Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/52a1e5-86f1-49f7-a773-cb3e29b6ad32/1/sh47KsUJcPsSbL3xnX-zFdzBxF0.mft
File: sh47KsUJcPsSbL3xnX-zFdzBxF0.mft (raw, json)
Hash identifier: WZEG5UwXA6N4bd0prl/fmDCSe3GyPbC61RCeKzveOXw=
Subject key identifier: E1:56:B0:6F:F1:BE:2E:4A:3E:4C:B1:3E:09:9D:DB:18:6A:2A:6C:0B
Authority key identifier: B2:1E:3B:2A:C5:09:70:FB:12:6C:BD:F1:9D:7F:B3:15:DC:C1:C4:5D
Certificate issuer: /CN=b21e3b2ac50970fb126cbdf19d7fb315dcc1c45d
Certificate serial: 019A71B83642394BC301E56B414F4DC46C36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sh47KsUJcPsSbL3xnX-zFdzBxF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/52a1e5-86f1-49f7-a773-cb3e29b6ad32/1/sh47KsUJcPsSbL3xnX-zFdzBxF0.mft
Manifest number: 01AC
Signing time: Tue 11 Nov 2025 07:01:29 +0000
Manifest this update: Tue 11 Nov 2025 07:01:29 +0000
Manifest next update: Wed 12 Nov 2025 07:01:29 +0000
Files and hashes: 1: 5wrNYPlSCkVTpZCOkOfJiVfHH1s.roa (hash: vV52rVETrxDxRFyAGhG26EED/lJXHQxzwHDXgoc8s8o=)
2: sh47KsUJcPsSbL3xnX-zFdzBxF0.crl (hash: h0FoXLCrr9UyVG7KyravEFPdACBXAxyv5teHQeFJJb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/52a1e5-86f1-49f7-a773-cb3e29b6ad32/1/sh47KsUJcPsSbL3xnX-zFdzBxF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/52a1e5-86f1-49f7-a773-cb3e29b6ad32/1/sh47KsUJcPsSbL3xnX-zFdzBxF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sh47KsUJcPsSbL3xnX-zFdzBxF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:36:42:39:4b:c3:01:e5:6b:41:4f:4d:c4:6c:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b21e3b2ac50970fb126cbdf19d7fb315dcc1c45d
Validity
Not Before: Nov 11 07:01:29 2025 GMT
Not After : Nov 12 07:01:29 2025 GMT
Subject: CN=e156b06ff1be2e4a3e4cb13e099ddb186a2a6c0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:be:40:cf:15:b0:09:8e:55:13:b1:24:2c:b9:
17:c8:6c:46:a1:24:ec:ed:6b:f4:03:ca:b1:61:c3:
3b:2e:cf:8e:47:8c:48:f3:a0:b1:98:b0:23:09:4a:
07:97:7b:7b:f7:df:4c:c2:fe:0b:68:ae:97:e6:66:
ea:a7:3b:d9:4e:0d:49:35:9a:8e:6d:75:17:55:88:
0c:2a:c1:9e:be:6e:36:9b:99:86:a9:87:5f:39:d5:
47:c5:9b:c8:06:3c:57:e6:1d:52:ce:51:31:08:44:
3e:3f:3e:a2:9d:b0:91:3f:66:20:21:15:69:3c:a5:
0c:0e:a5:b6:3c:6a:e1:7a:4d:78:af:57:6d:80:22:
73:df:7d:91:bf:9d:42:36:09:2b:4e:49:11:7e:ff:
03:21:05:a1:f2:c0:4e:fb:ad:c0:5a:47:dd:8b:64:
02:d3:c3:4f:88:f1:71:6c:68:af:2f:ef:4a:8b:b3:
2b:d7:ae:9d:70:f2:46:91:cb:6a:0c:f1:6f:2c:13:
7c:74:f0:31:1c:c4:36:7a:cb:4c:fa:cf:3d:dc:2f:
37:64:e2:9b:69:6c:e1:3f:b1:63:c9:99:d6:c3:8e:
04:38:fe:57:14:a4:58:28:d2:2c:ca:09:27:d7:fb:
42:26:70:38:9c:2b:a8:54:5c:8c:bb:dc:c2:e8:ae:
4c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:56:B0:6F:F1:BE:2E:4A:3E:4C:B1:3E:09:9D:DB:18:6A:2A:6C:0B
X509v3 Authority Key Identifier:
