Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
File: rh3Biksfv-LCur2Lu0f-H9HPIvg.mft (raw, json)
Hash identifier: hSXToFC25/QXz8uCTJtOjown+Mze4WU4g/n2mvj581Y=
Subject key identifier: 33:E7:5B:FC:FA:64:0E:74:2F:35:B4:20:37:7D:2A:1A:1A:1C:DD:47
Authority key identifier: AE:1D:C1:8A:4B:1F:BF:E2:C2:BA:BD:8B:BB:47:FE:1F:D1:CF:22:F8
Certificate issuer: /CN=ae1dc18a4b1fbfe2c2babd8bbb47fe1fd1cf22f8
Certificate serial: 019848F739FB32C1B0667F47359CC09D6C3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
Manifest number: 1602
Signing time: Sat 26 Jul 2025 23:00:18 +0000
Manifest this update: Sat 26 Jul 2025 23:00:18 +0000
Manifest next update: Sun 27 Jul 2025 23:00:18 +0000
Files and hashes: 1: XsL5B3czGNBOzfHerg03TyaBu5U.roa (hash: ISMIcudQZ6/ngajT0MeHKZhAvNpAbEEMDN0b+U1wlIs=)
2: nYmjNrZRKkBKMRuyZNosQ-6fI8k.roa (hash: f30eW/l6+8yoMbQlTrT6KOfEquADaqjJm6m5OwGISv8=)
3: rh3Biksfv-LCur2Lu0f-H9HPIvg.crl (hash: bF+fzj3uBbWonyLNQwxS+nftXBmRpNwrBL38aonnS7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:39:fb:32:c1:b0:66:7f:47:35:9c:c0:9d:6c:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae1dc18a4b1fbfe2c2babd8bbb47fe1fd1cf22f8
Validity
Not Before: Jul 26 23:00:18 2025 GMT
Not After : Jul 27 23:00:18 2025 GMT
Subject: CN=33e75bfcfa640e742f35b420377d2a1a1a1cdd47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:4f:39:70:09:21:8e:29:c8:85:31:0e:f7:06:
ee:d1:b4:65:ef:52:28:c0:61:04:f2:6e:81:ee:1c:
d5:b0:a1:11:dc:5c:3a:69:26:71:42:48:77:59:2b:
9b:85:01:34:16:1a:82:cd:81:91:6c:b4:c0:94:0b:
64:4a:f7:5d:c0:15:da:e4:f6:66:c9:88:1a:ed:f3:
bd:98:c9:fc:07:f7:75:44:57:6d:16:9b:a3:6d:42:
b5:6b:bf:74:c8:50:85:53:08:9f:bf:37:78:73:0c:
e9:dd:41:c3:55:d9:68:d4:3e:19:ee:11:0f:4d:20:
ca:68:ad:12:6b:13:54:f4:a9:37:22:fc:55:69:bc:
40:1a:5a:c0:81:86:f0:a7:a6:7b:cf:5f:97:32:06:
32:3c:60:78:11:6b:f1:f1:87:7e:6f:6d:21:ce:b5:
10:78:17:30:54:91:b5:66:e9:fd:52:ac:b6:59:d7:
46:f6:07:ce:38:eb:ca:ce:fe:83:cb:4d:34:81:20:
12:fe:59:4a:d3:35:9a:14:65:d8:42:60:e8:b1:a1:
c1:bf:e5:a7:50:8e:c4:8b:c6:13:49:27:68:20:ee:
03:64:41:0b:44:b7:b4:e2:36:9d:ae:2a:4e:2d:1d:
4d:eb:ce:3b:fd:24:bf:f1:eb:3a:69:98:5c:82:cb:
62:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E7:5B:FC:FA:64:0E:74:2F:35:B4:20:37:7D:2A:1A:1A:1C:DD:47
X509v3 Authority Key Identifier:
keyid:AE:1D:C1:8A:4B:1F:BF:E2:C2:BA:BD:8B:BB:47:FE:1F:D1:CF:22:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:e4:6f:14:65:0e:4b:3e:bc:ff:96:df:44:fd:13:ee:b8:a1:
