Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
File: SHaJAk8W57wukJcGwG2RkDxcfaw.mft (raw, json)
Hash identifier: RPSq5bvpvSVT8nmiHhBhqImx45BG04lGoE68xUupL9Y=
Subject key identifier: 16:B0:C2:61:69:1E:57:9B:D7:A2:3F:BA:65:B2:5D:FA:11:17:F1:62
Authority key identifier: 48:76:89:02:4F:16:E7:BC:2E:90:97:06:C0:6D:91:90:3C:5C:7D:AC
Certificate issuer: /CN=487689024f16e7bc2e909706c06d91903c5c7dac
Certificate serial: 019894B6EC7A3307052CECCF48D8922FAC13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SHaJAk8W57wukJcGwG2RkDxcfaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
Manifest number: 1445
Signing time: Sun 10 Aug 2025 16:01:12 +0000
Manifest this update: Sun 10 Aug 2025 16:01:12 +0000
Manifest next update: Mon 11 Aug 2025 16:01:12 +0000
Files and hashes: 1: SHaJAk8W57wukJcGwG2RkDxcfaw.crl (hash: 0ETWv8ddQ6TCeRBHHvYBrV9onZFuIHsvCHwacBRCzRk=)
2: SVWxJ2D9LYiMT8ED3t8Rtdt3qF0.roa (hash: CkroRGpwN+yaYir/P5uXG8yRXWWta2US1fRZkwQ1RIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/SHaJAk8W57wukJcGwG2RkDxcfaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 16:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:b6:ec:7a:33:07:05:2c:ec:cf:48:d8:92:2f:ac:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=487689024f16e7bc2e909706c06d91903c5c7dac
Validity
Not Before: Aug 10 16:01:12 2025 GMT
Not After : Aug 11 16:01:12 2025 GMT
Subject: CN=16b0c261691e579bd7a23fba65b25dfa1117f162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a1:12:51:17:f4:a6:82:f0:ff:c4:ea:28:af:
dd:e4:96:a3:74:3f:7a:70:45:71:cc:bd:14:82:5f:
3b:29:84:90:e8:8b:e3:85:1e:c9:2a:b4:6a:ff:c9:
05:68:0d:b0:33:4f:7b:83:52:1b:e7:fe:2b:af:5b:
6d:80:b8:44:06:31:3e:07:5d:9c:54:9b:66:51:5d:
8d:e9:5b:ec:93:d9:34:b1:f4:d5:29:39:79:dd:f1:
64:4f:78:d2:26:d0:a3:a8:08:c8:4f:d0:4b:d7:40:
b5:46:33:27:76:b4:46:e1:fd:42:2b:2f:38:96:55:
5f:e0:9e:26:13:16:41:88:a6:fa:f6:78:0a:b6:f4:
8e:64:ae:34:60:b9:7b:ce:0b:e6:b2:61:aa:6b:e2:
2e:e3:15:65:fb:4f:2a:ed:50:2f:9d:be:2a:1a:81:
78:b6:e9:ec:22:3f:dd:3a:4b:ba:10:47:c2:13:fb:
c1:07:d0:63:ff:25:27:37:9a:5c:26:89:df:7f:c5:
b4:1e:90:00:74:14:4a:46:e5:a6:85:29:de:ba:c7:
30:c4:72:5d:fc:e1:05:3c:a9:ee:17:a6:9b:c6:54:
8c:a9:9d:26:d0:b4:14:ed:4b:d9:40:36:64:f0:cd:
c3:66:3d:01:ff:ad:71:25:a4:93:6b:78:27:d0:83:
58:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:B0:C2:61:69:1E:57:9B:D7:A2:3F:BA:65:B2:5D:FA:11:17:F1:62
X509v3 Authority Key Identifier:
keyid:48:76:89:02:4F:16:E7:BC:2E:90:97:06:C0:6D:91:90:3C:5C:7D:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SHaJAk8W57wukJcGwG2RkDxcfaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:06:d1:b7:40:5b:98:cd:07:ab:5f:12:f9:0e:a2:a4:77:dc:
2e:c8:6e:5d:ee:c0:17:38:92:db:12:aa:97:81:13:d6:06:8b:
ff:f7:df:1a:f1:a2:67:b7:01:d4:02:52:04:b1:f8:08:fd:6d:
27:a4:53:3f:e4:1e:0e:d1:93:88:90:4b:ed:e8:20:a9:df:7a:
c1:46:2e:07:40:16:60:20:6d:ca:f0:f9:7e:f6:ae:77:7a:d9:
3b:46:ce:5c:25:d5:3d:ce:d1:cc:a3:bb:7f:fc:53:ef:71:44:
7c:ad:6c:51:7a:78:6b:f6:29:0e:fa:30:71:e0:8a:d3:7f:b1:
50:ed:ff:ed:0e:d8:dc:12:16:66:1a:cf:67:fa:22:5a:49:bd:
a4:fb:5c:86:0d:a2:fa:79:80:29:b3:14:14:86:f3:1b:88:3c:
0b:a2:23:d2:ce:dc:15:9e:7b:f2:9a:00:76:41:c7:cd:dd:04:
3f:0c:4a:2f:12:3e:24:7a:fe:cf:dc:16:ec:71:99:bf:f5:c6:
71:7f:6e:64:96:13:41:f8:3e:4c:35:4f:1a:34:38:b0:3d:66:
f7:99:9c:cb:7b:79:c2:ba:b3:ca:1b:29:86:6a:aa:72:63:38:
9f:73:cf:e2:e8:d9:c1:82:cc:ad:e8:a9:d5:fe:9f:37:1b:ea:
44:50:a7:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:46:52 2025 by rpki-client