Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
File: rh3Biksfv-LCur2Lu0f-H9HPIvg.mft (raw, json)
Hash identifier: wqhbRic2gcFTpXRc9j9T04H8qjx0UoCa0Yop9tOFWAA=
Subject key identifier: BB:D2:87:4A:04:9B:AD:E5:95:C8:F9:14:33:A1:87:5F:5E:92:3A:5F
Authority key identifier: AE:1D:C1:8A:4B:1F:BF:E2:C2:BA:BD:8B:BB:47:FE:1F:D1:CF:22:F8
Certificate issuer: /CN=ae1dc18a4b1fbfe2c2babd8bbb47fe1fd1cf22f8
Certificate serial: 01974FD7B90D84B8E963A27B7375EB0A8383
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
Manifest number: 1581
Signing time: Sun 08 Jun 2025 14:00:27 +0000
Manifest this update: Sun 08 Jun 2025 14:00:27 +0000
Manifest next update: Mon 09 Jun 2025 14:00:27 +0000
Files and hashes: 1: XsL5B3czGNBOzfHerg03TyaBu5U.roa (hash: ISMIcudQZ6/ngajT0MeHKZhAvNpAbEEMDN0b+U1wlIs=)
2: nYmjNrZRKkBKMRuyZNosQ-6fI8k.roa (hash: f30eW/l6+8yoMbQlTrT6KOfEquADaqjJm6m5OwGISv8=)
3: rh3Biksfv-LCur2Lu0f-H9HPIvg.crl (hash: D9qBbH8P9KJu1C7n0NfmEjcPWHkzKgsExo38Ms5Ggz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:d7:b9:0d:84:b8:e9:63:a2:7b:73:75:eb:0a:83:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae1dc18a4b1fbfe2c2babd8bbb47fe1fd1cf22f8
Validity
Not Before: Jun 8 14:00:27 2025 GMT
Not After : Jun 9 14:00:27 2025 GMT
Subject: CN=bbd2874a049bade595c8f91433a1875f5e923a5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ab:ad:0b:ab:12:b4:ca:ac:48:b9:20:81:2c:
23:c6:e2:16:92:df:fb:fa:cf:ee:cf:4e:cb:8d:d4:
8e:4a:f6:dc:f5:8d:c2:a3:d7:da:d9:7f:21:43:c9:
c7:ba:40:35:55:19:49:91:3d:e5:11:61:44:0b:f8:
8a:a0:55:d3:9d:49:b5:bd:c0:42:10:e9:64:7a:fe:
f9:11:11:d0:2f:ca:47:d7:85:eb:27:4c:09:52:ff:
00:4e:01:18:2a:d6:6a:e8:cb:17:c6:9b:d7:fd:d0:
04:83:0c:5a:ae:b3:d3:0b:fe:23:70:e7:c1:61:b7:
12:5b:a6:d1:f8:b4:c8:c6:4c:eb:e3:f8:6e:4d:59:
5e:7c:87:2f:e2:c2:50:19:bf:ef:bb:93:6f:9b:fa:
4f:2c:12:d1:13:6f:b0:e0:5f:7a:0e:b7:06:20:d4:
01:74:87:c5:c2:6d:7a:01:52:f9:64:82:02:85:7c:
4d:df:44:e7:bc:c9:39:bb:2c:44:33:00:c7:c5:4f:
6b:f9:44:07:3e:dd:1b:c0:14:4a:00:51:db:98:2e:
9f:6f:97:1a:0d:85:b2:b1:38:52:dd:17:b7:1d:d3:
d9:8d:73:19:5f:da:6b:82:96:4e:ae:bf:08:34:2b:
c0:60:3d:f0:e4:44:19:3b:4b:fd:d3:4a:8a:f4:77:
a9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:D2:87:4A:04:9B:AD:E5:95:C8:F9:14:33:A1:87:5F:5E:92:3A:5F
X509v3 Authority Key Identifier:
keyid:AE:1D:C1:8A:4B:1F:BF:E2:C2:BA:BD:8B:BB:47:FE:1F:D1:CF:22:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:08:b5:d9:81:be:82:3e:51:e5:b9:97:65:a8:2d:7b:b3:9a:
8d:e1:7a:f7:d0:4c:fb:68:7d:de:bc:62:bb:cb:9c:c5:47:5b:
67:27:e9:4d:68:0a:47:0b:24:55:02:3d:91:f1:06:d4:0d:3c:
e0:6e:e5:c0:0d:f1:77:c2:95:0d:a9:e0:05:8e:7d:7c:21:69:
09:18:4d:6c:59:f4:bf:02:47:39:13:c6:69:37:dc:d1:ab:ae:
8e:cd:85:53:8d:0c:e0:8f:9f:0f:c0:02:b8:19:db:2f:41:c1:
e7:e8:b1:9c:63:68:1d:02:a7:fa:7b:5a:5d:b0:64:4a:8c:6b:
26:95:f7:1e:c7:40:c0:c4:a4:91:82:39:78:f3:b2:dd:e3:64:
ff:c1:11:93:10:fa:fc:24:07:c0:1b:0c:8c:1f:9a:58:d7:b9:
33:ff:4f:21:74:1d:19:71:a0:cf:3e:7c:e9:cd:0f:89:2c:0e:
af:6d:40:ac:34:a6:9c:7c:36:9c:4f:58:1a:ac:6d:c2:7e:92:
01:8d:2d:fa:7e:95:e5:fa:49:f1:cf:8a:5e:53:15:35:18:6a:
92:8a:b5:06:30:47:fe:c2:c6:6c:a7:10:e4:6b:af:3a:b1:b9:
26:1a:8b:dd:bd:1c:ff:a2:83:90:26:ce:0c:32:ed:ed:b3:69:
18:d0:18:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:29:38 2025 by rpki-client