36:56:b6:9b:
c4:11:4c:7f:36:59:f0:f1:04:86:97:b4:0d:b6:15:a9:41:f7:
6b:cd:91:76:da:e7:09:53:41:62:96:1d:f7:04:e7:f2:45:7d:
50:e9:1f:f6:90:80:1b:46:0f:17:14:c7:06:56:22:1a:fb:7a:
a2:a7:aa:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 09:01:44 2025 by rpki-client