Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft
File: SHJHQsP1ThebguavjjPg2dL71NU.mft (raw, json)
Hash identifier: 9AOUSq8aEYwU63qjzuMHfYz57XbZf51UQkmlqHqmg3E=
Subject key identifier: 3F:97:03:EA:08:90:18:C0:1D:5D:68:07:38:46:A8:32:E6:B8:08:6F
Authority key identifier: 48:72:47:42:C3:F5:4E:17:9B:82:E6:AF:8E:33:E0:D9:D2:FB:D4:D5
Certificate issuer: /CN=48724742c3f54e179b82e6af8e33e0d9d2fbd4d5
Certificate serial: 019A4E18F0D528A7DBF0FDC0F09586454803
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 09:00:48 +0000
Manifest this update: Tue 04 Nov 2025 09:00:48 +0000
Manifest next update: Wed 05 Nov 2025 09:00:48 +0000
Files and hashes: 1: SHJHQsP1ThebguavjjPg2dL71NU.crl (hash: aonZzKrfPuFPpK9K53h5IoP1p3z+E2cUIGGhZs/BPIk=)
2: fw6EErcKUkE6wVnp4BcQXOeheJE.roa (hash: X3Re7oVemXlG1F0GxrgY8aRLn+cfxjtelXf5RJOURd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:f0:d5:28:a7:db:f0:fd:c0:f0:95:86:45:48:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48724742c3f54e179b82e6af8e33e0d9d2fbd4d5
Validity
Not Before: Nov 4 09:00:48 2025 GMT
Not After : Nov 5 09:00:48 2025 GMT
Subject: CN=3f9703ea089018c01d5d68073846a832e6b8086f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:3d:79:7c:34:e6:b1:65:e6:8b:78:d8:7d:41:
f4:c6:a9:17:1f:17:68:54:1e:f9:81:a3:33:e9:5f:
40:17:3a:25:c5:e1:2c:4c:05:76:25:dc:86:1a:d9:
a8:7e:e2:ae:f4:5e:e6:d7:c4:a2:67:eb:bf:b4:9b:
5a:a8:60:90:c3:d5:39:43:0b:34:e4:77:1a:12:04:
fe:16:ce:3f:a8:9d:c3:95:1b:40:d3:08:a8:2f:98:
09:99:44:f6:8f:46:1c:63:e4:31:51:cb:b4:16:8c:
51:22:a5:1e:22:58:2c:1d:23:b1:ed:7b:e2:68:ae:
7f:5c:96:e9:13:1a:18:43:aa:3a:bd:6e:bc:cb:07:
bd:cd:97:8a:5e:63:56:63:21:29:ff:1c:63:71:d6:
ca:e7:15:2e:29:2d:77:18:b5:63:0c:a5:e8:ed:e5:
bf:92:48:83:87:7f:d7:d5:cf:c3:7d:d8:31:c9:2f:
ac:11:22:ab:3f:43:a2:f9:cc:2d:50:35:0c:ba:7b:
55:a2:c9:0c:b7:e6:68:69:a6:c2:dc:c7:d3:6f:f9:
8a:b7:f4:7b:39:94:a4:d8:91:fb:03:47:f2:4d:08:
dc:6e:2a:7f:6a:0d:4a:80:51:f3:2d:fe:fb:45:76:
64:15:57:ce:69:67:a3:40:12:37:f9:bc:15:83:4d:
62:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:97:03:EA:08:90:18:C0:1D:5D:68:07:38:46:A8:32:E6:B8:08:6F
X509v3 Authority Key Identifier:
keyid:48:72:47:42:C3:F5:4E:17:9B:82:E6:AF:8E:33:E0:D9:D2:FB:D4:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:59:5a:d7:81:43:63:23:01:09:c6:92:f1:67:73:41:c0:c8:
8c:f3:7c:07:85:65:65:ff:04:ea:11:95:91:84:42:6c:0b:ad:
7a:ab:5e:b6:37:bf:8e:a2:14:7c:76:4d:1b:80:52:35:a1:29:
27:22:d0:83:82:18:f2:ae:a1:8a:90:6d:00:af:78:ae:26:7e:
71:88:75:3c:f3:49:77:b7:f5:80:d7:b2:22:40:91:27:32:4e:
11:5d:be:b8:71:ec:4a:8d:15:15:df:54:13:6f:f4:41:84:f7:
ef:96:e8:b6:2c:3c:25:59:8e:44:a0:bd:51:e5:da:46:78:7a:
ce:f5:c3:57:40:29:69:d3:dd:d4:0f:32:a2:dd:7f:66:60:a0:
97:d5:33:8e:75:b5:a1:ae:61:ba:b7:20:1e:b0:8c:b5:fe:27:
4a:73:84:26:fe:84:74:89:d9:a7:9b:3b:15:41:c6:c7:d3:02:
f9:2a:15:28:33:17:7c:7c:1e:cd:82:54:e0:5c:86:cd:1e:ec:
e8:77:a1:03:f9:f1:64:2f:4d:16:ff:41:3f:26:64:b4:81:cc:
4e:d2:75:3c:32:73:49:c8:e3:6b:0b:60:83:71:03:fb:f2:8b:
35:1e:5c:05:7d:51:e4:1a:0b:46:b6:13:ee:67:63:8f:c1:21:
00:f6:87:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:52:55 2025 by rpki-client