Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
File: rh3Biksfv-LCur2Lu0f-H9HPIvg.mft (raw, json)
Hash identifier: AqGDvblcAyO0yfi5++cOAHaQUu4Z2tSP8ibfUMvK3aw=
Subject key identifier: CA:10:E0:25:10:E7:00:5D:8E:F1:00:74:14:DC:C2:47:84:ED:6F:A2
Authority key identifier: AE:1D:C1:8A:4B:1F:BF:E2:C2:BA:BD:8B:BB:47:FE:1F:D1:CF:22:F8
Certificate issuer: /CN=ae1dc18a4b1fbfe2c2babd8bbb47fe1fd1cf22f8
Certificate serial: 019A52636CFA03D67C43B4AE08373BFE8F24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 05:00:38 +0000
Manifest this update: Wed 05 Nov 2025 05:00:38 +0000
Manifest next update: Thu 06 Nov 2025 05:00:38 +0000
Files and hashes: 1: XsL5B3czGNBOzfHerg03TyaBu5U.roa (hash: ISMIcudQZ6/ngajT0MeHKZhAvNpAbEEMDN0b+U1wlIs=)
2: nYmjNrZRKkBKMRuyZNosQ-6fI8k.roa (hash: f30eW/l6+8yoMbQlTrT6KOfEquADaqjJm6m5OwGISv8=)
3: rh3Biksfv-LCur2Lu0f-H9HPIvg.crl (hash: AYNqFLwFw/IJ4v2aEKTjTWbL5L3aGjJAGiBzjzxxsu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:6c:fa:03:d6:7c:43:b4:ae:08:37:3b:fe:8f:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae1dc18a4b1fbfe2c2babd8bbb47fe1fd1cf22f8
Validity
Not Before: Nov 5 05:00:38 2025 GMT
Not After : Nov 6 05:00:38 2025 GMT
Subject: CN=ca10e02510e7005d8ef1007414dcc24784ed6fa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:af:36:b5:06:41:c1:70:14:a0:a0:af:fd:ce:
dd:42:63:79:2a:22:a0:e9:a1:2e:8f:65:53:f5:bf:
fa:f6:94:51:cd:75:b8:a8:2a:0e:6a:87:86:3f:b2:
88:e5:db:32:9a:ee:bf:66:ff:47:b2:4d:03:bb:ec:
e1:18:1f:35:8c:38:03:e6:08:78:bb:5f:af:bf:7b:
35:51:bc:2c:1f:22:4d:a6:06:c8:61:57:6f:83:27:
f0:e0:7a:b9:5b:b2:e0:1d:2a:c3:84:c7:99:0c:d0:
9e:a6:49:1a:f7:c3:81:30:04:57:b3:22:8b:8e:6d:
8d:9b:c4:f9:33:22:6a:98:61:2d:d0:a3:dd:0d:fa:
9e:f4:e5:a2:26:dc:a7:4f:62:fc:9b:fb:2c:4a:95:
da:f4:82:87:27:94:53:b5:1a:89:a0:7b:80:2b:16:
88:74:dc:bb:ec:b7:a8:d0:8c:04:3b:3a:86:ff:85:
66:54:18:7f:6e:e3:44:62:a3:30:0e:75:39:95:30:
ee:f0:de:24:48:ea:73:b7:13:19:c0:8d:ff:72:6c:
9b:1a:4b:98:9c:62:c7:09:9e:43:91:d6:60:e8:87:
8c:18:fa:54:0e:b6:87:71:68:e9:79:22:9a:fa:3c:
14:49:56:5d:1e:e7:d8:3f:c0:2f:01:82:ca:5a:e2:
e6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:10:E0:25:10:E7:00:5D:8E:F1:00:74:14:DC:C2:47:84:ED:6F:A2
X509v3 Authority Key Identifier:
keyid:AE:1D:C1:8A:4B:1F:BF:E2:C2:BA:BD:8B:BB:47:FE:1F:D1:CF:22:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:cf:f9:2c:6d:c6:40:43:62:7b:45:0d:38:ef:02:e8:87:58:
