Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/63c9db-8ab9-4c1e-af27-ed28851ecb76/1/Sh0gvnfhIjIyPBQi-1GY_qAIYDQ.mft
File: Sh0gvnfhIjIyPBQi-1GY_qAIYDQ.mft (raw, json)
Hash identifier: U8K1Q0aiFl3Iu19zS5PeZUhBq3+iaQqjqW15iOWF10M=
Subject key identifier: 37:73:72:E3:9F:58:83:C0:53:D5:FB:3E:EA:B3:21:36:CD:4F:AE:E5
Authority key identifier: 4A:1D:20:BE:77:E1:22:32:32:3C:14:22:FB:51:98:FE:A0:08:60:34
Certificate issuer: /CN=4a1d20be77e12232323c1422fb5198fea0086034
Certificate serial: 019A4F2B1FFDC327E3790E027448ABA3C310
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sh0gvnfhIjIyPBQi-1GY_qAIYDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/63c9db-8ab9-4c1e-af27-ed28851ecb76/1/Sh0gvnfhIjIyPBQi-1GY_qAIYDQ.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 14:00:17 +0000
Manifest this update: Tue 04 Nov 2025 14:00:17 +0000
Manifest next update: Wed 05 Nov 2025 14:00:17 +0000
Files and hashes: 1: Sh0gvnfhIjIyPBQi-1GY_qAIYDQ.crl (hash: vXz4WNLcf7bOuAX7qznklDgGffs8+cCDirdfRGrpGLw=)
2: mN2qB1BO4S5r9HWkXJU36eJQAJo.roa (hash: CEQM9W3lMs7LPoWAqhYjN1IkeHCfM/C5tJypbGgHYt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/63c9db-8ab9-4c1e-af27-ed28851ecb76/1/Sh0gvnfhIjIyPBQi-1GY_qAIYDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/63c9db-8ab9-4c1e-af27-ed28851ecb76/1/Sh0gvnfhIjIyPBQi-1GY_qAIYDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sh0gvnfhIjIyPBQi-1GY_qAIYDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:1f:fd:c3:27:e3:79:0e:02:74:48:ab:a3:c3:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a1d20be77e12232323c1422fb5198fea0086034
Validity
Not Before: Nov 4 14:00:17 2025 GMT
Not After : Nov 5 14:00:17 2025 GMT
Subject: CN=377372e39f5883c053d5fb3eeab32136cd4faee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:11:28:fa:46:8b:da:85:6c:e5:ad:0f:3c:de:
a3:e6:59:aa:b9:7f:de:14:5e:b0:87:f9:4d:af:c7:
9f:89:04:fc:f9:89:17:95:13:6e:2a:dc:38:7c:65:
27:ae:46:92:ab:71:c7:64:38:13:0f:d0:52:21:c7:
42:8c:20:90:ba:22:e1:ff:49:12:79:70:1e:41:ce:
97:6f:1f:53:da:36:f8:6d:1e:ea:9a:fe:dd:28:5f:
6e:fa:d6:33:0b:b1:ea:70:ce:be:99:01:ba:f3:37:
d2:29:f1:55:63:f6:9d:b8:72:44:6b:35:bd:ea:5f:
bc:a1:72:59:cb:89:bd:22:db:7d:28:ed:43:e0:9e:
57:13:de:d7:1c:ef:96:49:90:db:41:21:a2:89:ff:
6e:d4:7b:74:c7:38:82:28:27:0e:0b:9b:f0:d5:a3:
49:39:ec:80:50:0a:46:53:12:ff:30:4f:a6:d0:8c:
0a:f0:c6:58:9f:40:f5:a1:60:03:29:f3:51:66:b0:
66:f3:8a:17:4e:19:55:70:85:e4:b3:8c:d2:ad:45:
28:b7:3e:35:bc:e1:9d:b6:39:00:ee:9e:d0:f9:23:
b9:98:4d:27:17:c5:ef:31:f3:1b:09:ae:b2:12:84:
d2:94:ac:25:8e:6f:44:20:b4:9b:13:28:34:39:e7:
30:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:73:72:E3:9F:58:83:C0:53:D5:FB:3E:EA:B3:21:36:CD:4F:AE:E5
X509v3 Authority Key Identifier:
