Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/f21883-177d-4083-bfb7-6b9805286100/1/SHYmY7ST8OpZ-v34R6AYuzipoYY.mft
File: SHYmY7ST8OpZ-v34R6AYuzipoYY.mft (raw, json)
Hash identifier: Kx1AuJJMZ8ekCh7TKTly1LcWUzBfeYxr09+RuDP/9Gs=
Subject key identifier: 57:34:C1:5F:7A:9D:C8:86:61:A8:08:E0:64:49:10:A6:A7:B8:28:74
Authority key identifier: 48:76:26:63:B4:93:F0:EA:59:FA:FD:F8:47:A0:18:BB:38:A9:A1:86
Certificate issuer: /CN=48762663b493f0ea59fafdf847a018bb38a9a186
Certificate serial: 0199FBEB74ED244671A90F25E723D2AB187D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SHYmY7ST8OpZ-v34R6AYuzipoYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/f21883-177d-4083-bfb7-6b9805286100/1/SHYmY7ST8OpZ-v34R6AYuzipoYY.mft
Manifest number: 0A9E
Signing time: Sun 19 Oct 2025 10:02:16 +0000
Manifest this update: Sun 19 Oct 2025 10:02:16 +0000
Manifest next update: Mon 20 Oct 2025 10:02:16 +0000
Files and hashes: 1: SHYmY7ST8OpZ-v34R6AYuzipoYY.crl (hash: 6F3bprRiev6Y4uTDEXnpB6EY+yJLeXuEeeyZqH8tbzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/f21883-177d-4083-bfb7-6b9805286100/1/SHYmY7ST8OpZ-v34R6AYuzipoYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/f21883-177d-4083-bfb7-6b9805286100/1/SHYmY7ST8OpZ-v34R6AYuzipoYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SHYmY7ST8OpZ-v34R6AYuzipoYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:74:ed:24:46:71:a9:0f:25:e7:23:d2:ab:18:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48762663b493f0ea59fafdf847a018bb38a9a186
Validity
Not Before: Oct 19 10:02:16 2025 GMT
Not After : Oct 20 10:02:16 2025 GMT
Subject: CN=5734c15f7a9dc88661a808e0644910a6a7b82874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:19:6f:c4:a8:45:41:a8:93:5d:94:9b:d9:b0:
eb:8a:0f:75:f4:65:ed:a4:b3:e6:63:78:9c:73:63:
d1:ee:1a:a2:f2:17:95:fe:cd:e3:9e:63:77:51:84:
26:2a:ec:60:0f:b5:24:49:48:4e:58:20:6d:72:9b:
ac:30:1a:05:77:b4:d0:bd:8b:c4:ed:08:da:ed:a0:
3f:8c:9e:5a:cb:50:07:7c:40:17:31:3c:18:e6:2e:
05:4c:3a:39:82:52:36:3e:86:cc:6a:a7:8e:c2:01:
25:a2:94:50:ae:e3:7f:27:d4:5c:a2:6f:eb:09:43:
ab:18:cb:07:be:8e:c4:9d:26:06:a7:17:2a:a7:d2:
42:a7:68:18:87:9d:57:20:c9:e1:64:8b:22:bd:e8:
15:26:cf:c2:ed:4b:ac:39:f8:f4:4a:c6:4d:02:82:
90:56:2d:95:83:54:34:95:17:59:14:e2:a2:2e:49:
1e:99:6e:96:61:30:cc:a0:3e:24:01:ef:8a:ff:e3:
50:60:cf:12:cf:53:fc:23:47:18:8a:9f:fe:18:73:
f7:3a:56:a5:75:3e:57:70:7e:4b:7b:7b:10:bb:23:
24:e4:a3:3c:37:35:02:98:42:7a:d1:f3:b8:d3:d6:
1f:a3:3b:34:e0:5c:a1:63:52:d9:ea:b2:40:9c:e4:
7f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:34:C1:5F:7A:9D:C8:86:61:A8:08:E0:64:49:10:A6:A7:B8:28:74
X509v3 Authority Key Identifier:
keyid:48:76:26:63:B4:93:F0:EA:59:FA:FD:F8:47:A0:18:BB:38:A9:A1:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SHYmY7ST8OpZ-v34R6AYuzipoYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f21883-177d-4083-bfb7-6b9805286100/1/SHYmY7ST8OpZ-v34R6AYuzipoYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f21883-177d-4083-bfb7-6b9805286100/1/SHYmY7ST8OpZ-v34R6AYuzipoYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:bd:6c:c0:ee:64:b1:aa:55:d8:03:ab:31:fa:2a:c9:65:f1:
de:12:7c:07:25:05:7b:0a:19:f4:6f:c9:8f:9b:c3:7a:6c:a4:
bd:b9:12:db:1a:37:a3:a9:99:b2:22:2d:69:ae:36:08:18:31:
d3:b1:20:80:04:c6:92:12:8f:5b:28:44:16:0b:9b:cb:37:d7:
e4:6b:40:89:d1:d7:8d:4e:5a:9e:55:54:f3:57:3c:6d:bd:69:
0e:4c:42:ec:fa:db:40:53:f5:64:a8:bb:85:25:66:3c:a0:6a:
99:dc:8b:f4:71:36:aa:b0:da:dc:66:d3:81:bb:75:48:02:0c:
18:8e:ea:14:98:53:dd:e7:93:82:09:2a:36:c2:28:4b:6b:a1:
5e:97:11:25:f3:cb:23:4c:23:1e:01:23:14:ee:64:14:9d:a5:
ab:c8:70:0c:79:f0:ab:dc:0a:de:eb:e4:6c:48:b4:ea:fb:ed:
e8:4a:fb:c6:39:d3:9c:c2:3d:6a:03:74:1e:66:96:2b:68:f7:
34:6f:a5:ca:37:7f:2c:5f:8c:a4:a8:1b:04:48:78:f1:1c:39:
b8:c0:80:72:a7:88:44:12:02:a2:54:7f:0f:ea:71:bd:dd:aa:
cd:5e:7b:f1:ce:7f:e6:55:61:3a:5f:79:e1:e3:10:67:a1:53:
b9:df:27:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:53 2025 by rpki-client