Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/khxP2jZ8U4OxXCpxQ61LEMlVzqA.mft
File: khxP2jZ8U4OxXCpxQ61LEMlVzqA.mft (raw, json)
Hash identifier: 1MtZ4TTt6M6QOcbuRW47IUFDErxzDPPu0jSoHQW57go=
Subject key identifier: E4:91:8C:68:4E:1B:F5:39:44:4D:37:A9:FA:B8:80:BE:44:4E:94:3A
Authority key identifier: 92:1C:4F:DA:36:7C:53:83:B1:5C:2A:71:43:AD:4B:10:C9:55:CE:A0
Certificate issuer: /CN=921c4fda367c5383b15c2a7143ad4b10c955cea0
Certificate serial: 0197B7450FE7AEB1A25B26DB72F701EA6C54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khxP2jZ8U4OxXCpxQ61LEMlVzqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/khxP2jZ8U4OxXCpxQ61LEMlVzqA.mft
Manifest number: 12C8
Signing time: Sat 28 Jun 2025 16:00:45 +0000
Manifest this update: Sat 28 Jun 2025 16:00:45 +0000
Manifest next update: Sun 29 Jun 2025 16:00:45 +0000
Files and hashes: 1: K_0VKEBHZ8AzTGdtRKig6YmReAg.roa (hash: V6KL9KuDWKfGzsEoPpZURMCt8ttu62n0nd3Y+gExuwA=)
2: khxP2jZ8U4OxXCpxQ61LEMlVzqA.crl (hash: MAXAxzztC3eoADOxBwZD/QWbkZsDgtEUMxoqF+BkqzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/khxP2jZ8U4OxXCpxQ61LEMlVzqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/khxP2jZ8U4OxXCpxQ61LEMlVzqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/khxP2jZ8U4OxXCpxQ61LEMlVzqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:0f:e7:ae:b1:a2:5b:26:db:72:f7:01:ea:6c:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921c4fda367c5383b15c2a7143ad4b10c955cea0
Validity
Not Before: Jun 28 16:00:45 2025 GMT
Not After : Jun 29 16:00:45 2025 GMT
Subject: CN=e4918c684e1bf539444d37a9fab880be444e943a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:81:a7:a4:c1:00:4d:d7:64:a8:f8:9d:6d:0c:
61:94:25:40:3e:98:b7:28:93:10:4d:c7:0b:f5:fb:
94:18:31:f9:44:10:fa:2b:02:3c:8b:3c:76:f5:3b:
2e:83:c2:84:53:92:6d:11:0c:01:5a:1c:62:70:f7:
8e:70:a2:13:06:8a:50:b8:ea:2c:10:03:0f:3f:6f:
c8:e2:28:93:c4:64:e1:ed:2d:d1:c3:39:83:16:7c:
28:c4:e2:b3:d2:f3:54:7f:ee:d4:63:29:fd:c7:06:
42:c2:34:d9:6f:e4:e0:b3:64:f7:60:13:39:98:e6:
20:b2:0a:54:72:cd:97:03:89:30:d3:03:3a:5d:a6:
64:2b:fb:14:d8:2d:25:b2:e8:e9:27:90:08:4d:aa:
54:1c:7a:1b:f6:aa:5a:a5:6e:a9:16:9b:92:4e:9a:
ee:3b:ae:76:64:d3:b0:16:b5:2e:9d:59:be:9e:02:
b6:9e:99:44:7d:98:e5:0c:96:a5:8b:79:61:3b:f5:
58:55:04:bb:e3:59:89:44:4c:82:fd:17:da:35:1f:
ed:c0:a3:11:92:21:db:55:e5:85:3c:8c:2d:6d:81:
f9:94:e6:cb:88:be:31:6d:48:c7:a5:99:65:d7:7e:
46:18:df:5b:f5:6d:c5:6b:36:b6:40:b6:df:1d:7b:
65:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:91:8C:68:4E:1B:F5:39:44:4D:37:A9:FA:B8:80:BE:44:4E:94:3A
X509v3 Authority Key Identifier:
keyid:92:1C:4F:DA:36:7C:53:83:B1:5C:2A:71:43:AD:4B:10:C9:55:CE:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khxP2jZ8U4OxXCpxQ61LEMlVzqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/khxP2jZ8U4OxXCpxQ61LEMlVzqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/khxP2jZ8U4OxXCpxQ61LEMlVzqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:4f:07:58:40:76:a2:e9:61:33:ba:6d:a2:f0:e7:8f:f9:d1:
36:fd:eb:34:d2:f8:58:d5:14:58:a7:0d:7b:f8:01:20:e1:2e:
30:f2:a3:72:96:3f:1f:dd:dc:c1:15:fd:9b:3f:b1:3d:d7:9f:
af:bf:df:bb:e2:c4:4e:ff:13:07:44:f9:b0:8f:93:13:bb:ed:
dd:94:0b:0e:68:a9:53:a1:03:ca:06:65:46:a4:06:5a:47:f4:
5b:7f:95:59:78:8c:c6:d1:96:65:4c:2d:9c:98:9d:c3:78:8b:
9d:d0:dc:5a:84:08:ec:82:bb:8b:d8:4d:03:09:d9:51:5f:66:
c4:96:f0:75:1b:93:23:08:92:96:e9:88:de:ca:51:2c:b2:6f:
02:5a:86:68:8c:47:84:a2:c5:10:2c:d6:09:74:96:ea:1e:8a:
ef:0a:ec:2c:c1:96:22:09:9b:9b:51:0c:c2:a5:75:e6:9f:a1:
ff:e0:4a:e5:c7:fa:04:35:0f:67:7c:72:1c:c2:45:a1:8d:e6:
02:02:d1:1b:1a:45:52:7a:c1:bb:14:54:f3:c1:27:f1:71:dc:
2e:8d:d4:94:06:14:f2:ae:30:86:49:24:46:8a:08:a4:82:db:
3b:65:85:04:b5:7d:bf:d3:ae:fa:85:9e:e0:ec:08:c6:16:c6:
87:75:50:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:15:37 2025 by rpki-client