Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.mft
File: khPywtBsZLiVRXq1D8SSAoOknMc.mft (raw, json)
Hash identifier: u9M/Ssmx5YTYgLsy/kCRGVcYJWYzeyhqNzUsvKjGir0=
Subject key identifier: F6:AC:98:41:2D:3C:06:54:7D:48:93:69:06:7E:B2:03:7C:6D:AE:D5
Authority key identifier: 92:13:F2:C2:D0:6C:64:B8:95:45:7A:B5:0F:C4:92:02:83:A4:9C:C7
Certificate issuer: /CN=9213f2c2d06c64b895457ab50fc4920283a49cc7
Certificate serial: 0198D47367D26C8901ABFF3976B4B852F57B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khPywtBsZLiVRXq1D8SSAoOknMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.mft
Manifest number: 164E
Signing time: Sat 23 Aug 2025 01:03:09 +0000
Manifest this update: Sat 23 Aug 2025 01:03:09 +0000
Manifest next update: Sun 24 Aug 2025 01:03:09 +0000
Files and hashes: 1: WzcaaMQRrlChBNRzpd6ejVsnjhE.roa (hash: thxrjBXbUSSC8DCWldp79G7rZSMi1abwsQ1q60K08dg=)
2: iRKQaDksCLDeAQtwp0YKQ3SovAI.roa (hash: wixldrtyd3fdUQpeC4X4fRGfwA4fNIJXJhW2tQSWdew=)
3: khPywtBsZLiVRXq1D8SSAoOknMc.crl (hash: kbV4o+woVUumP0hwP+x3OVriiCE9jW1KYaxZrJVNCOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/khPywtBsZLiVRXq1D8SSAoOknMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:67:d2:6c:89:01:ab:ff:39:76:b4:b8:52:f5:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9213f2c2d06c64b895457ab50fc4920283a49cc7
Validity
Not Before: Aug 23 01:03:09 2025 GMT
Not After : Aug 24 01:03:09 2025 GMT
Subject: CN=f6ac98412d3c06547d489369067eb2037c6daed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:22:a1:37:46:33:e9:36:8c:46:3f:0d:8b:55:
60:ce:2c:e3:f8:a8:6a:ae:df:5c:08:6f:55:b9:ac:
9c:10:4d:0a:d8:48:9c:68:c8:4a:25:3c:a4:b8:d8:
38:1c:de:b4:89:d7:ea:50:89:fd:07:bb:c1:04:c0:
10:e1:4c:f0:b1:65:e5:17:3b:54:94:91:54:6f:d3:
42:ec:10:a0:d1:b4:02:cb:5e:4f:43:ec:00:4a:49:
40:00:99:ac:85:68:a2:d5:10:b7:bf:ee:72:b1:5b:
cf:cc:e0:91:14:e7:33:06:42:47:7f:97:ae:ce:28:
43:81:97:78:29:6d:33:11:17:35:cd:73:a3:f9:d7:
86:18:ea:4b:90:5d:2b:fa:13:9c:72:86:65:84:65:
6d:45:eb:b4:72:4d:62:ec:4d:2d:c1:e8:eb:f4:e4:
1b:bc:1f:ef:10:7e:14:d0:af:8f:dc:58:a7:28:00:
fe:26:15:12:40:fb:1c:be:d2:a5:54:e6:1a:39:8b:
a3:fe:b8:39:99:e8:c7:4a:ab:5e:65:ad:e6:3f:5c:
37:c2:2e:bb:da:45:99:35:90:ed:1e:70:54:8a:18:
e7:a5:16:8d:7e:c9:b6:0c:06:dc:57:3d:79:5b:e9:
03:60:af:ed:b9:c7:cb:32:bf:f8:7f:39:92:e1:19:
e6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:AC:98:41:2D:3C:06:54:7D:48:93:69:06:7E:B2:03:7C:6D:AE:D5
X509v3 Authority Key Identifier:
keyid:92:13:F2:C2:D0:6C:64:B8:95:45:7A:B5:0F:C4:92:02:83:A4:9C:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khPywtBsZLiVRXq1D8SSAoOknMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:fa:15:13:84:22:bd:d2:e1:4e:79:22:f3:f0:e5:01:60:c1:
0c:93:f2:64:e1:c2:72:2b:4b:0a:c3:23:1b:54:00:2a:be:fb:
de:e9:58:35:b7:54:a5:8a:e1:53:ed:97:65:68:2a:5a:c1:77:
63:6c:0e:ef:b7:f7:3a:9e:b0:d9:8a:a1:eb:bb:33:d6:66:04:
a6:1b:fc:a2:e0:aa:e9:01:40:81:89:0b:47:54:23:d3:46:60:
ff:3d:06:39:14:22:be:26:b0:de:c3:f2:b5:1e:d9:68:a6:de:
0d:0b:dc:e5:f9:4e:3e:b8:c5:5b:a5:54:4e:3a:38:cf:f7:04:
38:8a:dc:3f:7b:7b:19:b4:d7:c3:83:0f:c2:e0:ac:a2:0a:58:
cf:81:e2:24:1d:13:a8:4c:14:9f:9b:c3:49:10:f0:88:38:92:
71:1f:f0:8e:3b:49:34:ed:38:2a:50:ed:fd:66:ec:8a:73:a7:
62:5f:05:78:b0:74:0e:0a:91:70:81:68:9f:d9:ff:dd:6c:86:
7a:43:89:43:d5:ef:40:43:62:cd:ad:6c:2e:e8:6c:38:c5:e9:
5e:2c:cf:8d:50:20:b2:e7:b2:eb:97:62:37:38:83:c6:e3:80:
78:0e:90:c4:1f:84:26:24:a1:18:7c:56:e4:79:59:60:92:87:
ef:60:8b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:15 2025 by rpki-client