Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
File: rh3Biksfv-LCur2Lu0f-H9HPIvg.mft (raw, json)
Hash identifier: +qTxBtJ7i4r60J0cPAv+QXJg3kwpGUiifstmMeZchEU=
Subject key identifier: A9:27:11:BB:02:CC:4F:27:2F:BE:95:48:38:67:E0:4C:7A:45:3A:6A
Authority key identifier: AE:1D:C1:8A:4B:1F:BF:E2:C2:BA:BD:8B:BB:47:FE:1F:D1:CF:22:F8
Certificate issuer: /CN=ae1dc18a4b1fbfe2c2babd8bbb47fe1fd1cf22f8
Certificate serial: 0197B820CAA3C6AEAC41E250FDD72C171D42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 20:00:46 +0000
Manifest this update: Sat 28 Jun 2025 20:00:46 +0000
Manifest next update: Sun 29 Jun 2025 20:00:46 +0000
Files and hashes: 1: XsL5B3czGNBOzfHerg03TyaBu5U.roa (hash: ISMIcudQZ6/ngajT0MeHKZhAvNpAbEEMDN0b+U1wlIs=)
2: nYmjNrZRKkBKMRuyZNosQ-6fI8k.roa (hash: f30eW/l6+8yoMbQlTrT6KOfEquADaqjJm6m5OwGISv8=)
3: rh3Biksfv-LCur2Lu0f-H9HPIvg.crl (hash: Rzvp7ePgSIUXgM5fl/JC41SVNG56V8ysYY5rRkhv6QY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:ca:a3:c6:ae:ac:41:e2:50:fd:d7:2c:17:1d:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae1dc18a4b1fbfe2c2babd8bbb47fe1fd1cf22f8
Validity
Not Before: Jun 28 20:00:46 2025 GMT
Not After : Jun 29 20:00:46 2025 GMT
Subject: CN=a92711bb02cc4f272fbe95483867e04c7a453a6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e2:4c:c2:52:fa:12:6c:a5:0d:42:af:05:95:
ed:72:c7:6b:7f:0d:47:63:9c:ec:85:3b:bd:97:48:
e1:3d:5b:33:d4:60:7a:c7:bb:1a:93:c9:b0:92:1e:
c7:46:cf:2d:ee:da:06:12:05:ca:91:1f:24:08:c3:
27:7c:2e:e6:f7:7d:47:be:d7:49:99:c9:91:89:e0:
2f:2e:5c:99:29:f5:86:b1:54:13:a5:ce:41:b7:58:
fd:8e:46:94:6f:1b:46:24:e7:88:e9:dd:fd:40:3a:
b3:43:f1:b9:e7:f7:af:b1:70:f3:aa:80:81:97:1d:
7b:5f:71:1f:30:79:57:a7:49:5a:07:3c:92:2b:57:
23:a7:cf:e4:65:29:04:f9:f5:69:a2:b5:7b:c4:0c:
e4:de:00:6f:18:a8:09:3d:ef:33:6b:9d:56:d2:29:
3d:e8:c8:d7:34:ea:22:c4:e8:ec:0f:80:f8:c8:76:
44:fa:3a:81:23:7d:59:59:41:8f:09:69:c0:30:a0:
49:63:c3:c7:1c:4d:d7:77:81:5e:9b:79:8a:42:f6:
40:5e:d8:df:88:21:87:9a:cb:d2:7a:19:1b:c4:f0:
7c:a3:3e:8b:1c:c3:52:cc:9f:8d:52:e6:ad:9b:db:
82:e9:0c:8f:ab:75:17:65:2f:c5:e8:e3:cb:77:17:
84:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:27:11:BB:02:CC:4F:27:2F:BE:95:48:38:67:E0:4C:7A:45:3A:6A
X509v3 Authority Key Identifier:
keyid:AE:1D:C1:8A:4B:1F:BF:E2:C2:BA:BD:8B:BB:47:FE:1F:D1:CF:22:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:7c:e2:20:44:01:b5:04:a1:de:39:8e:a2:4a:b7:5a:12:b4:
