Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft
File: SHJHQsP1ThebguavjjPg2dL71NU.mft (raw, json)
Hash identifier: VLc7UMq2G0jtW0UMUL4IaXrcpKikrEyxpDCoi2/pXHg=
Subject key identifier: 88:B8:D7:23:EB:AE:C5:13:F5:2C:27:3A:84:5A:E5:E9:4F:7F:9A:1C
Authority key identifier: 48:72:47:42:C3:F5:4E:17:9B:82:E6:AF:8E:33:E0:D9:D2:FB:D4:D5
Certificate issuer: /CN=48724742c3f54e179b82e6af8e33e0d9d2fbd4d5
Certificate serial: 019A258AD4E1FE80BC135894D0303CED93A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft
Manifest number: 16F9
Signing time: Mon 27 Oct 2025 12:00:46 +0000
Manifest this update: Mon 27 Oct 2025 12:00:46 +0000
Manifest next update: Tue 28 Oct 2025 12:00:46 +0000
Files and hashes: 1: SHJHQsP1ThebguavjjPg2dL71NU.crl (hash: uqGWGIAY5qi5jivkXjkM40tWAkFiq27G17ChD1dHFk0=)
2: fw6EErcKUkE6wVnp4BcQXOeheJE.roa (hash: X3Re7oVemXlG1F0GxrgY8aRLn+cfxjtelXf5RJOURd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 12:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:8a:d4:e1:fe:80:bc:13:58:94:d0:30:3c:ed:93:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48724742c3f54e179b82e6af8e33e0d9d2fbd4d5
Validity
Not Before: Oct 27 12:00:46 2025 GMT
Not After : Oct 28 12:00:46 2025 GMT
Subject: CN=88b8d723ebaec513f52c273a845ae5e94f7f9a1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:1b:8c:a1:bb:13:57:53:2d:46:30:1e:29:01:
9f:b7:80:c9:ff:f0:40:eb:7c:31:58:b9:d2:cd:9e:
e9:f5:fe:0e:71:fd:87:33:55:2b:72:98:21:ea:80:
f7:e5:02:2a:d5:16:7d:01:60:92:9e:bd:4a:0f:47:
4a:34:ea:72:b1:fc:d6:4e:2f:d2:65:96:3f:17:94:
ab:1b:f5:8c:4e:f9:8a:8d:b4:92:da:ba:2c:e1:1d:
23:08:19:eb:70:14:f6:e3:98:05:d4:44:8a:46:5a:
a5:22:91:d6:32:b5:8c:c0:4e:42:61:93:b7:30:ac:
a8:40:74:49:57:7c:af:27:aa:ce:14:d1:71:93:ed:
5d:54:9e:38:8f:76:07:89:6e:59:56:87:0a:cc:1e:
a6:d9:09:2a:e8:b1:4d:d2:32:9d:cb:f8:00:09:b9:
b1:11:d2:1a:2a:ab:bd:17:e0:1c:0e:f7:b4:29:43:
7c:1f:33:4a:c4:4f:a1:6c:a3:35:2d:9c:cb:30:f6:
bd:ab:f6:85:a4:cf:d7:9c:51:c5:a5:a8:b1:b8:21:
4f:36:96:72:5a:49:c3:7a:c2:32:46:b4:b8:bb:2e:
95:31:84:6e:0a:de:a5:0e:17:9c:03:3b:a9:30:d5:
33:68:f8:9b:49:42:a0:82:8b:81:76:29:24:54:b4:
b6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:B8:D7:23:EB:AE:C5:13:F5:2C:27:3A:84:5A:E5:E9:4F:7F:9A:1C
X509v3 Authority Key Identifier:
keyid:48:72:47:42:C3:F5:4E:17:9B:82:E6:AF:8E:33:E0:D9:D2:FB:D4:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:c8:4f:c6:25:e7:84:bb:02:e6:8c:0c:af:87:f8:45:5c:27:
16:3d:fb:46:af:95:cc:e3:f9:c2:a4:b6:92:d1:d9:67:8c:d2:
1b:88:c7:45:ec:c5:b6:c7:2b:f3:1c:32:4e:a5:3f:60:e9:2c:
16:b1:68:59:06:bb:e2:52:c1:3f:28:53:14:89:ac:80:71:a6:
65:51:24:ee:95:e0:f4:a1:f3:d6:b1:4a:87:00:6c:c7:a0:f8:
cd:16:1a:ae:81:d6:92:d1:86:22:c6:81:b6:a1:b9:66:bf:05:
ea:35:c7:19:1d:2c:8e:a9:51:48:f7:1f:da:f7:b3:40:6b:b8:
ca:94:e7:7a:63:9d:79:5c:76:02:0e:87:fd:ad:03:5f:bc:f7:
00:ab:f8:05:f5:fe:4c:40:f2:46:1e:6a:e2:4e:6f:60:df:f8:
ae:8a:68:8f:7e:1c:63:b9:26:c7:37:c6:da:a7:0e:ca:ad:e6:
73:bd:d0:3f:61:25:77:9c:63:c6:d8:29:ff:e7:0c:6a:45:12:
46:9e:a4:27:4f:32:b6:18:bc:0e:10:02:90:91:53:a2:80:28:
f7:10:f2:eb:5a:46:95:2d:6e:5a:7e:c9:ca:4f:dc:80:7e:8d:
fb:33:9d:85:e3:8e:3b:fc:4c:d4:ed:dd:df:d5:03:9f:23:5f:
b2:a6:b7:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 15:37:26 2025 by rpki-client