Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft
File: SHJHQsP1ThebguavjjPg2dL71NU.mft (raw, json)
Hash identifier: kMxpHS7x5gGWjZbZRwyuIu4N7zpAK2RWGF21gfXdpZc=
Subject key identifier: 4F:97:DB:15:C1:37:19:57:0E:99:35:8C:0F:D9:93:DE:07:E2:88:36
Authority key identifier: 48:72:47:42:C3:F5:4E:17:9B:82:E6:AF:8E:33:E0:D9:D2:FB:D4:D5
Certificate issuer: /CN=48724742c3f54e179b82e6af8e33e0d9d2fbd4d5
Certificate serial: 0199FB0ED04BFE134E1BA15AE8806B84DCD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 06:01:15 +0000
Manifest this update: Sun 19 Oct 2025 06:01:15 +0000
Manifest next update: Mon 20 Oct 2025 06:01:15 +0000
Files and hashes: 1: SHJHQsP1ThebguavjjPg2dL71NU.crl (hash: 8D47N7xsEJ8/D6I9fpad5/nLhWuPPqrubZSTpopV2ss=)
2: fw6EErcKUkE6wVnp4BcQXOeheJE.roa (hash: X3Re7oVemXlG1F0GxrgY8aRLn+cfxjtelXf5RJOURd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:d0:4b:fe:13:4e:1b:a1:5a:e8:80:6b:84:dc:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48724742c3f54e179b82e6af8e33e0d9d2fbd4d5
Validity
Not Before: Oct 19 06:01:15 2025 GMT
Not After : Oct 20 06:01:15 2025 GMT
Subject: CN=4f97db15c13719570e99358c0fd993de07e28836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:00:d5:ef:e5:3e:77:b3:b4:cb:3a:b3:89:32:
1b:9d:09:a3:06:9a:24:ce:b2:e2:b2:dc:e8:6e:ef:
5d:7b:4e:a7:25:f4:96:9e:57:03:38:cf:14:d8:39:
02:cc:d7:b6:ab:88:93:18:ef:d4:17:c0:11:1f:4b:
11:31:8c:bd:3c:79:9c:19:70:6d:ae:74:b6:90:44:
fc:f2:19:ed:85:57:13:9d:e6:0e:e2:b1:d7:83:d4:
a1:79:ec:e0:f3:a7:36:f6:50:51:bc:5d:a3:9f:b9:
7b:da:1e:c1:e7:79:e7:90:58:74:1a:0d:28:df:16:
12:bf:95:1f:0d:3a:8a:cf:59:33:9f:6e:00:37:4c:
00:ed:ad:0a:87:72:25:4c:4e:ca:68:76:b4:10:c7:
f8:f4:47:29:1e:9f:e2:e9:c6:53:8d:29:69:6d:77:
95:22:9c:f3:86:7c:0b:56:f9:c6:0b:20:96:92:54:
c9:14:70:64:5a:28:be:e9:db:b5:ce:35:a8:ef:bf:
a7:09:90:bb:bd:2a:d7:8a:cb:db:71:3d:30:d1:0d:
76:ee:d9:83:7f:da:36:55:76:93:55:db:95:ab:24:
67:bf:0c:5e:8a:28:39:49:f0:21:a2:85:ac:59:40:
6c:07:5a:3d:7f:dc:86:5c:5a:d1:b8:29:62:f0:36:
b0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:97:DB:15:C1:37:19:57:0E:99:35:8C:0F:D9:93:DE:07:E2:88:36
X509v3 Authority Key Identifier:
keyid:48:72:47:42:C3:F5:4E:17:9B:82:E6:AF:8E:33:E0:D9:D2:FB:D4:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:01:8b:da:ed:48:eb:84:e0:aa:11:6d:22:b3:f7:9b:4a:6b:
bc:dc:52:e7:22:ab:0e:e4:64:3f:b5:90:1a:36:d0:88:01:36:
d4:bd:f6:96:e4:d4:87:e5:72:68:77:fe:f0:c4:a1:a5:3e:79:
26:10:3d:73:b6:03:e9:9a:29:48:e6:0c:48:91:9a:19:6a:0b:
35:db:88:43:fe:49:60:d9:63:49:74:28:07:bf:24:e0:f8:8e:
82:80:b7:e5:d8:50:4c:58:ef:83:2b:c4:ab:fe:67:d4:6e:be:
b9:3b:93:07:c6:25:da:c9:5d:d2:16:7c:09:5d:a1:9c:38:5b:
ed:85:5d:74:26:c5:81:7e:8b:4c:b2:fa:da:cd:ff:13:10:6f:
96:e5:93:11:b5:fc:ad:c7:5e:e0:bb:c2:ab:ec:51:f5:b2:9b:
99:7b:01:1c:1c:f3:bd:21:6f:6f:d1:24:2d:a0:ef:74:d9:e5:
ef:80:18:b0:5d:a0:13:fe:1a:49:0e:be:1d:b2:b8:66:18:f8:
08:a8:3c:d3:8c:a6:0e:12:5e:14:52:21:81:3e:a7:3b:a9:4b:
49:6b:06:37:08:82:15:f2:3c:00:71:41:88:7b:3e:89:90:df:
98:f4:a7:45:37:29:de:89:b0:d6:d3:81:c7:21:0f:26:d8:ce:
1c:cb:ff:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:52:50 2025 by rpki-client