Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
File: SHaJAk8W57wukJcGwG2RkDxcfaw.mft (raw, json)
Hash identifier: N8imkEpAaZEYcirg755JCJQZQ3kU9hesOztQKdvetzg=
Subject key identifier: F8:28:99:AE:07:A3:46:3F:0E:9A:E6:59:98:84:C3:76:3A:19:38:75
Authority key identifier: 48:76:89:02:4F:16:E7:BC:2E:90:97:06:C0:6D:91:90:3C:5C:7D:AC
Certificate issuer: /CN=487689024f16e7bc2e909706c06d91903c5c7dac
Certificate serial: 019A71B866FDF8DE751B6621E19AD8C0D5C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SHaJAk8W57wukJcGwG2RkDxcfaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
Manifest number: 153C
Signing time: Tue 11 Nov 2025 07:01:41 +0000
Manifest this update: Tue 11 Nov 2025 07:01:41 +0000
Manifest next update: Wed 12 Nov 2025 07:01:41 +0000
Files and hashes: 1: SHaJAk8W57wukJcGwG2RkDxcfaw.crl (hash: zimnmPjfaKM6hsyUf7lXmmlr645rJ6k5UA52erk7vuw=)
2: SVWxJ2D9LYiMT8ED3t8Rtdt3qF0.roa (hash: CkroRGpwN+yaYir/P5uXG8yRXWWta2US1fRZkwQ1RIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/SHaJAk8W57wukJcGwG2RkDxcfaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:66:fd:f8:de:75:1b:66:21:e1:9a:d8:c0:d5:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=487689024f16e7bc2e909706c06d91903c5c7dac
Validity
Not Before: Nov 11 07:01:41 2025 GMT
Not After : Nov 12 07:01:41 2025 GMT
Subject: CN=f82899ae07a3463f0e9ae6599884c3763a193875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:95:a9:37:2d:e8:61:bb:64:c5:36:b3:05:43:
a2:7b:44:db:b2:2d:cd:c1:3f:2e:21:f5:3a:7d:e7:
13:fd:2c:4d:ee:0a:3b:ed:d7:1d:1f:85:2d:e3:5d:
d7:f9:5b:e9:77:08:86:7b:f6:53:da:cb:5e:ad:0e:
b7:4c:83:af:f2:f6:16:f1:be:c6:34:9e:c5:60:4a:
03:30:e8:49:50:5f:fd:57:ea:c0:05:d8:34:5f:b7:
ed:8a:cb:66:3a:3e:ef:98:64:b6:50:08:e4:86:5e:
5c:96:06:3d:f9:a9:5a:be:a0:38:28:0c:4d:2d:35:
15:ab:d9:e8:bb:99:a5:c2:33:f0:87:e9:2b:46:9b:
08:63:79:d7:cb:60:aa:38:34:59:82:25:d2:c0:f5:
c6:e7:6e:3e:4c:3e:6d:fa:4c:37:8d:83:f8:63:4d:
0a:f6:70:b3:da:6e:25:7b:a5:67:0b:ef:d4:c6:b1:
42:79:46:ae:91:c9:ab:04:62:25:fe:e5:ad:6e:9d:
b0:c2:e5:27:96:79:ab:19:ae:58:c2:7d:99:7f:b0:
68:b4:b3:18:24:d9:f6:0a:be:ca:7b:51:90:cb:31:
1b:45:8b:7a:49:04:5c:0b:de:df:07:bc:9f:1f:35:
47:34:0d:e4:c2:e2:e3:e9:05:62:2a:21:d2:dd:e0:
39:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:28:99:AE:07:A3:46:3F:0E:9A:E6:59:98:84:C3:76:3A:19:38:75
X509v3 Authority Key Identifier:
keyid:48:76:89:02:4F:16:E7:BC:2E:90:97:06:C0:6D:91:90:3C:5C:7D:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SHaJAk8W57wukJcGwG2RkDxcfaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:24:7e:80:87:d8:2e:ca:9c:e6:f0:47:80:c8:76:82:e1:66:
f9:c2:34:cf:6e:87:3c:3a:29:12:f2:4f:2e:2e:24:26:89:ab:
91:24:ad:ac:64:44:59:5e:6f:f2:e2:a2:d3:f9:12:d9:cd:3e:
19:fb:69:17:b4:1d:11:32:ec:ce:14:25:ff:3a:a1:8c:e8:59:
5c:36:ca:d7:b4:bd:9f:8a:38:2f:ea:01:b0:1d:68:f2:a4:92:
06:1b:ec:83:50:6c:2e:13:b8:0d:6f:b3:d4:e5:4a:8d:f4:d2:
7e:76:fe:26:0a:6b:8e:36:84:6b:6f:c3:d1:bd:73:82:38:0e:
0b:78:db:6f:d8:a1:8f:85:93:8e:6f:31:b2:fb:ab:d2:2a:55:
5b:23:61:be:ea:65:11:03:14:81:28:86:49:5c:50:6b:78:34:
1b:54:16:b9:5b:4a:63:14:ec:c3:d2:29:75:97:f7:2d:da:37:
10:10:a0:a4:7c:37:ba:4e:2e:87:29:f9:a3:07:a3:77:a5:f8:
95:5d:0f:5c:74:96:04:72:c6:0f:20:b1:d3:44:b6:80:69:4a:
d0:3d:05:4c:2c:3f:f4:97:e3:cf:c7:bf:ff:7a:d2:56:6f:a9:
cb:4c:ae:4a:06:62:4c:4f:62:1d:d9:68:e6:de:d8:d7:c4:d4:
32:e7:fc:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:44:21 2025 by rpki-client