a9:29:9f:84:66:ec:e0:7a:57:56:91:d6:70:6e:98:e4:2a:d8:
bb:6d:ea:ad:ab:b1:c4:37:84:9c:45:7b:b5:47:7b:97:8c:7a:
a9:4e:6d:16:24:6c:0b:41:4e:5c:91:96:80:e7:33:68:3a:96:
75:01:a4:18:c9:ac:f5:bd:b4:0d:d1:f9:67:f5:45:6a:97:fb:
a8:96:89:fb:c2:b7:a3:47:d0:24:85:cc:61:bb:12:b5:84:27:
e1:5a:8c:26:55:9b:be:31:d1:25:b9:fb:f9:a9:8f:4c:2b:f1:
a0:47:c9:10:c0:76:c5:26:9d:df:a9:4b:d0:67:68:6c:97:7b:
74:58:a0:02:1d:ac:ef:a1:b3:e7:0a:78:c6:e2:fa:32:b1:7e:
3e:3c:65:06:38:40:92:7e:7f:8b:59:ab:c8:67:e9:51:85:8f:
bf:1b:27:b8:af:28:6c:85:0e:66:24:24:cc:c5:a5:13:9e:b4:
65:f3:cb:1e:03:a1:52:c7:36:4c:47:c0:e1:a1:d0:57:0e:87:
02:92:e5:bc:e1:df:cc:5e:fd:53:c0:09:d6:84:dc:f0:77:37:
17:eb:f8:9f:d0:2b:bf:fc:04:08:99:e4:a6:93:69:e9:9d:b9:
71:0e:0c:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpSY2z6A9Z8Q7SuCDc7/o8kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlMWRjMThhNGIxZmJmZTJjMmJhYmQ4YmJiNDdmZTFmZDFj
ZjIyZjgwHhcNMjUxMTA1MDUwMDM4WhcNMjUxMTA2MDUwMDM4WjAzMTEwLwYDVQQD
EyhjYTEwZTAyNTEwZTcwMDVkOGVmMTAwNzQxNGRjYzI0Nzg0ZWQ2ZmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAra82tQZBwXAUoKCv/c7dQmN5KiKg
6aEuj2VT9b/69pRRzXW4qCoOaoeGP7KI5dsymu6/Zv9Hsk0Du+zhGB81jDgD5gh4
u1+vv3s1UbwsHyJNpgbIYVdvgyfw4Hq5W7LgHSrDhMeZDNCepkka98OBMARXsyKL
jm2Nm8T5MyJqmGEt0KPdDfqe9OWiJtynT2L8m/ssSpXa9IKHJ5RTtRqJoHuAKxaI
dNy77Leo0IwEOzqG/4VmVBh/buNEYqMwDnU5lTDu8N4kSOpztxMZwI3/cmybGkuY
nGLHCZ5DkdZg6IeMGPpUDraHcWjpeSKa+jwUSVZdHufYP8AvAYLKWuLmPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMoQ4CUQ5wBdjvEAdBTcwkeE7W+iMB8GA1UdIwQY
MBaAFK4dwYpLH7/iwrq9i7tH/h/RzyL4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmgzQmlrc2Z2LUxDdXIyTHUwZi1IOUhQSXZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8wMzc2ZDEtMTJjYS00MTM1LTk0ODMt
OGU3MTQ5ZjA0YTRlLzEvcmgzQmlrc2Z2LUxDdXIyTHUwZi1IOUhQSXZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS8wMzc2ZDEtMTJjYS00MTM1LTk0ODMtOGU3MTQ5ZjA0YTRl
LzEvcmgzQmlrc2Z2LUxDdXIyTHUwZi1IOUhQSXZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg8/5LG3G
QENie0UNOO8C6IdYqSmfhGbs4HpXVpHWcG6Y5CrYu23qrauxxDeEnEV7tUd7l4x6
qU5tFiRsC0FOXJGWgOczaDqWdQGkGMms9b20DdH5Z/VFapf7qJaJ+8K3o0fQJIXM
YbsStYQn4VqMJlWbvjHRJbn7+amPTCvxoEfJEMB2xSad36lL0GdobJd7dFigAh2s
76Gz5wp4xuL6MrF+PjxlBjhAkn5/i1mryGfpUYWPvxsnuK8obIUOZiQkzMWlE560
ZfPLHgOhUsc2TEfA4aHQVw6HApLlvOHfzF79U8AJ1oTc8Hc3F+v4n9Arv/wECJnk
ppNp6Z25cQ4MMQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:01:40 2025 by rpki-client