Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
File: rh3Biksfv-LCur2Lu0f-H9HPIvg.mft (raw, json)
Hash identifier: mihcMWK2mYVE+0i8JM7Lt2cz4L2zi4p78+7uC7VcPxk=
Subject key identifier: 52:A2:DC:4B:D6:51:F1:CE:82:38:58:6F:63:36:4A:F0:F3:FD:22:06
Authority key identifier: AE:1D:C1:8A:4B:1F:BF:E2:C2:BA:BD:8B:BB:47:FE:1F:D1:CF:22:F8
Certificate issuer: /CN=ae1dc18a4b1fbfe2c2babd8bbb47fe1fd1cf22f8
Certificate serial: 0198D5F1814CA75DE32051F27838A6080BB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 08:00:30 +0000
Manifest this update: Sat 23 Aug 2025 08:00:30 +0000
Manifest next update: Sun 24 Aug 2025 08:00:30 +0000
Files and hashes: 1: XsL5B3czGNBOzfHerg03TyaBu5U.roa (hash: ISMIcudQZ6/ngajT0MeHKZhAvNpAbEEMDN0b+U1wlIs=)
2: nYmjNrZRKkBKMRuyZNosQ-6fI8k.roa (hash: f30eW/l6+8yoMbQlTrT6KOfEquADaqjJm6m5OwGISv8=)
3: rh3Biksfv-LCur2Lu0f-H9HPIvg.crl (hash: Eze2KSJvdURxDaJFaGDddwLJmGtIBizk08rQAPST/6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:81:4c:a7:5d:e3:20:51:f2:78:38:a6:08:0b:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae1dc18a4b1fbfe2c2babd8bbb47fe1fd1cf22f8
Validity
Not Before: Aug 23 08:00:30 2025 GMT
Not After : Aug 24 08:00:30 2025 GMT
Subject: CN=52a2dc4bd651f1ce8238586f63364af0f3fd2206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c5:63:2d:91:3f:f2:43:d9:b9:ac:d4:87:0c:
4e:0a:1b:42:63:43:a0:7c:fa:7d:a4:db:fe:6e:b3:
b6:9e:4c:27:cd:d9:2d:c2:76:f6:51:89:7d:30:bc:
ad:47:08:16:5b:69:1c:d4:c5:87:29:55:7b:8a:c8:
2e:1b:7d:16:1a:e5:0c:fc:ce:ed:9f:65:1b:34:19:
8f:2e:17:c2:b6:ed:1f:ae:b5:d5:48:13:dc:91:aa:
f9:0d:0c:e3:4d:f7:83:5e:2c:7f:fc:96:b9:4f:7c:
3f:7f:af:74:da:57:b7:8c:57:b7:80:3b:2c:3f:90:
36:56:e0:c3:cf:2f:45:bd:36:14:b6:21:20:be:f4:
9f:c5:59:fc:41:3f:56:d8:fc:02:57:52:ae:85:75:
09:07:e9:04:2e:7f:d2:61:04:86:8c:b9:66:12:9e:
b5:24:dd:e4:45:42:34:5b:b5:85:ea:4d:42:5a:bb:
09:34:4e:26:81:22:af:d5:91:44:46:aa:2f:35:b0:
04:cb:5f:f8:82:01:c0:0b:24:61:d5:6b:18:7d:3b:
1e:ae:d4:c4:a3:ba:64:1a:1f:72:c2:af:e5:4a:fc:
1d:62:a4:e4:3f:5c:dc:e7:02:d5:f5:8e:1c:86:ae:
d7:e2:f5:6a:0d:81:b9:a9:22:b1:19:3c:05:19:4d:
e9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A2:DC:4B:D6:51:F1:CE:82:38:58:6F:63:36:4A:F0:F3:FD:22:06
X509v3 Authority Key Identifier:
keyid:AE:1D:C1:8A:4B:1F:BF:E2:C2:BA:BD:8B:BB:47:FE:1F:D1:CF:22:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:b1:0e:da:13:e7:7d:bf:0d:b5:df:35:36:cf:dc:fb:4b:44:
08:c8:3a:97:30:bb:3b:71:2d:98:f7:12:71:a0:17:09:c1:35:
dd:6c:8b:9d:f1:58:f2:03:9c:2f:0e:f2:e8:8b:5a:db:f9:64:
3f:12:89:51:95:71:04:c4:98:63:a2:96:89:bd:9f:35:c6:36:
29:47:6b:93:8b:70:2a:42:98:d8:86:34:09:fe:48:83:a4:0b:
4a:6a:30:e4:e1:0c:0c:6a:23:81:52:ce:c0:0e:ee:63:79:fa:
a8:c2:6c:81:12:3e:7b:06:2d:ec:db:e6:5e:3d:b2:61:5d:a5:
28:f0:b7:86:53:87:6e:95:1f:33:bc:7e:3c:36:65:37:7b:8e:
07:55:be:a2:d9:01:26:e8:f4:c0:f7:c9:bc:9a:87:8f:32:c0:
d1:38:c0:ab:19:27:8a:6f:11:9a:cc:57:9b:24:94:cb:e7:7b:
ae:dd:db:47:a9:9e:81:98:06:22:1f:23:a3:7e:2d:9f:b1:a5:
da:1b:dd:64:c2:e6:ae:8f:b1:bc:88:f7:95:e5:f3:11:ff:8d:
14:0c:ed:ee:42:c1:1b:27:d8:3b:cc:f3:b9:c1:94:6e:f8:7a:
86:6e:9b:e9:16:3f:5e:c5:7f:f6:f3:e6:75:19:b1:08:f4:c4:
98:11:64:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:38:59 2025 by rpki-client