Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
File: rh3Biksfv-LCur2Lu0f-H9HPIvg.mft (raw, json)
Hash identifier: F2OpyNQ4YxUqlJk5ErAFvtiQ/hSjR+74kQh6x3/KFG0=
Subject key identifier: B8:B9:2C:AB:55:A9:E8:C7:E2:06:B8:86:1A:AB:A8:5B:B5:ED:24:EB
Authority key identifier: AE:1D:C1:8A:4B:1F:BF:E2:C2:BA:BD:8B:BB:47:FE:1F:D1:CF:22:F8
Certificate issuer: /CN=ae1dc18a4b1fbfe2c2babd8bbb47fe1fd1cf22f8
Certificate serial: 01995378A9500C684A603E8C5689444A2250
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
Manifest number: 168C
Signing time: Tue 16 Sep 2025 17:00:40 +0000
Manifest this update: Tue 16 Sep 2025 17:00:40 +0000
Manifest next update: Wed 17 Sep 2025 17:00:40 +0000
Files and hashes: 1: XsL5B3czGNBOzfHerg03TyaBu5U.roa (hash: ISMIcudQZ6/ngajT0MeHKZhAvNpAbEEMDN0b+U1wlIs=)
2: nYmjNrZRKkBKMRuyZNosQ-6fI8k.roa (hash: f30eW/l6+8yoMbQlTrT6KOfEquADaqjJm6m5OwGISv8=)
3: rh3Biksfv-LCur2Lu0f-H9HPIvg.crl (hash: dCxydgqOUBI0V/dQSqXfBDBRcI+H8ur0nvJMik63BhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 13:46:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:53:78:a9:50:0c:68:4a:60:3e:8c:56:89:44:4a:22:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae1dc18a4b1fbfe2c2babd8bbb47fe1fd1cf22f8
Validity
Not Before: Sep 16 17:00:40 2025 GMT
Not After : Sep 17 17:00:40 2025 GMT
Subject: CN=b8b92cab55a9e8c7e206b8861aaba85bb5ed24eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f2:33:43:c6:8c:02:b7:42:12:0c:0b:e0:c4:
e7:27:14:3c:5d:00:9d:a6:94:ea:f3:37:d9:3d:65:
f4:cf:f4:23:f1:1a:7d:76:f8:82:ea:c6:f4:09:f2:
15:3f:1f:78:66:90:21:5b:cc:28:18:ed:0c:eb:83:
0d:0e:01:57:1b:15:82:e6:23:b8:d6:8b:f5:2c:9c:
77:b1:21:fb:e2:e7:d0:7b:82:26:4a:65:e7:c8:0a:
ec:e5:22:1e:b4:60:4e:52:a0:6a:04:77:ff:e5:13:
37:45:a2:a6:00:0b:5e:6a:d7:80:a4:a5:e9:12:1b:
ae:fa:a4:90:56:a1:f7:a4:14:f7:99:25:f5:28:b7:
43:d5:4d:be:6d:c9:49:a1:be:bf:01:90:33:e5:22:
29:d9:4d:24:9f:4a:94:c5:7b:a5:1c:50:f0:7a:6f:
ec:f3:94:64:90:3e:bd:82:cf:7b:83:2b:83:4c:8b:
09:25:2d:d2:30:80:76:bf:38:d7:6e:e9:9e:99:8d:
c8:61:5c:88:4d:f8:00:67:0a:36:ef:91:57:f1:35:
8f:7a:0c:40:9b:3d:e8:e4:af:3a:e9:b1:50:e6:92:
78:18:42:a7:53:34:54:92:d0:16:b1:03:ee:a7:53:
fd:ba:c9:d4:0b:4f:1c:12:ae:bf:50:4f:36:56:7c:
3c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:B9:2C:AB:55:A9:E8:C7:E2:06:B8:86:1A:AB:A8:5B:B5:ED:24:EB
X509v3 Authority Key Identifier:
keyid:AE:1D:C1:8A:4B:1F:BF:E2:C2:BA:BD:8B:BB:47:FE:1F:D1:CF:22:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:d4:ca:7e:1c:c8:83:0e:0c:f9:f9:f9:f1:e7:08:22:46:9f:
22:83:6f:a4:10:10:f9:26:78:a5:4b:b3:e3:b8:8e:57:78:97:
33:dd:71:2e:c6:a2:89:8a:2a:9f:25:48:30:c3:30:2e:9a:94:
7a:34:2c:40:a0:21:16:26:2d:25:d2:ad:c8:c8:7c:f1:4d:22:
3e:b8:e0:48:32:a8:1d:f1:b5:8c:0c:39:ac:e8:87:09:f0:09:
23:47:9b:7b:db:73:79:45:c7:84:8a:31:d1:ca:a4:58:45:b2:
03:71:76:2c:98:eb:83:e4:36:a4:71:e9:39:12:34:4b:3c:12:
12:62:2e:92:c9:fd:07:58:b7:3f:9a:58:c0:36:6f:b5:a9:55:
a3:c7:3d:21:2d:1d:f2:82:0f:d1:e7:0e:8c:f9:89:1d:64:50:
81:a4:11:8c:68:52:8d:80:53:d3:43:29:86:50:f3:f9:c4:fe:
15:62:04:0b:24:d4:af:e3:91:6d:43:f7:50:9d:65:6e:f5:3b:
c6:82:5d:5a:45:fc:5a:45:82:a0:08:91:e8:00:8f:2c:49:53:
0c:d4:55:5a:72:37:d3:b0:49:54:e0:27:6c:7c:7f:74:85:9e:
2e:38:b2:03:3a:fd:b6:8c:2f:62:de:f6:2e:dc:aa:e2:84:cf:
a7:0f:3c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 18:43:25 2025 by rpki-client