Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/khxP2jZ8U4OxXCpxQ61LEMlVzqA.mft
File: khxP2jZ8U4OxXCpxQ61LEMlVzqA.mft (raw, json)
Hash identifier: USMCMqzLq1u7EQovmB08m/qosBHZCo06r4+u0BGPqPA=
Subject key identifier: 3D:36:40:F7:9C:6E:8C:4B:C3:DF:63:95:FE:9B:6A:15:17:26:A5:C5
Authority key identifier: 92:1C:4F:DA:36:7C:53:83:B1:5C:2A:71:43:AD:4B:10:C9:55:CE:A0
Certificate issuer: /CN=921c4fda367c5383b15c2a7143ad4b10c955cea0
Certificate serial: 0198D515650959FA72F6F5B41A1BCBB4835F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khxP2jZ8U4OxXCpxQ61LEMlVzqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/khxP2jZ8U4OxXCpxQ61LEMlVzqA.mft
Manifest number: 135C
Signing time: Sat 23 Aug 2025 04:00:05 +0000
Manifest this update: Sat 23 Aug 2025 04:00:05 +0000
Manifest next update: Sun 24 Aug 2025 04:00:05 +0000
Files and hashes: 1: K_0VKEBHZ8AzTGdtRKig6YmReAg.roa (hash: V6KL9KuDWKfGzsEoPpZURMCt8ttu62n0nd3Y+gExuwA=)
2: khxP2jZ8U4OxXCpxQ61LEMlVzqA.crl (hash: LpTNfwrAXU68Z07KyvhYVDdehmsbHo/GHruLhvzl2bU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/khxP2jZ8U4OxXCpxQ61LEMlVzqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/khxP2jZ8U4OxXCpxQ61LEMlVzqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/khxP2jZ8U4OxXCpxQ61LEMlVzqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:65:09:59:fa:72:f6:f5:b4:1a:1b:cb:b4:83:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921c4fda367c5383b15c2a7143ad4b10c955cea0
Validity
Not Before: Aug 23 04:00:05 2025 GMT
Not After : Aug 24 04:00:05 2025 GMT
Subject: CN=3d3640f79c6e8c4bc3df6395fe9b6a151726a5c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c1:91:91:ac:b2:52:37:8d:2d:f6:5d:55:a3:
52:74:10:c5:08:ec:44:ea:ee:f8:c8:4e:1a:b9:89:
fd:4f:ec:6f:8b:bd:7b:1f:67:bb:e4:e9:59:d2:3b:
eb:4d:2b:0a:09:72:12:95:d8:86:ce:d9:2f:07:77:
77:ac:24:87:83:dc:5b:a1:51:05:a7:21:be:f5:f9:
5e:d4:e2:11:78:40:c0:f7:25:a2:9d:da:f6:f4:58:
38:42:33:7c:3c:1a:bc:7a:61:ef:bb:cd:3c:5e:e5:
31:d2:43:a0:cb:be:3d:e5:37:96:b9:0c:3f:ed:c4:
50:e2:2d:46:c1:82:8b:c7:c3:42:76:ba:cc:7c:94:
90:9b:23:78:f2:e5:85:2e:b2:39:92:47:ad:60:6e:
9b:ef:7c:eb:a9:09:e8:b5:3d:a9:08:5c:f1:35:ae:
d1:0e:7f:21:dd:dd:4f:d4:98:f6:5d:a5:02:76:1d:
3c:5b:04:35:42:35:88:4e:3a:b7:69:25:dc:ba:1a:
de:75:7a:02:5f:a0:7b:fd:35:5d:87:b8:17:99:24:
65:ed:20:a5:c3:d8:87:d5:f8:a9:5c:ee:fb:2f:d2:
ab:42:45:32:44:c8:34:aa:41:71:6a:ab:72:3f:1a:
5e:a9:06:f2:ad:24:24:f2:46:e6:a4:63:c2:f8:48:
5b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:36:40:F7:9C:6E:8C:4B:C3:DF:63:95:FE:9B:6A:15:17:26:A5:C5
X509v3 Authority Key Identifier:
keyid:92:1C:4F:DA:36:7C:53:83:B1:5C:2A:71:43:AD:4B:10:C9:55:CE:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khxP2jZ8U4OxXCpxQ61LEMlVzqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/khxP2jZ8U4OxXCpxQ61LEMlVzqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/khxP2jZ8U4OxXCpxQ61LEMlVzqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:54:b5:f0:19:9f:4c:e9:a9:79:a8:f3:73:b7:23:c7:e9:84:
07:95:83:ee:fe:c6:c7:81:8b:b5:fc:99:62:15:1a:ea:ab:9f:
00:56:e7:a4:3f:8e:ac:cf:bf:9e:8e:f2:1f:5b:61:72:68:1d:
13:ec:10:7b:50:8c:e7:89:a4:f4:87:a0:03:4c:cb:7e:1b:d5:
32:e9:89:4e:fa:37:e4:39:f3:45:f5:27:d8:e6:fe:0d:af:3c:
e3:77:3c:2e:0a:57:80:55:31:89:a0:0b:5c:56:ce:4e:78:3f:
8f:dd:d1:59:c4:13:55:05:e6:2e:90:63:64:09:c0:7e:04:88:
b7:6f:6e:b8:9f:89:e4:e2:ad:84:9b:53:4f:b2:b3:0d:71:50:
6a:66:bf:af:e9:76:d3:bc:22:2d:bd:f5:ba:80:c5:5c:2e:61:
df:ef:93:77:0e:0d:87:ee:50:3a:96:d7:b9:5b:0d:0b:e9:fa:
32:40:26:bf:74:ec:06:bb:ca:92:19:9b:95:40:d8:7e:b3:31:
a3:fe:aa:02:47:31:bf:9e:fb:75:b8:a8:0d:62:a6:d5:ca:34:
ca:66:73:9e:81:db:c8:b7:80:e5:93:82:cb:8a:00:ca:db:f5:
15:a1:7c:4f:d1:66:9c:b5:8d:72:39:71:58:ba:1a:40:52:12:
91:c1:6d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:41 2025 by rpki-client