Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/khxP2jZ8U4OxXCpxQ61LEMlVzqA.mft
File: khxP2jZ8U4OxXCpxQ61LEMlVzqA.mft (raw, json)
Hash identifier: U2REE+IfGz/c7yoxWr4qEw/6aIxCA2b5PUlnzsXSGoU=
Subject key identifier: F8:76:78:9A:42:6C:6B:77:7C:9C:CE:D3:ED:E2:43:0C:EF:65:CD:14
Authority key identifier: 92:1C:4F:DA:36:7C:53:83:B1:5C:2A:71:43:AD:4B:10:C9:55:CE:A0
Certificate issuer: /CN=921c4fda367c5383b15c2a7143ad4b10c955cea0
Certificate serial: 0196BC37394D2D032A0FC2F732A6ACEDDD22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khxP2jZ8U4OxXCpxQ61LEMlVzqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/khxP2jZ8U4OxXCpxQ61LEMlVzqA.mft
Manifest number: 1246
Signing time: Sat 10 May 2025 22:00:57 +0000
Manifest this update: Sat 10 May 2025 22:00:57 +0000
Manifest next update: Sun 11 May 2025 22:00:57 +0000
Files and hashes: 1: K_0VKEBHZ8AzTGdtRKig6YmReAg.roa (hash: V6KL9KuDWKfGzsEoPpZURMCt8ttu62n0nd3Y+gExuwA=)
2: khxP2jZ8U4OxXCpxQ61LEMlVzqA.crl (hash: gH4kad3jfzeu/8nuf7K9lwVhHD0kA/Px7V9rp+4dnw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/khxP2jZ8U4OxXCpxQ61LEMlVzqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/khxP2jZ8U4OxXCpxQ61LEMlVzqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/khxP2jZ8U4OxXCpxQ61LEMlVzqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:37:39:4d:2d:03:2a:0f:c2:f7:32:a6:ac:ed:dd:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921c4fda367c5383b15c2a7143ad4b10c955cea0
Validity
Not Before: May 10 22:00:57 2025 GMT
Not After : May 11 22:00:57 2025 GMT
Subject: CN=f876789a426c6b777c9cced3ede2430cef65cd14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:77:c0:34:c5:30:df:cc:f0:85:50:ca:47:ca:
0d:ed:4a:97:ac:34:03:85:08:88:24:2e:fb:35:b6:
da:24:cb:73:96:19:2c:3b:d3:09:5d:92:6a:d1:5a:
15:a1:42:13:d4:a9:e3:0e:7f:d0:11:87:e8:b6:e0:
e9:ba:4a:28:68:16:7d:5e:e2:3b:2a:ab:91:54:2b:
f9:e9:94:cf:0b:74:ba:6a:c8:7b:c3:f3:cf:80:a2:
91:69:32:b6:a7:96:a5:90:b2:22:c3:65:2c:fd:4c:
e2:7d:93:fe:85:0c:36:50:f7:69:ae:2f:ce:31:fe:
51:43:d6:d1:07:e6:dc:52:0b:9c:25:3a:21:fd:02:
88:25:74:02:da:a5:84:3b:b4:a0:af:d9:f8:bd:4a:
ee:5b:a9:41:1f:18:bd:55:6d:46:28:5e:8d:27:96:
5f:63:bb:04:1c:6f:84:bd:9e:b3:93:f5:c1:93:80:
3a:fc:21:85:41:3a:f6:c1:a3:3e:c5:ac:32:d6:c4:
3b:24:03:6a:ab:3f:dd:0f:2e:70:83:83:6f:7f:76:
b4:9d:d5:82:d9:1f:a8:98:01:06:b7:d4:e8:85:88:
93:d1:40:91:56:72:72:97:32:7f:d0:b9:d8:d3:34:
eb:ae:00:b1:41:54:24:a8:d6:4b:80:02:22:38:01:
bd:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:76:78:9A:42:6C:6B:77:7C:9C:CE:D3:ED:E2:43:0C:EF:65:CD:14
X509v3 Authority Key Identifier:
