Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/f21883-177d-4083-bfb7-6b9805286100/1/SHYmY7ST8OpZ-v34R6AYuzipoYY.mft
File: SHYmY7ST8OpZ-v34R6AYuzipoYY.mft (raw, json)
Hash identifier: dyV48Zb6uUQ3d5p4j376uTe5CfzjhuIJASgCIJZsPAQ=
Subject key identifier: D4:81:A0:D4:F6:EB:0B:CE:BF:FF:D9:3D:1F:3A:9D:E0:30:4C:4E:C7
Authority key identifier: 48:76:26:63:B4:93:F0:EA:59:FA:FD:F8:47:A0:18:BB:38:A9:A1:86
Certificate issuer: /CN=48762663b493f0ea59fafdf847a018bb38a9a186
Certificate serial: 019A4EF4BA0ED8307AC053894546BEA44ECD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SHYmY7ST8OpZ-v34R6AYuzipoYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/f21883-177d-4083-bfb7-6b9805286100/1/SHYmY7ST8OpZ-v34R6AYuzipoYY.mft
Manifest number: 0AC9
Signing time: Tue 04 Nov 2025 13:00:52 +0000
Manifest this update: Tue 04 Nov 2025 13:00:52 +0000
Manifest next update: Wed 05 Nov 2025 13:00:52 +0000
Files and hashes: 1: SHYmY7ST8OpZ-v34R6AYuzipoYY.crl (hash: 0LlLbqShrf+aON+8yMnRdRC7HowiaUyRnhmAstEuBMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/f21883-177d-4083-bfb7-6b9805286100/1/SHYmY7ST8OpZ-v34R6AYuzipoYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/f21883-177d-4083-bfb7-6b9805286100/1/SHYmY7ST8OpZ-v34R6AYuzipoYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SHYmY7ST8OpZ-v34R6AYuzipoYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:ba:0e:d8:30:7a:c0:53:89:45:46:be:a4:4e:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48762663b493f0ea59fafdf847a018bb38a9a186
Validity
Not Before: Nov 4 13:00:52 2025 GMT
Not After : Nov 5 13:00:52 2025 GMT
Subject: CN=d481a0d4f6eb0bcebfffd93d1f3a9de0304c4ec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ba:41:c3:01:fb:3a:9a:86:f9:d1:e0:7f:76:
0a:ef:3d:42:c9:7b:20:36:63:98:46:57:09:cb:83:
c7:f7:04:f2:61:1e:9f:12:c5:a6:7e:96:4f:94:e2:
a2:60:c7:fd:d4:f7:57:84:70:69:ad:03:62:29:0b:
ba:c8:07:5f:86:80:40:fa:14:d2:5f:a2:1e:b2:e3:
7f:78:6a:ba:6d:04:fc:99:b9:fb:4b:ea:bd:b8:0a:
df:56:1b:93:95:9d:70:13:a0:87:28:ba:a0:6f:a7:
37:d9:b6:eb:be:2a:1a:a2:59:21:d4:93:f7:f4:4c:
89:2b:e9:87:08:f9:f2:e9:86:71:d2:8a:72:2d:eb:
1c:1a:89:b9:94:f8:cd:b6:4a:f3:50:67:b9:23:5a:
de:ed:e1:08:44:e1:9f:e8:a3:d5:80:5f:0f:ac:26:
4d:17:47:0d:40:64:88:17:8b:4b:b1:dd:90:42:9c:
33:a4:96:af:7d:09:a0:2b:e1:9f:c3:d2:02:70:4a:
7d:a1:e4:f6:5a:e1:f7:bc:e4:c9:c1:27:53:48:7e:
43:a4:9f:58:a6:3c:04:c8:94:9c:bf:a7:c0:7f:0e:
ba:53:de:bc:ee:83:0d:2e:fe:06:98:aa:54:00:e5:
86:4e:72:25:7b:7c:88:7f:32:a9:cb:c5:82:0c:6f:
39:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:81:A0:D4:F6:EB:0B:CE:BF:FF:D9:3D:1F:3A:9D:E0:30:4C:4E:C7
X509v3 Authority Key Identifier:
keyid:48:76:26:63:B4:93:F0:EA:59:FA:FD:F8:47:A0:18:BB:38:A9:A1:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SHYmY7ST8OpZ-v34R6AYuzipoYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f21883-177d-4083-bfb7-6b9805286100/1/SHYmY7ST8OpZ-v34R6AYuzipoYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f21883-177d-4083-bfb7-6b9805286100/1/SHYmY7ST8OpZ-v34R6AYuzipoYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:c5:d9:2c:fc:6c:b8:74:11:3d:ab:e1:10:bd:9d:a7:12:a5:
76:5a:1f:18:78:7b:49:a5:58:55:b2:1f:13:cf:fa:89:25:4a:
30:79:40:74:08:17:b7:6b:07:83:ce:59:ab:15:7d:21:7a:db:
bf:f6:aa:df:9c:48:04:e2:00:ee:c0:0c:11:c0:4f:c3:4a:d3:
87:61:0b:e0:9e:51:87:81:f2:ad:ba:e2:8b:e4:f9:41:f1:2c:
f4:27:aa:b4:4e:1d:c8:10:3b:41:b5:ce:32:b9:dc:79:75:9a:
7f:c1:70:88:39:15:8f:89:be:45:38:97:24:1e:1f:48:7d:12:
0a:76:56:e1:bc:96:35:42:5b:e1:85:49:75:46:43:dd:18:b2:
13:c3:5a:1c:18:75:ea:3b:49:32:be:74:4f:20:d0:e7:0b:fe:
d9:aa:83:78:3a:2b:f3:7b:19:26:e8:8a:1d:82:86:5b:9b:92:
38:0a:42:cd:20:2a:ae:8e:e5:8a:a6:fd:6e:9d:51:d0:cc:b7:
03:0e:9b:2e:68:80:4f:0e:70:45:15:82:e1:b1:19:2a:5a:52:
c2:97:31:aa:77:9f:c2:23:00:28:c6:e3:67:de:83:bd:92:61:
76:09:a1:28:03:d1:63:16:d7:a7:d1:44:df:67:92:e7:fb:e4:
ca:e9:6e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:45:49 2025 by rpki-client