Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
File: h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft (raw, json)
Hash identifier: 6UTcYXqAq44R9Sn3rLrl/wa0CXXPu7bCN42bz2CiG9k=
Subject key identifier: 63:5D:55:24:F8:74:D4:89:6E:02:EB:13:D0:D1:25:57:77:4F:E3:CC
Authority key identifier: 87:7C:20:73:71:16:BC:6D:5E:5B:22:49:31:CF:13:DD:7F:79:F9:5B
Certificate issuer: /CN=877c20737116bc6d5e5b224931cf13dd7f79f95b
Certificate serial: 0199FAA0C3500485494D4F6A22D12CB06A01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 04:01:03 +0000
Manifest this update: Sun 19 Oct 2025 04:01:03 +0000
Manifest next update: Mon 20 Oct 2025 04:01:03 +0000
Files and hashes: 1: NwkZh_DNuB_iBInY9wDbpyHdLgE.roa (hash: 5w+s5Rk1602R4y1zX8F10ZF0iAVWkGEzyROrjF/5dqE=)
2: SeFxeccbo68KLvP3eAvdIgxyzVI.roa (hash: KKPafx1oDtZuIFD9Wnd6TukbFDgA1SpzCeh9Ci09gpw=)
3: h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl (hash: SHpFMfstd4lvMUbtMo7Tf+hzzAl7tyTgo42hrcRwR/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a0:c3:50:04:85:49:4d:4f:6a:22:d1:2c:b0:6a:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=877c20737116bc6d5e5b224931cf13dd7f79f95b
Validity
Not Before: Oct 19 04:01:03 2025 GMT
Not After : Oct 20 04:01:03 2025 GMT
Subject: CN=635d5524f874d4896e02eb13d0d12557774fe3cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c8:60:23:0a:d0:b8:67:c1:97:27:82:e1:04:
47:33:e8:9e:4c:5c:c0:db:fc:b3:64:09:a4:93:d9:
d0:0c:af:bc:cd:03:01:15:da:0e:33:4c:76:b8:b5:
16:50:64:ab:93:77:5c:28:eb:b9:0a:dc:6f:ae:a9:
99:3e:ba:08:e4:5e:d1:44:c0:56:f7:50:c6:09:4c:
83:6d:6d:0c:b8:e3:d3:b5:fd:41:70:b7:f0:36:16:
9c:b1:bc:c0:a0:33:79:96:b3:51:35:27:2f:d4:f1:
f4:76:47:cd:fa:c8:9d:a4:5f:44:3b:cd:1c:45:b6:
17:a9:09:d5:93:01:72:d4:40:15:d4:40:c9:72:3f:
7c:35:a8:dc:4d:c4:44:8f:29:29:f7:11:26:2c:6e:
bb:b6:2d:ca:b7:c5:5b:4a:c7:bc:53:1a:13:4f:f3:
8f:d0:1b:34:8b:70:b0:43:32:35:23:52:e9:3a:b8:
4f:2f:e9:6a:9b:1b:08:18:fd:9b:64:1c:46:09:5a:
6a:7e:f6:e1:28:9b:1d:60:5a:ee:78:37:4b:18:fb:
56:15:ba:0b:46:95:a1:73:a9:b8:e4:69:d7:11:7c:
a8:15:03:ae:84:cc:44:4d:d8:a0:c0:34:a9:dc:9e:
34:51:40:66:96:d0:99:77:2d:07:c9:8c:89:f1:38:
90:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:5D:55:24:F8:74:D4:89:6E:02:EB:13:D0:D1:25:57:77:4F:E3:CC
X509v3 Authority Key Identifier:
keyid:87:7C:20:73:71:16:BC:6D:5E:5B:22:49:31:CF:13:DD:7F:79:F9:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:7a:fe:8c:52:06:1f:e4:ec:50:03:96:6b:39:96:f0:eb:cf:
16:13:21:36:ab:6f:97:85:e9:b1:90:25:37:42:57:85:49:b3:
7d:f6:8f:d8:a2:20:3e:ff:92:35:cd:47:e4:ac:5f:2d:84:ed:
e5:71:d7:d2:1c:96:8f:71:38:f0:ae:f2:65:0e:9b:4f:38:43:
6c:7f:c3:e5:5c:30:3d:ca:b9:e6:52:6f:e1:11:3b:01:2a:36:
8a:74:b2:13:70:24:68:39:85:92:40:b9:1c:cc:60:22:c3:d5:
32:5d:37:90:ef:93:94:0d:d4:33:82:b9:2d:93:78:90:38:d2:
d4:8a:7c:64:52:96:6a:d3:c1:14:0b:4f:99:43:0c:c4:e8:02:
71:ad:ba:f8:0a:5d:4d:54:c1:27:9f:f9:a6:65:a3:f8:85:09:
11:fe:b1:7c:1c:b2:a3:5c:10:ca:cc:7e:73:52:b2:41:5b:91:
37:c1:5c:ea:c4:8d:d1:c1:db:df:35:c6:cc:4b:1d:03:7b:09:
dd:c8:ab:7a:c6:15:69:a6:17:fe:8c:03:4b:08:db:38:7d:0c:
dd:0f:96:79:41:db:df:d2:08:90:13:40:fc:cd:94:bc:f6:54:
f7:3a:ac:c5:88:c0:3f:d3:9a:d7:fa:1d:7a:2b:8b:c9:0d:07:
69:11:54:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:13 2025 by rpki-client