keyid:4A:1D:20:BE:77:E1:22:32:32:3C:14:22:FB:51:98:FE:A0:08:60:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sh0gvnfhIjIyPBQi-1GY_qAIYDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/63c9db-8ab9-4c1e-af27-ed28851ecb76/1/Sh0gvnfhIjIyPBQi-1GY_qAIYDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/63c9db-8ab9-4c1e-af27-ed28851ecb76/1/Sh0gvnfhIjIyPBQi-1GY_qAIYDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:d3:b8:5e:0f:4f:67:58:52:3a:5b:1c:de:bd:b7:bd:5e:96:
22:81:c1:57:9b:9d:ad:3d:ad:ab:ab:78:0e:aa:f0:a6:bc:94:
90:ab:2c:11:27:34:fd:2a:0a:8d:04:d4:ff:21:3a:28:0e:91:
e0:cc:96:b5:71:c5:44:e2:78:2a:83:2b:55:44:cd:41:90:43:
92:5b:d7:e9:26:cf:ae:27:51:5f:67:f5:9d:18:8b:ae:1d:a9:
04:2c:ac:87:e5:70:c9:ad:df:f5:15:e1:d3:2f:ed:de:74:6b:
74:71:bb:d8:59:95:ce:bd:2c:43:d9:a0:82:21:8f:95:6d:f9:
d5:42:ea:92:f9:16:2d:56:b8:9c:f0:29:9c:2f:41:ed:e1:c3:
2f:bb:79:80:c6:25:a4:f4:0d:01:7a:60:d2:b2:ac:f4:37:cd:
20:27:99:dd:8f:9e:79:0a:12:72:0d:6b:ac:77:cc:35:12:72:
7c:16:30:47:e7:93:5a:7e:5e:cd:99:1d:43:a8:26:22:9f:fe:
7e:62:9c:85:1e:ff:de:6c:af:69:6d:d7:4d:ae:4b:dc:0b:2c:
e2:33:1a:8a:c6:b0:2e:06:61:48:aa:7f:fc:7c:28:6a:b2:33:
e3:ea:93:ea:6a:5e:95:f7:8b:53:1c:d5:f7:39:40:4f:d4:12:
3b:24:6e:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPKx/9wyfjeQ4CdEiro8MQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhMWQyMGJlNzdlMTIyMzIzMjNjMTQyMmZiNTE5OGZlYTAw
ODYwMzQwHhcNMjUxMTA0MTQwMDE3WhcNMjUxMTA1MTQwMDE3WjAzMTEwLwYDVQQD
EygzNzczNzJlMzlmNTg4M2MwNTNkNWZiM2VlYWIzMjEzNmNkNGZhZWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhEo+kaL2oVs5a0PPN6j5lmquX/e
FF6wh/lNr8efiQT8+YkXlRNuKtw4fGUnrkaSq3HHZDgTD9BSIcdCjCCQuiLh/0kS
eXAeQc6Xbx9T2jb4bR7qmv7dKF9u+tYzC7HqcM6+mQG68zfSKfFVY/aduHJEazW9
6l+8oXJZy4m9Itt9KO1D4J5XE97XHO+WSZDbQSGiif9u1Ht0xziCKCcOC5vw1aNJ
OeyAUApGUxL/ME+m0IwK8MZYn0D1oWADKfNRZrBm84oXThlVcIXks4zSrUUotz41
vOGdtjkA7p7Q+SO5mE0nF8XvMfMbCa6yEoTSlKwljm9EILSbEyg0OecwbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDdzcuOfWIPAU9X7PuqzITbNT67lMB8GA1UdIwQY
MBaAFEodIL534SIyMjwUIvtRmP6gCGA0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2gwZ3ZuZmhJakl5UEJRaS0xR1lfcUFJWURRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi82M2M5ZGItOGFiOS00YzFlLWFmMjct
ZWQyODg1MWVjYjc2LzEvU2gwZ3ZuZmhJakl5UEJRaS0xR1lfcUFJWURRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi82M2M5ZGItOGFiOS00YzFlLWFmMjctZWQyODg1MWVjYjc2
LzEvU2gwZ3ZuZmhJakl5UEJRaS0xR1lfcUFJWURRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEtO4Xg9P
Z1hSOlsc3r23vV6WIoHBV5udrT2tq6t4DqrwpryUkKssESc0/SoKjQTU/yE6KA6R
4MyWtXHFROJ4KoMrVUTNQZBDklvX6SbPridRX2f1nRiLrh2pBCysh+Vwya3f9RXh
0y/t3nRrdHG72FmVzr0sQ9mggiGPlW351ULqkvkWLVa4nPApnC9B7eHDL7t5gMYl
pPQNAXpg0rKs9DfNICeZ3Y+eeQoScg1rrHfMNRJyfBYwR+eTWn5ezZkdQ6gmIp/+
fmKchR7/3myvaW3XTa5L3Ass4jMaisawLgZhSKp//HwoarIz4+qT6mpelfeLUxzV
9zlAT9QSOyRuzQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:18:26 2025 by rpki-client