Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
File: SHaJAk8W57wukJcGwG2RkDxcfaw.mft (raw, json)
Hash identifier: 65fjD7rIAjJTxhs6LmKeJek/Kc/D3/7BEaUpSl5pF+I=
Subject key identifier: FA:D4:AA:70:7C:68:E7:74:33:0C:0B:96:98:9A:26:BE:D0:2F:74:18
Authority key identifier: 48:76:89:02:4F:16:E7:BC:2E:90:97:06:C0:6D:91:90:3C:5C:7D:AC
Certificate issuer: /CN=487689024f16e7bc2e909706c06d91903c5c7dac
Certificate serial: 0198D6607451747C35C2BC563A0CEDACC8B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SHaJAk8W57wukJcGwG2RkDxcfaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
Manifest number: 1467
Signing time: Sat 23 Aug 2025 10:01:42 +0000
Manifest this update: Sat 23 Aug 2025 10:01:42 +0000
Manifest next update: Sun 24 Aug 2025 10:01:42 +0000
Files and hashes: 1: SHaJAk8W57wukJcGwG2RkDxcfaw.crl (hash: GwcT7T+Tk2aYNomi5IimptIwldXoUdOshLxEGFCciSQ=)
2: SVWxJ2D9LYiMT8ED3t8Rtdt3qF0.roa (hash: CkroRGpwN+yaYir/P5uXG8yRXWWta2US1fRZkwQ1RIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/SHaJAk8W57wukJcGwG2RkDxcfaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:74:51:74:7c:35:c2:bc:56:3a:0c:ed:ac:c8:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=487689024f16e7bc2e909706c06d91903c5c7dac
Validity
Not Before: Aug 23 10:01:42 2025 GMT
Not After : Aug 24 10:01:42 2025 GMT
Subject: CN=fad4aa707c68e774330c0b96989a26bed02f7418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8b:29:d1:88:7a:59:b5:0f:41:d4:99:e5:56:
e9:29:1d:78:fe:01:21:33:b9:0f:39:67:25:23:cf:
c7:f5:97:7b:46:a3:bf:d0:51:88:58:11:fa:94:4d:
88:91:63:df:87:be:f7:82:f8:d4:c1:98:f0:3e:9e:
c6:c3:3e:16:2d:86:59:2a:30:f9:36:b9:d4:47:0e:
c1:d7:4c:b3:09:01:78:ae:7b:21:c5:a5:aa:ee:5e:
a2:4e:d3:f2:38:1e:66:de:93:23:7b:15:ba:d6:34:
c1:81:c4:8e:93:74:65:00:09:06:b6:37:d9:30:3e:
19:d5:c7:ba:62:0d:5a:dc:80:53:c1:07:a0:af:42:
67:a4:bb:f7:7e:25:c5:9a:e0:2b:99:7f:06:47:e0:
64:60:fc:67:74:cc:12:15:c6:85:c7:66:bd:ac:46:
0b:4f:78:1e:cd:7e:f7:07:c9:65:89:c2:61:3d:b2:
47:f0:67:08:93:90:16:d0:db:aa:f1:48:28:54:ec:
02:ff:b8:d3:ab:e9:bb:de:ac:40:71:84:84:ea:35:
5e:3a:c8:b2:b1:10:a8:ba:70:58:e3:ae:0e:46:a8:
f7:ab:e5:4b:d4:a9:0e:83:5f:99:de:68:c1:3c:4c:
31:65:d5:d9:2b:94:48:73:34:f4:66:bf:81:47:88:
86:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:D4:AA:70:7C:68:E7:74:33:0C:0B:96:98:9A:26:BE:D0:2F:74:18
X509v3 Authority Key Identifier:
keyid:48:76:89:02:4F:16:E7:BC:2E:90:97:06:C0:6D:91:90:3C:5C:7D:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SHaJAk8W57wukJcGwG2RkDxcfaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:e1:92:26:97:e1:4d:f8:89:9e:47:ea:8f:a9:1c:a0:0e:4c:
08:f6:eb:99:6b:8e:aa:8d:81:a1:b9:5a:b1:f6:fc:63:e3:51:
d3:9c:57:72:3f:db:a2:38:89:e8:4a:c2:47:65:c0:2d:5c:fb:
45:63:46:08:9a:5b:09:f9:95:82:d2:12:33:7c:d6:21:2b:8c:
9b:21:dd:ec:e3:f3:53:2e:46:da:b8:2c:4e:e2:57:48:4f:8f:
a0:22:1a:ba:43:66:22:b4:6d:9f:d4:9a:48:10:df:21:68:85:
c2:de:99:51:c8:6d:af:da:21:fb:b6:4e:cb:77:00:e8:b9:d3:
54:36:3c:40:d5:40:a3:d0:0b:2a:f4:db:9c:f4:88:41:f1:a5:
46:9f:3c:bf:e7:ca:8a:8e:e9:d7:62:bf:c8:de:b0:35:5b:63:
56:04:5b:ef:0c:ca:a2:b0:a5:74:1f:fe:bd:5e:54:be:2d:c4:
a4:f4:7e:02:2e:5d:f8:6a:d1:28:f3:fc:a2:5c:3a:34:e5:2a:
8f:28:0a:4b:32:ed:ae:1e:e5:08:07:f9:a6:76:78:b7:d9:99:
a5:a0:18:1a:ab:a9:b2:66:9f:81:53:7a:64:12:1c:a6:f1:18:
5b:41:0a:fb:8c:60:b8:08:40:2c:24:b6:b7:fb:6a:bf:1e:4a:
cd:18:58:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:11:11 2025 by rpki-client