52:b6:14:24:cd:d3:5f:1e:b6:cc:bf:79:43:1a:80:a9:ce:32:
ad:fa:bb:e6:5e:1b:03:d1:6a:79:62:85:71:04:38:53:44:76:
d3:37:7b:62:60:ce:d1:9b:54:b8:f8:d4:7f:20:a2:d3:42:94:
f1:eb:df:2f:63:c5:fe:fc:91:6a:9c:64:6c:c1:5f:97:c4:f4:
58:99:d2:ca:88:e7:05:e8:34:c3:b6:4f:88:bb:90:f3:0a:44:
8d:17:63:e7:12:c8:b6:ce:4c:75:c5:8c:52:e4:ad:54:0a:f4:
12:f2:2c:b0:56:3f:41:6c:b0:26:86:f5:54:fa:49:f6:36:56:
41:b0:da:77:42:75:4f:a4:22:e1:11:51:7a:96:4b:39:56:a6:
bb:b6:1d:57:78:57:25:c6:e2:87:85:2b:04:a0:1b:0e:b4:ff:
6a:f6:8c:8b:79:01:ff:1d:c7:ed:04:52:23:42:8f:8d:c1:f2:
11:63:df:35:39:97:7b:4d:b3:e8:23:c8:39:e7:3e:2c:bf:44:
d9:04:b4:c5:e9:91:6b:3f:69:a8:aa:52:34:20:08:1b:fb:79:
2c:d8:46:81:66:ee:55:d3:7e:22:53:82:16:e1:a3:17:71:cc:
f5:a2:d2:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4IMqjxq6sQeJQ/dcsFx1CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlMWRjMThhNGIxZmJmZTJjMmJhYmQ4YmJiNDdmZTFmZDFj
ZjIyZjgwHhcNMjUwNjI4MjAwMDQ2WhcNMjUwNjI5MjAwMDQ2WjAzMTEwLwYDVQQD
EyhhOTI3MTFiYjAyY2M0ZjI3MmZiZTk1NDgzODY3ZTA0YzdhNDUzYTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+JMwlL6EmylDUKvBZXtcsdrfw1H
Y5zshTu9l0jhPVsz1GB6x7sak8mwkh7HRs8t7toGEgXKkR8kCMMnfC7m931HvtdJ
mcmRieAvLlyZKfWGsVQTpc5Bt1j9jkaUbxtGJOeI6d39QDqzQ/G55/evsXDzqoCB
lx17X3EfMHlXp0laBzySK1cjp8/kZSkE+fVporV7xAzk3gBvGKgJPe8za51W0ik9
6MjXNOoixOjsD4D4yHZE+jqBI31ZWUGPCWnAMKBJY8PHHE3Xd4Fem3mKQvZAXtjf
iCGHmsvSehkbxPB8oz6LHMNSzJ+NUuatm9uC6QyPq3UXZS/F6OPLdxeEgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKknEbsCzE8nL76VSDhn4Ex6RTpqMB8GA1UdIwQY
MBaAFK4dwYpLH7/iwrq9i7tH/h/RzyL4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmgzQmlrc2Z2LUxDdXIyTHUwZi1IOUhQSXZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8wMzc2ZDEtMTJjYS00MTM1LTk0ODMt
OGU3MTQ5ZjA0YTRlLzEvcmgzQmlrc2Z2LUxDdXIyTHUwZi1IOUhQSXZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS8wMzc2ZDEtMTJjYS00MTM1LTk0ODMtOGU3MTQ5ZjA0YTRl
LzEvcmgzQmlrc2Z2LUxDdXIyTHUwZi1IOUhQSXZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVXziIEQB
tQSh3jmOokq3WhK0UrYUJM3TXx62zL95QxqAqc4yrfq75l4bA9FqeWKFcQQ4U0R2
0zd7YmDO0ZtUuPjUfyCi00KU8evfL2PF/vyRapxkbMFfl8T0WJnSyojnBeg0w7ZP
iLuQ8wpEjRdj5xLIts5MdcWMUuStVAr0EvIssFY/QWywJob1VPpJ9jZWQbDad0J1
T6Qi4RFRepZLOVamu7YdV3hXJcbih4UrBKAbDrT/avaMi3kB/x3H7QRSI0KPjcHy
EWPfNTmXe02z6CPIOec+LL9E2QS0xemRaz9pqKpSNCAIG/t5LNhGgWbuVdN+IlOC
FuGjF3HM9aLShQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:24:28 2025 by rpki-client