Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
File: rh3Biksfv-LCur2Lu0f-H9HPIvg.mft (raw, json)
Hash identifier: av0OCQznIirme0o6/8PDbzCorGV5iSsWXmmzkhaFMyo=
Subject key identifier: 2B:E2:8B:8F:38:F3:5A:5E:33:BE:7C:3E:F5:EA:76:AB:5F:03:24:49
Authority key identifier: AE:1D:C1:8A:4B:1F:BF:E2:C2:BA:BD:8B:BB:47:FE:1F:D1:CF:22:F8
Certificate issuer: /CN=ae1dc18a4b1fbfe2c2babd8bbb47fe1fd1cf22f8
Certificate serial: 019A714A1E2B425918788A63BB859DC02111
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 05:01:13 +0000
Manifest this update: Tue 11 Nov 2025 05:01:13 +0000
Manifest next update: Wed 12 Nov 2025 05:01:13 +0000
Files and hashes: 1: XsL5B3czGNBOzfHerg03TyaBu5U.roa (hash: ISMIcudQZ6/ngajT0MeHKZhAvNpAbEEMDN0b+U1wlIs=)
2: nYmjNrZRKkBKMRuyZNosQ-6fI8k.roa (hash: f30eW/l6+8yoMbQlTrT6KOfEquADaqjJm6m5OwGISv8=)
3: rh3Biksfv-LCur2Lu0f-H9HPIvg.crl (hash: BHi87OPEb7qZRyoqYe1Yr1nsdMZWM7RKp/k1Ga9laxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:1e:2b:42:59:18:78:8a:63:bb:85:9d:c0:21:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae1dc18a4b1fbfe2c2babd8bbb47fe1fd1cf22f8
Validity
Not Before: Nov 11 05:01:13 2025 GMT
Not After : Nov 12 05:01:13 2025 GMT
Subject: CN=2be28b8f38f35a5e33be7c3ef5ea76ab5f032449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:83:72:a8:d9:21:e3:1c:2a:4f:25:03:00:f5:
07:81:17:56:4f:89:6d:ed:8d:ef:fc:bc:a6:f5:ec:
79:f5:5a:64:c6:31:84:04:aa:50:38:3d:8e:cf:78:
44:aa:b9:f1:35:08:35:bc:4f:f9:85:41:34:7f:f9:
b8:fa:a0:75:26:04:12:d1:c5:64:bc:d0:25:98:d7:
b2:36:f0:5f:5e:bc:b1:39:92:3f:2f:2b:bc:b3:45:
30:d2:a2:14:0f:2b:5d:dd:5c:4f:fc:b0:14:8c:d8:
4b:e1:c9:0e:a7:fc:20:6d:c5:3b:8b:be:6c:0a:ba:
ef:b7:61:c3:27:ae:56:4a:e3:41:cc:8b:08:a1:57:
0c:9a:3f:27:72:c9:96:7b:2e:73:8b:c6:70:5f:e4:
79:2e:27:66:4f:d0:e9:01:b7:ac:df:61:58:fb:77:
58:f5:63:71:de:c5:15:5d:73:ff:dd:06:c2:c2:d3:
35:ef:54:1a:a4:5b:b3:c8:e6:98:dd:16:24:a6:7b:
88:c3:15:38:82:ce:a5:47:b7:81:a8:2a:37:7b:0d:
94:f3:1e:11:e0:9d:b9:a4:88:77:2e:cb:75:16:03:
6d:2b:d1:23:0e:9d:2f:52:15:c0:96:74:d2:17:35:
df:40:ed:5c:3c:f8:f3:d2:dd:40:76:8f:fc:91:2d:
65:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E2:8B:8F:38:F3:5A:5E:33:BE:7C:3E:F5:EA:76:AB:5F:03:24:49
X509v3 Authority Key Identifier:
keyid:AE:1D:C1:8A:4B:1F:BF:E2:C2:BA:BD:8B:BB:47:FE:1F:D1:CF:22:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:13:f9:5e:25:30:fb:b8:9b:fc:b7:5e:2f:0c:f4:70:36:cb:
32:17:c2:ab:91:36:07:0a:eb:d6:49:7c:ba:09:26:12:e1:ad:
43:13:75:d1:ac:3e:3c:85:e6:4b:16:f1:17:7c:86:06:e2:00:
c7:3d:12:c5:f8:f6:f6:33:b8:1a:bd:6f:ab:94:5d:28:52:28:
79:87:ae:2a:42:31:79:19:33:93:10:d4:02:fe:f7:20:23:2a:
05:cf:a0:87:82:e7:af:6b:65:e4:8b:9b:05:6b:fd:13:a5:80:
fe:45:2c:b5:da:9d:d0:37:4b:b2:b8:fa:fe:6b:e7:56:36:b9:
12:65:ec:95:93:5a:7c:f0:53:ea:20:f5:92:53:0d:cc:88:67:
e8:15:8e:15:bb:e3:86:65:06:f0:1d:8c:09:34:9e:48:9d:3a:
37:42:ee:2d:6d:ab:ff:b0:14:14:06:a7:b2:a3:35:00:82:2f:
46:81:61:82:88:ae:51:ff:3f:e1:12:c4:20:5a:e4:0a:62:21:
cf:61:46:ae:82:be:65:78:b0:e9:e8:5f:0a:0a:ed:4e:7d:18:
48:a9:6e:68:62:78:57:eb:2a:38:de:53:02:f3:36:ef:61:cd:
be:e6:7f:1e:61:6f:5f:0f:7e:5e:7c:89:a5:47:93:1e:d4:62:
28:f7:58:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:58 2025 by rpki-client