Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
File: KhLvrumX6adjtGCrWS3dpnoN63A.mft (raw, json)
Hash identifier: 0q+LBk9k98lH/vG7m4lLmP03nG8DmhY5bXgcVJkB74M=
Subject key identifier: 67:9A:0A:61:31:5B:DD:18:77:62:5A:7A:8F:F7:2B:93:C5:0C:18:C9
Authority key identifier: 2A:12:EF:AE:E9:97:E9:A7:63:B4:60:AB:59:2D:DD:A6:7A:0D:EB:70
Certificate issuer: /CN=2a12efaee997e9a763b460ab592ddda67a0deb70
Certificate serial: 0199FD342890B98F0CFE57F3AB1C0195AC7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KhLvrumX6adjtGCrWS3dpnoN63A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
Manifest number: 02C7
Signing time: Sun 19 Oct 2025 16:01:17 +0000
Manifest this update: Sun 19 Oct 2025 16:01:17 +0000
Manifest next update: Mon 20 Oct 2025 16:01:17 +0000
Files and hashes: 1: 1-EYj7rCEm13C4ia18Eyfo_8k-RU.roa (hash: +ir98X5g2btNq9n+Pt6yr5mLVRkCwQv4UOQGouQJy1M=)
2: KhLvrumX6adjtGCrWS3dpnoN63A.crl (hash: 8tyEf+paYMSieQ8dmd+nwpozzZV5QTW03vK/fo48e8A=)
3: SccPUBWuljMHYcMk3K5QOdOVb6g.roa (hash: uBtJ4Y5vGvXPCHheXT9gg13uzVBy/aYh9vF63HwlhDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
rsync://rpki.ripe.net/repository/DEFAULT/KhLvrumX6adjtGCrWS3dpnoN63A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:28:90:b9:8f:0c:fe:57:f3:ab:1c:01:95:ac:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a12efaee997e9a763b460ab592ddda67a0deb70
Validity
Not Before: Oct 19 16:01:17 2025 GMT
Not After : Oct 20 16:01:17 2025 GMT
Subject: CN=679a0a61315bdd1877625a7a8ff72b93c50c18c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d9:88:8a:82:b3:88:91:b6:51:bd:48:2f:24:
f5:f9:94:e7:ee:fa:40:f9:68:f7:3f:5b:01:08:e0:
1d:06:59:6c:78:f8:d6:a7:7f:38:a4:65:d3:0c:11:
54:b0:20:67:64:ff:ac:2f:5b:8f:00:0e:22:43:08:
b2:33:21:c0:bb:86:0e:6b:e2:23:15:5a:ef:25:9d:
2c:78:b0:0d:3b:11:7e:ea:c8:e3:15:5b:da:2c:bf:
fd:4d:14:a4:15:c9:85:94:fe:b4:5a:39:f0:d3:60:
86:0f:8d:46:0c:d9:66:32:d8:be:2a:72:d3:78:2f:
75:bf:77:c6:c6:f3:28:b9:44:a3:78:ec:3b:b1:41:
42:f7:ff:f2:20:8a:a0:d2:85:72:f1:79:9b:13:cb:
41:12:57:15:6a:cb:83:65:31:4d:5d:eb:0a:84:d1:
ce:ef:9a:ba:17:6c:3b:50:b8:10:1e:32:c5:bc:05:
5a:18:40:b1:0a:0e:25:50:25:cd:1a:5f:d9:c3:57:
ca:8c:d8:55:ed:ab:3b:36:98:4a:e9:76:14:95:e8:
24:8e:b2:a5:67:40:31:ef:c3:a5:08:7a:fd:56:1d:
a7:66:7b:0f:18:0f:59:ed:db:31:46:1d:8c:2d:82:
64:e7:5d:d3:4d:96:7c:1d:83:81:2d:ea:55:d0:e7:
16:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:9A:0A:61:31:5B:DD:18:77:62:5A:7A:8F:F7:2B:93:C5:0C:18:C9
X509v3 Authority Key Identifier:
keyid:2A:12:EF:AE:E9:97:E9:A7:63:B4:60:AB:59:2D:DD:A6:7A:0D:EB:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KhLvrumX6adjtGCrWS3dpnoN63A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:a2:c5:53:1b:37:3d:a1:bf:a3:47:dc:e6:5b:68:48:63:c9:
bf:79:66:ed:3d:7d:ea:09:7f:4c:62:c2:f8:4d:82:ac:44:c3:
f8:44:67:11:5c:c1:c4:1c:18:90:45:4e:ed:48:12:2c:c6:6a:
2e:c0:4b:06:0e:fc:e2:6c:a8:1e:dd:b7:74:d9:e4:14:68:f8:
d3:65:8f:c9:8e:a0:fa:0a:7c:61:6e:08:91:96:ac:65:f5:c6:
05:02:44:39:78:f4:b2:58:06:01:f1:d0:b4:87:ac:60:67:ab:
c3:83:d2:35:13:7d:3e:5b:a8:1b:1c:08:fa:18:2f:bf:ac:f7:
08:99:b8:11:8a:84:85:83:bb:05:10:a0:52:68:7b:13:c1:38:
ad:19:c5:7f:47:09:f0:96:a3:8c:08:32:1d:de:96:4a:80:f5:
0c:93:3a:a3:b9:46:9b:22:df:98:b1:b9:a7:cc:2e:ae:a3:1b:
d4:9a:74:79:f0:6e:6a:5a:ea:28:59:d9:9d:8a:aa:70:77:b7:
20:19:77:be:9d:5e:12:ae:22:43:20:2b:80:37:fd:73:ba:7b:
f5:1e:b1:3a:49:31:a2:02:f8:0d:0e:0e:89:48:c8:09:46:45:
b9:6c:c3:be:ee:06:34:d0:f9:41:54:58:9f:51:bc:3c:84:1b:
68:1e:0b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:02:59 2025 by rpki-client