Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
File: rh3Biksfv-LCur2Lu0f-H9HPIvg.mft (raw, json)
Hash identifier: nvY5gyW90vyQLdB42/CDWD7Yur4Dpu6GIzz/sCW3hAE=
Subject key identifier: 85:4C:46:E1:16:1A:23:53:61:D4:5B:36:E7:2A:99:EF:77:66:C0:17
Authority key identifier: AE:1D:C1:8A:4B:1F:BF:E2:C2:BA:BD:8B:BB:47:FE:1F:D1:CF:22:F8
Certificate issuer: /CN=ae1dc18a4b1fbfe2c2babd8bbb47fe1fd1cf22f8
Certificate serial: 0199FD6B5EAF8BB19F6EB375CA6BB49F3924
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 17:01:36 +0000
Manifest this update: Sun 19 Oct 2025 17:01:36 +0000
Manifest next update: Mon 20 Oct 2025 17:01:36 +0000
Files and hashes: 1: XsL5B3czGNBOzfHerg03TyaBu5U.roa (hash: ISMIcudQZ6/ngajT0MeHKZhAvNpAbEEMDN0b+U1wlIs=)
2: nYmjNrZRKkBKMRuyZNosQ-6fI8k.roa (hash: f30eW/l6+8yoMbQlTrT6KOfEquADaqjJm6m5OwGISv8=)
3: rh3Biksfv-LCur2Lu0f-H9HPIvg.crl (hash: 8QSZGXOLnVJDN7tknr8bncFS1c4r59COagcYr5SersA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:5e:af:8b:b1:9f:6e:b3:75:ca:6b:b4:9f:39:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae1dc18a4b1fbfe2c2babd8bbb47fe1fd1cf22f8
Validity
Not Before: Oct 19 17:01:36 2025 GMT
Not After : Oct 20 17:01:36 2025 GMT
Subject: CN=854c46e1161a235361d45b36e72a99ef7766c017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:0a:96:8d:e1:9a:cd:a0:a8:6a:95:f1:ff:a5:
4c:88:c0:ab:1f:f3:05:86:74:27:b6:1d:76:c1:9c:
a6:4a:5b:1a:71:6f:c0:10:d3:0b:4c:8e:c5:c8:94:
ee:a4:d4:ea:ea:ce:25:2f:61:43:54:dd:5d:1b:9d:
36:f3:55:22:ba:47:b3:5a:bc:3f:81:27:8c:fb:01:
15:bf:93:0c:da:28:60:46:8d:68:bb:8d:46:fd:f1:
73:fe:74:51:1e:c8:d6:6b:3e:b4:eb:aa:ed:1d:74:
df:90:62:36:b6:1a:a5:7b:9d:a5:e0:27:6c:f9:cb:
0f:6c:64:44:96:20:90:75:2c:f2:f6:8b:d8:a2:20:
24:e9:c5:43:97:28:93:62:90:ca:35:dd:14:6b:18:
b2:ae:8c:2c:d5:57:90:5e:f4:c5:23:b3:2f:8f:bb:
49:28:34:d2:fb:b4:94:67:84:34:7f:85:40:4e:72:
48:f6:01:5d:f7:c5:87:98:69:84:2a:a0:30:d0:fc:
c7:9d:14:44:0d:59:72:62:07:87:8c:07:25:fb:0b:
80:b1:8c:e6:4d:2d:59:f5:2c:ab:17:cc:a4:61:47:
ae:f8:f3:19:82:fd:bf:c0:2b:ad:c6:19:93:d0:15:
dd:a3:3a:f2:51:43:35:0d:c6:3e:d5:ed:c2:cb:21:
1c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:4C:46:E1:16:1A:23:53:61:D4:5B:36:E7:2A:99:EF:77:66:C0:17
X509v3 Authority Key Identifier:
keyid:AE:1D:C1:8A:4B:1F:BF:E2:C2:BA:BD:8B:BB:47:FE:1F:D1:CF:22:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:20:67:c3:ec:b6:1c:f3:da:43:f8:bf:db:0f:ed:0f:ab:d9:
a1:07:fd:3d:5d:70:be:80:49:59:8e:2e:f1:4f:23:68:a5:96:
0b:47:d7:0a:f3:24:50:ed:68:bf:96:47:06:d6:62:2f:40:78:
e3:82:2e:95:1b:3f:84:7d:10:1a:98:c9:c3:42:bd:36:a6:3b:
c7:8b:c6:a8:b6:27:8d:4f:14:92:94:34:98:2b:8f:4e:d1:94:
b2:c7:3d:b0:f3:8e:4c:d6:47:c9:fe:ca:3d:54:23:66:96:dc:
76:e7:7d:9f:ce:ec:8e:dd:ad:00:89:55:d9:b2:14:9c:7f:9b:
ad:bf:cb:b1:53:4c:f6:8f:58:2c:94:64:d2:d8:21:31:b1:b9:
09:64:8a:10:d6:4b:04:4a:61:1b:33:8c:b6:f4:86:65:41:e9:
33:cf:8d:84:42:f7:dd:30:7c:66:7a:7c:77:76:2f:d2:a5:88:
29:34:b1:9e:a7:bb:47:8d:9a:82:f0:fa:67:74:ad:79:22:7e:
e7:02:dc:62:f3:b4:e8:c7:ed:d7:02:c9:da:3e:b2:64:b0:04:
cf:7f:58:14:3c:40:5a:69:54:fa:58:8c:3d:8d:21:c3:fd:67:
c9:7c:d6:be:8f:44:3c:15:0e:ef:d2:74:52:93:5c:2a:1b:29:
a1:d0:70:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:59:19 2025 by rpki-client