keyid:B2:1E:3B:2A:C5:09:70:FB:12:6C:BD:F1:9D:7F:B3:15:DC:C1:C4:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sh47KsUJcPsSbL3xnX-zFdzBxF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/52a1e5-86f1-49f7-a773-cb3e29b6ad32/1/sh47KsUJcPsSbL3xnX-zFdzBxF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/52a1e5-86f1-49f7-a773-cb3e29b6ad32/1/sh47KsUJcPsSbL3xnX-zFdzBxF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:7f:84:22:60:b5:4e:76:5b:78:eb:38:c1:99:cc:54:34:50:
9d:52:be:e3:b3:6a:62:37:05:60:c6:94:67:d6:c4:cc:c7:d2:
31:64:dd:eb:67:82:38:38:80:cf:04:d7:df:09:bb:0d:e3:ac:
eb:23:d8:c5:9f:09:96:54:aa:5a:ea:cc:02:06:83:30:44:d6:
ec:e4:c6:dc:4d:5b:ce:2c:f5:5a:21:bd:b5:65:87:70:d2:bd:
92:5d:8a:1e:4f:67:ed:88:f2:63:fd:34:38:99:88:51:e7:52:
49:8b:4a:91:8c:b5:c8:e9:52:0f:8b:e4:33:75:4b:b0:5a:a9:
aa:f5:8d:80:e5:00:99:d4:74:0d:6b:51:2c:e0:01:42:a4:9a:
9f:d7:f4:23:15:8d:c7:73:69:a3:a2:c2:e1:35:ae:ba:c2:74:
a8:bb:19:7d:3f:34:d5:17:6a:bd:f0:52:6f:ac:93:c3:c7:d0:
9a:46:10:75:8a:cf:14:3c:46:dc:c9:00:25:5e:b5:cb:bd:bb:
6e:86:6e:cc:33:c1:a1:18:09:37:5a:56:39:6d:ed:e6:fd:c9:
81:0e:54:4d:af:f7:34:d7:eb:51:38:25:a3:ee:b6:20:3d:d8:
20:5b:23:e7:a4:47:46:97:47:65:df:47:c3:df:c7:1e:a1:70:
01:0e:27:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuDZCOUvDAeVrQU9NxGw2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyMWUzYjJhYzUwOTcwZmIxMjZjYmRmMTlkN2ZiMzE1ZGNj
MWM0NWQwHhcNMjUxMTExMDcwMTI5WhcNMjUxMTEyMDcwMTI5WjAzMTEwLwYDVQQD
EyhlMTU2YjA2ZmYxYmUyZTRhM2U0Y2IxM2UwOTlkZGIxODZhMmE2YzBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAob5AzxWwCY5VE7EkLLkXyGxGoSTs
7Wv0A8qxYcM7Ls+OR4xI86CxmLAjCUoHl3t7999Mwv4LaK6X5mbqpzvZTg1JNZqO
bXUXVYgMKsGevm42m5mGqYdfOdVHxZvIBjxX5h1SzlExCEQ+Pz6inbCRP2YgIRVp
PKUMDqW2PGrhek14r1dtgCJz332Rv51CNgkrTkkRfv8DIQWh8sBO+63AWkfdi2QC
08NPiPFxbGivL+9Ki7Mr166dcPJGkctqDPFvLBN8dPAxHMQ2estM+s893C83ZOKb
aWzhP7FjyZnWw44EOP5XFKRYKNIsygkn1/tCJnA4nCuoVFyMu9zC6K5MSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOFWsG/xvi5KPkyxPgmd2xhqKmwLMB8GA1UdIwQY
MBaAFLIeOyrFCXD7Emy98Z1/sxXcwcRdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2g0N0tzVUpjUHNTYkwzeG5YLXpGZHpCeEYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy81MmExZTUtODZmMS00OWY3LWE3NzMt
Y2IzZTI5YjZhZDMyLzEvc2g0N0tzVUpjUHNTYkwzeG5YLXpGZHpCeEYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy81MmExZTUtODZmMS00OWY3LWE3NzMtY2IzZTI5YjZhZDMy
LzEvc2g0N0tzVUpjUHNTYkwzeG5YLXpGZHpCeEYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEH+EImC1
TnZbeOs4wZnMVDRQnVK+47NqYjcFYMaUZ9bEzMfSMWTd62eCODiAzwTX3wm7DeOs
6yPYxZ8JllSqWurMAgaDMETW7OTG3E1bziz1WiG9tWWHcNK9kl2KHk9n7YjyY/00
OJmIUedSSYtKkYy1yOlSD4vkM3VLsFqpqvWNgOUAmdR0DWtRLOABQqSan9f0IxWN
x3Npo6LC4TWuusJ0qLsZfT801RdqvfBSb6yTw8fQmkYQdYrPFDxG3MkAJV61y727
boZuzDPBoRgJN1pWOW3t5v3JgQ5UTa/3NNfrUTglo+62ID3YIFsj56RHRpdHZd9H
w9/HHqFwAQ4nqA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:13 2025 by rpki-client