Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/khxP2jZ8U4OxXCpxQ61LEMlVzqA.mft
File: khxP2jZ8U4OxXCpxQ61LEMlVzqA.mft (raw, json)
Hash identifier: 7bLd0/pk/nodNZfOzv6c3vaTbNcFtyqflXh9IEeZ4qY=
Subject key identifier: EC:1F:FE:1F:5C:8B:27:B9:52:07:C1:2D:53:87:E2:12:11:3D:A9:B3
Authority key identifier: 92:1C:4F:DA:36:7C:53:83:B1:5C:2A:71:43:AD:4B:10:C9:55:CE:A0
Certificate issuer: /CN=921c4fda367c5383b15c2a7143ad4b10c955cea0
Certificate serial: 0199FAA0F12E5E5E93E7A0ECF549CE588E74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khxP2jZ8U4OxXCpxQ61LEMlVzqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/khxP2jZ8U4OxXCpxQ61LEMlVzqA.mft
Manifest number: 13F4
Signing time: Sun 19 Oct 2025 04:01:15 +0000
Manifest this update: Sun 19 Oct 2025 04:01:15 +0000
Manifest next update: Mon 20 Oct 2025 04:01:15 +0000
Files and hashes: 1: K_0VKEBHZ8AzTGdtRKig6YmReAg.roa (hash: V6KL9KuDWKfGzsEoPpZURMCt8ttu62n0nd3Y+gExuwA=)
2: khxP2jZ8U4OxXCpxQ61LEMlVzqA.crl (hash: zA8Ff1/V8Uy8H/CrK6TtDFLsg9w9LinGaYvCZIugsRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/khxP2jZ8U4OxXCpxQ61LEMlVzqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/khxP2jZ8U4OxXCpxQ61LEMlVzqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/khxP2jZ8U4OxXCpxQ61LEMlVzqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a0:f1:2e:5e:5e:93:e7:a0:ec:f5:49:ce:58:8e:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921c4fda367c5383b15c2a7143ad4b10c955cea0
Validity
Not Before: Oct 19 04:01:15 2025 GMT
Not After : Oct 20 04:01:15 2025 GMT
Subject: CN=ec1ffe1f5c8b27b95207c12d5387e212113da9b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:21:b0:1f:2a:45:c5:0c:6f:a8:e9:fe:78:d4:
fd:22:97:a5:ca:f8:47:9f:14:2d:73:5c:e5:81:37:
e1:02:ee:8f:ef:89:41:6a:7a:d3:25:cd:28:05:ae:
b1:8f:21:c4:81:0e:19:2f:b3:e7:98:36:62:21:21:
b1:4a:c9:90:07:83:27:a5:b9:c8:a6:44:96:8c:4c:
13:95:24:27:70:62:af:68:44:a8:47:6c:76:ef:69:
e5:8b:05:4e:ef:c5:11:d6:97:c7:70:13:74:4d:72:
80:77:bd:a4:87:57:e4:8a:99:a4:53:2f:12:85:a0:
e7:81:37:f1:68:ff:87:44:2a:36:5f:32:14:cc:db:
55:ae:a6:ec:21:df:6b:d0:0f:a7:49:86:d4:f4:c9:
f4:39:79:18:11:d0:6b:26:fa:fe:74:98:4c:a3:c6:
d8:dc:22:49:fc:bf:1f:bf:a1:72:cd:9a:c5:79:90:
40:8f:4c:97:a3:bd:7f:0f:3e:e7:5e:25:f4:de:a1:
a2:ec:de:3d:82:8f:b7:f8:cf:cb:aa:e6:a2:2b:66:
18:02:25:0d:5d:81:d4:cc:60:a0:d9:19:d2:93:d8:
75:1f:26:8e:c5:9e:fa:34:d0:fc:b2:d2:8d:88:b6:
8f:97:16:6f:0f:79:ec:80:fe:7e:82:76:38:72:9d:
72:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:1F:FE:1F:5C:8B:27:B9:52:07:C1:2D:53:87:E2:12:11:3D:A9:B3
X509v3 Authority Key Identifier:
keyid:92:1C:4F:DA:36:7C:53:83:B1:5C:2A:71:43:AD:4B:10:C9:55:CE:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khxP2jZ8U4OxXCpxQ61LEMlVzqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/khxP2jZ8U4OxXCpxQ61LEMlVzqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/khxP2jZ8U4OxXCpxQ61LEMlVzqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:b7:05:01:99:03:0e:97:10:d8:72:c6:5e:54:d9:c6:81:06:
22:e6:8b:a6:74:78:69:bf:3f:4a:24:01:e8:4e:68:f0:ec:a1:
db:a2:91:f1:8b:e8:a7:7b:f6:25:b1:c4:6b:ea:c1:dc:10:68:
3d:28:a7:bb:c4:59:a8:ac:63:f9:e1:6f:e1:82:9a:42:61:3d:
bf:3a:f1:c1:80:f9:43:3e:d5:db:e2:18:c6:42:9b:5c:7c:06:
b7:c7:d8:23:82:a1:b4:f6:eb:1a:08:57:10:1c:0f:76:ac:ca:
f0:94:53:6a:40:f9:ac:24:7b:bf:22:b6:89:f6:4e:8c:50:c7:
50:e3:3b:c6:c6:18:01:c3:bd:49:31:6e:86:b6:f5:de:c0:9b:
d5:a5:98:0d:75:f5:f2:3f:71:bf:88:ce:26:1a:f5:56:c3:38:
58:d3:b4:10:dd:9d:fe:45:7c:f8:3d:58:55:93:8f:0a:16:23:
75:79:03:4a:e9:d1:4d:e2:a9:97:55:99:4e:ef:95:f2:cd:d0:
d2:b5:27:ea:4e:a1:45:72:52:b2:5c:e2:be:d0:5c:34:7b:bb:
d7:45:2e:dd:e8:68:92:e7:2b:3b:4a:19:49:7e:31:60:7d:d5:
65:49:09:cf:14:1a:28:04:f9:73:d6:e4:7e:78:b6:fc:96:33:
a3:d4:08:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:11:13 2025 by rpki-client