Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
File: rh3Biksfv-LCur2Lu0f-H9HPIvg.mft (raw, json)
Hash identifier: LyiVpJ85HNkdKg43Y7tzfzCc0kEVObEcPDugW7L/m38=
Subject key identifier: 9E:64:98:1F:F0:38:F2:0A:C0:45:AC:7D:1A:2D:D2:E3:40:75:92:90
Authority key identifier: AE:1D:C1:8A:4B:1F:BF:E2:C2:BA:BD:8B:BB:47:FE:1F:D1:CF:22:F8
Certificate issuer: /CN=ae1dc18a4b1fbfe2c2babd8bbb47fe1fd1cf22f8
Certificate serial: 01988AA06BCEDEE2B962376ABB8B330F2275
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
Manifest number: 1624
Signing time: Fri 08 Aug 2025 17:00:25 +0000
Manifest this update: Fri 08 Aug 2025 17:00:25 +0000
Manifest next update: Sat 09 Aug 2025 17:00:25 +0000
Files and hashes: 1: XsL5B3czGNBOzfHerg03TyaBu5U.roa (hash: ISMIcudQZ6/ngajT0MeHKZhAvNpAbEEMDN0b+U1wlIs=)
2: nYmjNrZRKkBKMRuyZNosQ-6fI8k.roa (hash: f30eW/l6+8yoMbQlTrT6KOfEquADaqjJm6m5OwGISv8=)
3: rh3Biksfv-LCur2Lu0f-H9HPIvg.crl (hash: 7jjAad/VQ3a0dzy3hb/6g6YrO6nnhh7FtboWmvRjrTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:a0:6b:ce:de:e2:b9:62:37:6a:bb:8b:33:0f:22:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae1dc18a4b1fbfe2c2babd8bbb47fe1fd1cf22f8
Validity
Not Before: Aug 8 17:00:25 2025 GMT
Not After : Aug 9 17:00:25 2025 GMT
Subject: CN=9e64981ff038f20ac045ac7d1a2dd2e340759290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:32:d5:e1:7b:c0:e0:d0:4e:eb:a5:a9:7f:e4:
7f:99:2d:58:19:72:36:d3:75:a6:8d:61:de:ef:8d:
bf:54:3d:d2:27:02:99:4e:f8:e6:21:f6:1d:7f:ed:
11:19:74:76:b0:25:9b:c0:81:df:f5:36:9d:d0:16:
46:95:a9:e4:c6:47:48:ac:7b:49:95:26:5a:9d:c2:
c6:22:19:92:57:6d:42:52:6e:99:4b:af:d0:ca:0c:
69:6f:e9:aa:84:37:f6:33:42:89:02:df:67:c1:ca:
a2:e6:91:68:83:e8:7c:85:d3:07:5b:c0:7b:8c:e6:
b2:1b:af:e5:d3:39:3e:55:a3:b7:07:ed:c6:e2:e5:
17:39:48:e6:db:99:f0:fd:d4:f4:38:e0:02:36:a7:
58:ea:75:23:d9:a6:a0:06:8e:a3:4e:fb:c1:dc:86:
40:33:63:de:57:f3:36:37:7e:54:bb:ca:23:9a:6c:
b5:ae:7e:5b:6c:b0:18:98:e8:da:ee:a7:82:ed:cf:
71:af:c1:89:24:34:e1:73:93:07:3c:ad:63:5d:00:
aa:e5:85:4f:8d:a0:02:db:9f:ba:5a:87:17:76:aa:
66:58:5b:32:de:e8:35:5e:80:91:24:6f:02:70:64:
64:53:09:08:fb:53:0c:7a:03:58:64:3a:27:93:a6:
34:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:64:98:1F:F0:38:F2:0A:C0:45:AC:7D:1A:2D:D2:E3:40:75:92:90
X509v3 Authority Key Identifier:
keyid:AE:1D:C1:8A:4B:1F:BF:E2:C2:BA:BD:8B:BB:47:FE:1F:D1:CF:22:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:fd:cf:96:6b:1f:8b:9e:14:60:d2:ca:72:f7:30:f4:c2:36:
77:19:c6:c4:cd:ed:4f:d2:16:73:e2:91:31:cf:73:55:a2:70:
0d:9d:b9:7d:4e:70:02:d4:ce:fc:f1:c8:12:21:78:95:cb:db:
69:e7:8f:8e:69:64:87:8f:f6:05:7d:da:3c:ad:93:29:99:3a:
ea:cb:4b:0c:43:67:0d:a0:4c:c4:c5:54:48:12:f1:3d:6e:dd:
1f:c5:34:19:35:dd:d4:bd:a0:f4:65:98:2b:b8:86:f3:69:a8:
44:bd:27:33:20:c1:a6:cf:fd:93:b1:e6:78:f3:03:0d:30:2a:
64:a9:6e:5f:c7:5a:77:57:26:a6:37:3b:a3:ec:92:a5:a0:06:
87:ab:0f:a7:a2:e8:14:53:7e:ae:c0:5b:f3:c2:4d:29:51:3c:
2e:e5:9e:50:ae:e9:4a:5a:76:d5:2a:8f:fb:72:94:b6:91:1b:
5a:10:40:de:17:9d:26:5c:3a:28:ff:88:aa:7e:b1:5d:24:f1:
ea:04:21:73:c8:d5:93:43:b4:95:ec:cb:bd:91:68:92:95:83:
71:1a:27:c1:78:bb:f2:d4:9e:4c:2d:00:0d:e9:aa:21:3b:c4:
6b:cb:cb:78:54:28:ea:a0:72:ae:8f:8b:e9:83:db:ca:82:ac:
47:1f:65:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:26:57 2025 by rpki-client