Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/97c916-81b1-4b3a-9fee-356a19f55506/1/Sh7Uv1AsDy2LyHAmwYrJhZsPHew.mft
File: Sh7Uv1AsDy2LyHAmwYrJhZsPHew.mft (raw, json)
Hash identifier: Z9D9YiipIEdFOO+iPqSPxC6cP0r1sdmk5J2RnSzx3kk=
Subject key identifier: 42:52:BE:A5:E7:18:7C:7A:4D:2C:6A:ED:7D:7D:77:C7:D0:2C:A9:F9
Authority key identifier: 4A:1E:D4:BF:50:2C:0F:2D:8B:C8:70:26:C1:8A:C9:85:9B:0F:1D:EC
Certificate issuer: /CN=4a1ed4bf502c0f2d8bc87026c18ac9859b0f1dec
Certificate serial: 019A725CC8FC8881B9F45CC159BFA701ADBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sh7Uv1AsDy2LyHAmwYrJhZsPHew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/97c916-81b1-4b3a-9fee-356a19f55506/1/Sh7Uv1AsDy2LyHAmwYrJhZsPHew.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 10:01:14 +0000
Manifest this update: Tue 11 Nov 2025 10:01:14 +0000
Manifest next update: Wed 12 Nov 2025 10:01:14 +0000
Files and hashes: 1: Sh7Uv1AsDy2LyHAmwYrJhZsPHew.crl (hash: dujcOhWCzaLkM46uDwdcGKKsV/TUuPu7sCY/OjvpfsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/97c916-81b1-4b3a-9fee-356a19f55506/1/Sh7Uv1AsDy2LyHAmwYrJhZsPHew.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/97c916-81b1-4b3a-9fee-356a19f55506/1/Sh7Uv1AsDy2LyHAmwYrJhZsPHew.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sh7Uv1AsDy2LyHAmwYrJhZsPHew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:c8:fc:88:81:b9:f4:5c:c1:59:bf:a7:01:ad:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a1ed4bf502c0f2d8bc87026c18ac9859b0f1dec
Validity
Not Before: Nov 11 10:01:14 2025 GMT
Not After : Nov 12 10:01:14 2025 GMT
Subject: CN=4252bea5e7187c7a4d2c6aed7d7d77c7d02ca9f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8b:68:49:46:11:42:e0:48:35:e0:42:b0:26:
b1:8f:80:ec:ce:27:b2:0f:81:56:ac:e2:d2:56:33:
5a:7d:52:f8:a2:38:db:07:93:69:46:93:52:6e:04:
08:bb:d7:91:4f:96:dd:db:57:7d:16:5d:6e:72:23:
54:37:74:1a:f8:83:48:1d:12:d5:ce:29:d1:a9:23:
06:64:94:28:72:0b:dd:56:af:44:58:0d:2b:a5:f7:
a0:2b:d2:c1:4a:cb:0c:19:fc:d0:a0:39:f4:d7:66:
60:4b:18:79:65:6b:cc:88:a2:2d:84:b9:7a:de:8a:
c4:de:6e:3b:f2:89:ad:a1:35:b6:3f:8c:d1:e1:af:
02:e6:1c:f4:05:4a:53:94:7f:30:aa:b9:8c:5d:c1:
48:74:03:04:26:2a:c7:21:db:ad:fb:90:04:3b:b0:
dc:a0:61:f3:26:d1:45:dc:49:f5:70:a0:dd:4f:02:
77:3f:2d:c7:ca:cd:85:47:58:58:95:32:fd:ca:91:
ef:2f:c7:d0:7e:8b:a7:1b:79:61:28:b9:a6:4c:b5:
ba:d7:45:ff:96:c3:52:6e:a7:5b:c4:7e:78:36:0f:
a2:0b:14:32:d0:ea:c7:82:91:50:6a:06:14:0c:8c:
ad:39:67:60:03:15:3a:02:12:48:3d:b9:c8:47:7e:
6c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:52:BE:A5:E7:18:7C:7A:4D:2C:6A:ED:7D:7D:77:C7:D0:2C:A9:F9
X509v3 Authority Key Identifier:
keyid:4A:1E:D4:BF:50:2C:0F:2D:8B:C8:70:26:C1:8A:C9:85:9B:0F:1D:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sh7Uv1AsDy2LyHAmwYrJhZsPHew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/97c916-81b1-4b3a-9fee-356a19f55506/1/Sh7Uv1AsDy2LyHAmwYrJhZsPHew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/97c916-81b1-4b3a-9fee-356a19f55506/1/Sh7Uv1AsDy2LyHAmwYrJhZsPHew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:48:42:53:f2:0a:14:07:42:c4:5f:84:31:a8:a1:4b:90:45:
8f:00:40:fd:83:94:44:13:5d:a7:2d:7d:4e:e6:e8:23:d8:2d:
bf:a2:c4:81:ba:8c:d3:b3:53:d4:14:25:37:cd:1a:29:cd:1d:
47:51:3a:76:8f:e6:5a:51:e4:65:05:df:f1:46:cb:16:85:1b:
a6:85:7e:53:0d:8c:20:4c:b2:ce:2d:ee:f4:ff:74:47:e7:49:
10:27:8e:26:2e:ea:6b:00:e3:1e:86:0a:2c:fb:ff:80:95:64:
7b:59:3e:14:fd:5a:d9:43:9b:ec:38:62:9d:2e:5b:31:56:67:
da:58:2f:24:b3:44:57:e7:93:d6:c0:16:23:a4:8f:67:97:6d:
32:30:e0:d6:a9:b0:9c:0e:99:84:5f:bc:fd:35:78:1f:80:32:
30:6f:ec:f1:14:33:fe:f1:ad:ef:a3:b7:4b:07:45:3d:a4:fe:
d5:67:ee:fa:30:fc:6b:c3:a4:21:7f:3f:9b:d2:72:52:ac:65:
71:14:80:33:8f:41:aa:a1:b9:81:66:ba:7a:47:fa:e5:57:34:
6a:99:6f:fc:ca:e8:1a:92:9a:82:cb:e6:79:bd:8c:f0:72:79:
9a:61:2c:98:38:f0:16:b4:9d:99:75:26:36:31:3d:2b:4d:a6:
11:3a:09:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:41:39 2025 by rpki-client