Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
File: SHaJAk8W57wukJcGwG2RkDxcfaw.mft (raw, json)
Hash identifier: IeFAR5bRFQm3n/2jTZWWbB7+NtF08vlUSFpFW+09d/M=
Subject key identifier: E0:FA:C0:5D:9D:D5:5B:81:FD:25:AB:A3:68:85:05:E5:F5:9E:E3:D1
Authority key identifier: 48:76:89:02:4F:16:E7:BC:2E:90:97:06:C0:6D:91:90:3C:5C:7D:AC
Certificate issuer: /CN=487689024f16e7bc2e909706c06d91903c5c7dac
Certificate serial: 019A4EF40272836EF069180927F183553954
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SHaJAk8W57wukJcGwG2RkDxcfaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
Manifest number: 152A
Signing time: Tue 04 Nov 2025 13:00:05 +0000
Manifest this update: Tue 04 Nov 2025 13:00:05 +0000
Manifest next update: Wed 05 Nov 2025 13:00:05 +0000
Files and hashes: 1: SHaJAk8W57wukJcGwG2RkDxcfaw.crl (hash: HcJU3e8hc6C0Hedc1xgh/nJXzo355iere0vRUui2cHE=)
2: SVWxJ2D9LYiMT8ED3t8Rtdt3qF0.roa (hash: CkroRGpwN+yaYir/P5uXG8yRXWWta2US1fRZkwQ1RIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/SHaJAk8W57wukJcGwG2RkDxcfaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:02:72:83:6e:f0:69:18:09:27:f1:83:55:39:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=487689024f16e7bc2e909706c06d91903c5c7dac
Validity
Not Before: Nov 4 13:00:05 2025 GMT
Not After : Nov 5 13:00:05 2025 GMT
Subject: CN=e0fac05d9dd55b81fd25aba3688505e5f59ee3d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:de:d3:61:04:87:35:f3:ad:33:5e:ac:28:b2:
6e:c4:5e:7e:20:d0:b4:04:f3:c0:77:98:aa:43:3c:
f3:aa:27:48:d5:26:a5:da:29:26:f1:d6:7c:b1:01:
17:68:92:56:57:ae:a1:6a:fe:67:18:fd:6a:06:6e:
38:4d:c1:5d:f5:44:f6:bb:eb:9e:c4:93:4d:62:3b:
30:4d:ec:d1:44:64:63:57:bd:f4:d1:76:15:db:91:
6d:83:ec:60:91:b2:25:1d:07:69:25:8e:4a:0f:69:
9d:45:41:96:91:4e:82:e9:7f:d0:9e:f5:cd:58:61:
d3:4d:f1:ca:00:f5:31:e8:25:a9:76:49:0c:d5:c1:
01:35:b5:3e:51:0c:9e:78:89:7d:e5:d5:0d:3d:59:
06:0b:44:f6:c7:31:c6:19:08:dc:3c:9c:ba:61:ad:
58:f0:6d:91:58:f4:93:2c:0c:63:bc:fa:e0:e9:d7:
85:c0:7e:66:8b:b8:77:5d:bf:e4:81:67:8b:10:68:
29:fc:f5:55:c6:e1:7f:c6:1d:4d:10:34:67:c3:bc:
72:6f:47:0e:48:af:f2:6c:a7:53:1b:05:c8:aa:f5:
45:8e:3a:e8:ad:bb:ae:8d:f7:fa:a5:6e:a9:53:bd:
e9:d5:bf:8a:22:40:0a:a2:fe:52:b0:88:ca:8f:62:
84:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:FA:C0:5D:9D:D5:5B:81:FD:25:AB:A3:68:85:05:E5:F5:9E:E3:D1
X509v3 Authority Key Identifier:
keyid:48:76:89:02:4F:16:E7:BC:2E:90:97:06:C0:6D:91:90:3C:5C:7D:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SHaJAk8W57wukJcGwG2RkDxcfaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:2d:a3:34:b0:f4:87:d2:e3:6d:56:36:60:31:b1:22:50:6a:
bd:1d:6f:59:8b:cb:bc:c6:eb:11:cc:39:cc:c5:a2:0d:d0:70:
88:53:c5:43:57:71:6a:e3:34:8e:b7:84:5a:2c:d4:04:13:9e:
c4:79:3b:65:ba:1b:bf:6a:86:0b:fa:25:90:c0:36:42:0b:6e:
71:a6:bd:de:60:7d:87:8a:30:7a:cf:a1:c3:7b:26:5a:21:98:
2a:3e:4e:78:69:3c:4c:b9:18:25:3a:8b:36:6b:74:a1:10:2d:
01:11:61:63:07:93:6a:c7:81:ef:0b:64:5e:d6:26:5f:fa:66:
83:61:11:84:3a:f9:3f:df:be:8b:c7:3f:61:cc:b2:79:ec:4b:
48:af:69:9f:23:00:d7:1d:d5:28:a5:21:b2:a7:c8:95:a7:c6:
c1:fb:7e:af:11:e2:5f:92:54:54:85:43:0c:1f:3a:4b:e6:c2:
a6:eb:5f:ef:1f:03:a8:19:fe:08:3a:be:ad:72:12:cf:49:03:
51:84:da:f6:a2:3a:e4:c3:aa:60:a7:7a:dd:38:54:df:d2:34:
08:3c:be:04:30:f7:6f:54:37:e1:bc:f2:7e:de:97:29:9a:e3:
3f:d9:9f:9e:0a:c1:5e:45:30:2e:a2:a3:08:1b:ad:85:c7:0a:
d6:21:0f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:58:11 2025 by rpki-client