keyid:92:1C:4F:DA:36:7C:53:83:B1:5C:2A:71:43:AD:4B:10:C9:55:CE:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khxP2jZ8U4OxXCpxQ61LEMlVzqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/khxP2jZ8U4OxXCpxQ61LEMlVzqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/khxP2jZ8U4OxXCpxQ61LEMlVzqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:cb:fd:ac:f5:af:a8:1d:55:9f:a0:40:f9:3e:d1:c6:99:90:
18:9f:d9:57:34:e4:0c:c0:b4:62:36:b0:6b:21:86:b6:65:09:
41:05:5f:32:be:98:24:18:54:1b:13:39:6a:37:67:aa:f0:9d:
e2:7b:f2:c3:6b:6a:bb:16:ac:a4:5c:3e:75:73:df:30:66:b5:
f2:ce:8e:fa:c4:a1:6e:1e:15:f0:9a:da:2d:ed:d9:41:6e:eb:
ef:a0:8d:a3:21:dd:d1:ec:05:15:f1:19:e8:cd:c8:5b:5b:c1:
a3:72:8f:be:a9:95:bb:56:1c:fd:ad:2e:a3:37:a9:7c:7d:b3:
6f:b1:dd:d1:06:7b:a1:f8:c9:32:b1:54:cd:98:54:1a:90:8e:
0f:8b:08:84:cf:d6:f8:e9:d3:80:cf:0b:09:25:66:09:6e:22:
d0:41:6c:23:a8:47:57:ba:f0:15:b0:2b:13:30:ef:bc:8e:69:
92:0b:c6:7c:e6:25:7c:fa:e6:3e:a1:5a:2a:73:eb:11:bd:98:
75:2d:23:23:04:77:80:89:1a:3e:3b:d9:20:a1:92:ee:6c:0f:
ab:8c:b1:8f:b9:ca:07:a6:51:c2:82:34:58:d0:c5:f2:4a:6e:
c9:07:6a:e7:e7:57:22:d5:17:9c:8d:48:19:db:25:cb:f6:8e:
e2:48:3e:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa8NzlNLQMqD8L3Mqas7d0iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyMWM0ZmRhMzY3YzUzODNiMTVjMmE3MTQzYWQ0YjEwYzk1
NWNlYTAwHhcNMjUwNTEwMjIwMDU3WhcNMjUwNTExMjIwMDU3WjAzMTEwLwYDVQQD
EyhmODc2Nzg5YTQyNmM2Yjc3N2M5Y2NlZDNlZGUyNDMwY2VmNjVjZDE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHfANMUw38zwhVDKR8oN7UqXrDQD
hQiIJC77NbbaJMtzlhksO9MJXZJq0VoVoUIT1KnjDn/QEYfotuDpukooaBZ9XuI7
KquRVCv56ZTPC3S6ash7w/PPgKKRaTK2p5alkLIiw2Us/UzifZP+hQw2UPdpri/O
Mf5RQ9bRB+bcUgucJToh/QKIJXQC2qWEO7Sgr9n4vUruW6lBHxi9VW1GKF6NJ5Zf
Y7sEHG+EvZ6zk/XBk4A6/CGFQTr2waM+xawy1sQ7JANqqz/dDy5wg4Nvf3a0ndWC
2R+omAEGt9TohYiT0UCRVnJylzJ/0LnY0zTrrgCxQVQkqNZLgAIiOAG9gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPh2eJpCbGt3fJzO0+3iQwzvZc0UMB8GA1UdIwQY
MBaAFJIcT9o2fFODsVwqcUOtSxDJVc6gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2h4UDJqWjhVNE94WENweFE2MUxFTWxWenFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8zZDZiMWEtNmQ2MS00NGI4LThjYmIt
MjM2MDhmNmFlMmVhLzEva2h4UDJqWjhVNE94WENweFE2MUxFTWxWenFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8zZDZiMWEtNmQ2MS00NGI4LThjYmItMjM2MDhmNmFlMmVh
LzEva2h4UDJqWjhVNE94WENweFE2MUxFTWxWenFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYcv9rPWv
qB1Vn6BA+T7RxpmQGJ/ZVzTkDMC0YjawayGGtmUJQQVfMr6YJBhUGxM5ajdnqvCd
4nvyw2tquxaspFw+dXPfMGa18s6O+sShbh4V8JraLe3ZQW7r76CNoyHd0ewFFfEZ
6M3IW1vBo3KPvqmVu1Yc/a0uozepfH2zb7Hd0QZ7ofjJMrFUzZhUGpCOD4sIhM/W
+OnTgM8LCSVmCW4i0EFsI6hHV7rwFbArEzDvvI5pkgvGfOYlfPrmPqFaKnPrEb2Y
dS0jIwR3gIkaPjvZIKGS7mwPq4yxj7nKB6ZRwoI0WNDF8kpuyQdq5+dXItUXnI1I
Gdsly/aO4kg+Tw==
-----END CERTIFICATE-----
Generated at Sun May 11 04:22:57 2025 by rpki-client