Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.mft
File: sHplogTjx5n7GDuevkc2L6fP6MQ.mft (raw, json)
Hash identifier: XzFGbxs8FKCrdhd1Ohs36FXkLP4TIPA8+VWwaY/xZh0=
Subject key identifier: CB:5C:72:5D:A9:B8:E5:DB:B4:0F:FF:68:AE:1B:DC:F7:E3:4C:56:E8
Authority key identifier: B0:7A:65:A2:04:E3:C7:99:FB:18:3B:9E:BE:47:36:2F:A7:CF:E8:C4
Certificate issuer: /CN=b07a65a204e3c799fb183b9ebe47362fa7cfe8c4
Certificate serial: 019A54C0679FC903847904B8443856AF5649
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sHplogTjx5n7GDuevkc2L6fP6MQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.mft
Manifest number: 0155
Signing time: Wed 05 Nov 2025 16:01:26 +0000
Manifest this update: Wed 05 Nov 2025 16:01:26 +0000
Manifest next update: Thu 06 Nov 2025 16:01:26 +0000
Files and hashes: 1: PW2sWVJ9FFBsjfGLnP2cm8afOE8.roa (hash: 6jybPU5tVXkCjx5dz+V7ya485HszpB6dPF9HmYkhSqM=)
2: sHplogTjx5n7GDuevkc2L6fP6MQ.crl (hash: IWwdKjOP5ZTx+QPGlmY21a0knlmWqrwcYVUwLrIeBZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sHplogTjx5n7GDuevkc2L6fP6MQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:c0:67:9f:c9:03:84:79:04:b8:44:38:56:af:56:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b07a65a204e3c799fb183b9ebe47362fa7cfe8c4
Validity
Not Before: Nov 5 16:01:26 2025 GMT
Not After : Nov 6 16:01:26 2025 GMT
Subject: CN=cb5c725da9b8e5dbb40fff68ae1bdcf7e34c56e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c3:c6:c1:62:3f:ba:d2:3a:d9:63:26:8c:9d:
0c:a1:4e:a7:f8:a3:06:7c:d6:fd:87:7e:ff:53:8a:
2b:5a:41:60:67:6f:a8:dd:5f:b5:1b:d6:9f:c6:02:
67:ea:6f:15:80:41:aa:8d:ca:44:21:27:f1:d1:b7:
31:d9:95:2d:f2:9c:c7:43:a6:75:f1:4f:47:30:58:
66:ba:c1:f3:a1:74:00:76:64:37:d9:fd:a5:6b:73:
2f:a4:35:60:20:19:20:61:53:17:66:3c:5e:32:d1:
86:c9:a5:a9:26:a3:be:75:11:b7:c5:5a:34:be:b0:
d5:2b:db:c2:6b:ae:59:58:73:fc:68:bb:a5:15:70:
28:7f:c7:fa:75:20:04:8b:fb:70:59:a2:b3:e8:4e:
78:1b:f3:73:e3:46:6e:ef:b2:67:04:5c:ef:61:76:
09:d6:e6:99:9a:83:bf:a4:db:f3:fe:e4:06:ff:74:
98:34:6d:3b:a7:b2:b0:a1:da:64:d5:e7:48:a2:cb:
b1:45:a7:3d:d1:60:63:a4:81:ac:1a:68:00:be:ee:
47:84:45:66:64:0f:e8:81:ac:0b:db:57:dd:e6:5a:
eb:3f:c0:f3:96:1a:bd:01:ef:c9:13:40:07:ba:39:
33:84:b3:af:d9:04:a1:a7:5b:a8:07:17:71:f6:13:
27:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:5C:72:5D:A9:B8:E5:DB:B4:0F:FF:68:AE:1B:DC:F7:E3:4C:56:E8
X509v3 Authority Key Identifier:
keyid:B0:7A:65:A2:04:E3:C7:99:FB:18:3B:9E:BE:47:36:2F:A7:CF:E8:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sHplogTjx5n7GDuevkc2L6fP6MQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:2f:80:8a:02:dd:ff:f6:a8:06:5d:40:43:c9:58:23:fb:00:
36:82:05:8e:71:98:9d:69:57:e9:cf:25:eb:c4:f0:88:eb:77:
06:b9:35:06:a6:9b:16:68:da:8b:f4:7d:0a:ff:1a:35:72:f8:
83:90:a3:74:02:2f:f5:f6:e6:16:fd:4b:bc:bf:a5:73:d7:fa:
da:9f:b1:96:c8:d7:4d:b0:ed:80:7d:ee:f1:9a:ca:da:5b:cf:
86:07:0f:3a:49:51:7e:58:99:fd:1b:49:78:da:21:f0:62:7a:
a3:28:bc:aa:75:57:02:be:0e:dc:e7:5b:6d:3d:34:db:12:7f:
48:1e:b2:1f:b2:55:27:70:6a:76:c0:5b:0b:17:36:dc:76:3c:
34:67:02:01:6e:9b:a8:5c:46:25:00:8e:5a:cc:7e:92:5a:8e:
18:5a:65:0e:98:d8:89:b1:d1:26:79:bf:dd:31:ee:ff:5f:3d:
98:be:02:98:6d:0c:f0:e1:61:01:4f:49:5d:37:6b:fa:a1:c8:
3f:14:b4:1c:b7:31:d1:c2:0d:d9:52:73:a0:ef:90:70:52:94:
1e:62:6d:ea:9d:6f:2b:56:e3:84:8f:de:56:a8:28:79:63:bc:
fb:8a:b9:89:c8:c7:12:f6:4c:f7:e5:9c:26:da:8a:0c:f9:3e:
5b:8f:80:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:49:40 2025 by rpki-client