Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/KH4cl_cfNVhn4_uHfyGqUTC2z10.mft
File: KH4cl_cfNVhn4_uHfyGqUTC2z10.mft (raw, json)
Hash identifier: thnVwNgAnadhU137Ms5VV5s8gzAXoRnv3OO3rkW7yxo=
Subject key identifier: 64:58:FC:1A:66:29:B5:91:4F:9C:F4:25:9E:D4:3E:52:30:55:F0:28
Authority key identifier: 28:7E:1C:97:F7:1F:35:58:67:E3:FB:87:7F:21:AA:51:30:B6:CF:5D
Certificate issuer: /CN=287e1c97f71f355867e3fb877f21aa5130b6cf5d
Certificate serial: 0198D5F13697E7437D58E1A225A79F1C435D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KH4cl_cfNVhn4_uHfyGqUTC2z10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/KH4cl_cfNVhn4_uHfyGqUTC2z10.mft
Manifest number: 0A95
Signing time: Sat 23 Aug 2025 08:00:11 +0000
Manifest this update: Sat 23 Aug 2025 08:00:11 +0000
Manifest next update: Sun 24 Aug 2025 08:00:11 +0000
Files and hashes: 1: 1gJl5QGcLnfhKR4ZX5vkhukZyTU.roa (hash: NMFFqW5s2zQQWT6VrzvJinnOwTRcu4h6yTFNCCxpjXA=)
2: HlpYPKfUTSJ7pDq2oQziu1OJN70.roa (hash: 2/lnsP1apTOPlsNH0YhFprUwFbQM2G9j3yZLF5vZFt4=)
3: KH4cl_cfNVhn4_uHfyGqUTC2z10.crl (hash: O71ZqULPFzzWdXd/hHw7FbDZ7ljpjAKfrmmYYHFeiJM=)
4: n82Q14Y2YDik1JFdwsQlLlmUXCU.roa (hash: Pqu0KJ3PErrtF3waClxiFcaMqimhO+E9Mo28nI/aapw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/KH4cl_cfNVhn4_uHfyGqUTC2z10.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/KH4cl_cfNVhn4_uHfyGqUTC2z10.mft
rsync://rpki.ripe.net/repository/DEFAULT/KH4cl_cfNVhn4_uHfyGqUTC2z10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:36:97:e7:43:7d:58:e1:a2:25:a7:9f:1c:43:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=287e1c97f71f355867e3fb877f21aa5130b6cf5d
Validity
Not Before: Aug 23 08:00:11 2025 GMT
Not After : Aug 24 08:00:11 2025 GMT
Subject: CN=6458fc1a6629b5914f9cf4259ed43e523055f028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:4d:3a:b9:05:2e:10:46:2c:c5:c2:32:de:1c:
44:d4:f5:52:4a:10:52:f9:6c:8a:2e:68:30:e9:79:
9c:ad:16:84:5a:34:80:aa:93:3b:ae:a2:72:ca:d2:
61:c1:4a:cb:c4:b1:73:f5:61:53:f9:c2:30:e0:70:
5d:6a:d1:0b:97:10:b5:3d:0c:fb:09:e3:49:90:7c:
a7:e8:d1:51:c3:ef:20:d5:c3:2f:2b:a1:24:42:c4:
64:22:5b:a6:b3:1e:4d:a9:e2:86:d6:93:09:6d:9c:
17:c9:db:fa:99:68:db:6e:78:0f:30:2f:95:e4:3c:
25:84:09:9e:67:b2:a0:ca:33:b0:53:27:07:39:58:
a3:c1:b9:92:e3:26:73:17:25:2e:1a:38:d7:af:16:
5f:d8:94:d9:88:25:65:c5:8a:53:3f:a8:79:19:47:
6f:05:eb:f4:6f:78:04:d2:45:11:8b:de:f0:54:c3:
d3:31:2d:70:b6:f6:a8:b7:7c:7b:a0:07:a1:fd:43:
78:66:97:d9:0d:64:56:b1:7d:94:fa:c6:ab:05:72:
d3:79:d3:2c:cf:f5:9e:a5:e4:a0:32:56:3b:59:6e:
46:c0:71:c1:bb:db:79:6f:aa:a9:ad:d7:5c:95:33:
56:56:0c:d9:a1:c0:08:4e:bf:97:41:a3:e6:d9:11:
eb:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:58:FC:1A:66:29:B5:91:4F:9C:F4:25:9E:D4:3E:52:30:55:F0:28
X509v3 Authority Key Identifier:
keyid:28:7E:1C:97:F7:1F:35:58:67:E3:FB:87:7F:21:AA:51:30:B6:CF:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KH4cl_cfNVhn4_uHfyGqUTC2z10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/KH4cl_cfNVhn4_uHfyGqUTC2z10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/KH4cl_cfNVhn4_uHfyGqUTC2z10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:aa:8f:36:c5:22:51:41:a3:8e:26:f3:1b:f2:b1:c6:37:d7:
ce:df:05:8e:ae:78:ec:6c:3e:a4:be:69:5b:ce:7b:4d:f4:9e:
0d:e2:12:b1:65:d2:4b:68:72:0e:96:12:65:74:49:0a:e5:a3:
02:5f:94:7d:92:70:29:d1:6b:8e:24:4b:86:48:45:3e:71:5c:
b7:d6:fb:52:cd:87:5c:53:f1:f7:81:c5:fc:cd:2d:55:e6:fc:
6c:b9:ce:b4:22:4f:6c:2c:93:f7:21:c0:15:79:8f:c4:88:dd:
a3:c2:23:5c:b5:9f:0d:70:e4:e2:ec:e9:7f:5d:79:82:a7:e5:
2a:9f:d1:67:dc:73:33:ae:7d:fe:e6:cf:36:ee:27:b8:b2:e0:
9d:88:c8:81:58:da:52:27:13:c3:c4:68:d3:1f:47:b0:91:79:
1a:1d:a9:26:d7:e3:99:35:11:3d:35:4b:89:5b:74:ff:e8:03:
8d:11:ab:2b:38:2b:c2:f8:65:93:19:73:a2:e0:b4:1c:bb:d5:
28:21:3c:f0:be:5a:86:48:cb:94:5e:d4:e3:83:ee:9f:98:78:
c1:72:cb:22:22:28:78:a1:d2:a5:e4:23:9f:51:ae:1c:07:2f:
6c:0e:93:6b:57:13:3e:a7:e7:cb:ba:4d:1f:ad:fd:3e:3e:96:
77:5e:20:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:36:35 2025 by rpki-client