5d:ae:60:b1:46:cf:f5:11:2e:70:1d:ab:32:ed:f7:ba:83:a7:
de:c7:fa:c3:50:aa:e1:19:8b:69:42:65:fa:60:98:f9:e4:aa:
03:1e:64:a4:d5:eb:c7:a8:1f:0c:4d:51:39:54:53:05:82:29:
c1:dc:f0:bf:e1:53:ff:e7:29:a7:04:1d:3a:d4:6b:d6:2c:ca:
5a:36:28:81:7a:08:06:31:7a:9c:bd:33:2c:d9:85:e4:6a:6b:
6c:6f:84:f7:a7:bb:9e:c1:63:1e:3a:b5:88:12:18:31:cd:16:
f6:21:10:d1:17:42:ea:66:f6:9c:12:c3:72:39:c1:76:64:da:
08:c9:d9:19:90:37:63:63:a5:a2:a9:65:d1:b7:81:c1:95:8c:
ad:ff:e5:9f:39:1f:4a:58:23:1b:41:e3:0e:18:ec:7c:2b:70:
71:f3:c3:59:3b:d6:50:6d:55:f5:cf:9c:be:6d:c0:f8:a6:ce:
16:bd:c8:32:0d:61:f3:34:dc:7d:ef:e7:6f:e9:46:02:44:e6:
f7:80:d2:17:06:f3:08:2f:09:c1:22:ee:72:9b:ed:1c:e1:e5:
98:3d:90:a6:df:27:7a:92:66:0d:6e:69:32:b6:83:e3:26:71:
bf:c7:d6:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhI9zn7MsGwZn9HNZzAnWw/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlMWRjMThhNGIxZmJmZTJjMmJhYmQ4YmJiNDdmZTFmZDFj
ZjIyZjgwHhcNMjUwNzI2MjMwMDE4WhcNMjUwNzI3MjMwMDE4WjAzMTEwLwYDVQQD
EygzM2U3NWJmY2ZhNjQwZTc0MmYzNWI0MjAzNzdkMmExYTFhMWNkZDQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5E85cAkhjinIhTEO9wbu0bRl71Io
wGEE8m6B7hzVsKER3Fw6aSZxQkh3WSubhQE0FhqCzYGRbLTAlAtkSvddwBXa5PZm
yYga7fO9mMn8B/d1RFdtFpujbUK1a790yFCFUwifvzd4cwzp3UHDVdlo1D4Z7hEP
TSDKaK0SaxNU9Kk3IvxVabxAGlrAgYbwp6Z7z1+XMgYyPGB4EWvx8Yd+b20hzrUQ
eBcwVJG1Zun9Uqy2WddG9gfOOOvKzv6Dy000gSAS/llK0zWaFGXYQmDosaHBv+Wn
UI7Ei8YTSSdoIO4DZEELRLe04jadripOLR1N6847/SS/8es6aZhcgstiuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDPnW/z6ZA50LzW0IDd9KhoaHN1HMB8GA1UdIwQY
MBaAFK4dwYpLH7/iwrq9i7tH/h/RzyL4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmgzQmlrc2Z2LUxDdXIyTHUwZi1IOUhQSXZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8wMzc2ZDEtMTJjYS00MTM1LTk0ODMt
OGU3MTQ5ZjA0YTRlLzEvcmgzQmlrc2Z2LUxDdXIyTHUwZi1IOUhQSXZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS8wMzc2ZDEtMTJjYS00MTM1LTk0ODMtOGU3MTQ5ZjA0YTRl
LzEvcmgzQmlrc2Z2LUxDdXIyTHUwZi1IOUhQSXZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM+RvFGUO
Sz68/5bfRP0T7rihXa5gsUbP9REucB2rMu33uoOn3sf6w1Cq4RmLaUJl+mCY+eSq
Ax5kpNXrx6gfDE1ROVRTBYIpwdzwv+FT/+cppwQdOtRr1izKWjYogXoIBjF6nL0z
LNmF5GprbG+E96e7nsFjHjq1iBIYMc0W9iEQ0RdC6mb2nBLDcjnBdmTaCMnZGZA3
Y2Oloqll0beBwZWMrf/lnzkfSlgjG0HjDhjsfCtwcfPDWTvWUG1V9c+cvm3A+KbO
Fr3IMg1h8zTcfe/nb+lGAkTm94DSFwbzCC8JwSLucpvtHOHlmD2Qpt8nepJmDW5p
MraD4yZxv8fW+g==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:51:32 2025 by rpki-client