Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft
File: khkujXhVgfcrGGRCJL2MP6ii0Rs.mft (raw, json)
Hash identifier: r1hwP0r5+dZppn7eTEVjhXdgNyi1HkQ41KH/bFPSCrs=
Subject key identifier: AB:3A:68:4F:79:D9:3B:3C:BC:1A:87:A9:DE:FC:EF:7C:F7:32:83:54
Authority key identifier: 92:19:2E:8D:78:55:81:F7:2B:18:64:42:24:BD:8C:3F:A8:A2:D1:1B
Certificate issuer: /CN=92192e8d785581f72b18644224bd8c3fa8a2d11b
Certificate serial: 0198D5163AD62257F314738BFC3187B7ED62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft
Manifest number: 108D
Signing time: Sat 23 Aug 2025 04:01:00 +0000
Manifest this update: Sat 23 Aug 2025 04:01:00 +0000
Manifest next update: Sun 24 Aug 2025 04:01:00 +0000
Files and hashes: 1: U5brV2wu1x_E4LYsBJQzT_Q5MOM.roa (hash: ETh8nXKXUOu2Azl2VyxOp9oStSQiBL2JNlN9c3tCXQ0=)
2: WCwlNGrnqXg0s07Q732U-2ylHg4.roa (hash: JC3pVBoWwnSgFg4cCXzdGvV9c4AWdX+y7n3AH9a1Lis=)
3: khkujXhVgfcrGGRCJL2MP6ii0Rs.crl (hash: uU15xmZ93qoFN7KcUxKq12Ron6bm313KcHRdN6VvqMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:3a:d6:22:57:f3:14:73:8b:fc:31:87:b7:ed:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92192e8d785581f72b18644224bd8c3fa8a2d11b
Validity
Not Before: Aug 23 04:01:00 2025 GMT
Not After : Aug 24 04:01:00 2025 GMT
Subject: CN=ab3a684f79d93b3cbc1a87a9defcef7cf7328354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b0:21:5e:30:d8:dd:cd:5a:b4:62:14:27:e5:
59:a8:bb:90:29:fd:72:76:7a:4b:a5:31:c0:72:95:
e1:4b:2c:40:99:94:b0:63:7d:db:bd:b9:33:4c:d8:
8e:6b:56:da:cf:d2:aa:34:72:20:6c:2b:b7:bb:14:
30:a0:c8:79:e5:48:19:ed:c0:b1:67:84:ed:70:de:
8a:8e:d9:c6:ae:a7:43:2a:25:8d:3d:25:0c:59:e9:
01:08:0a:5a:b1:bf:19:99:63:8c:37:3b:d3:8f:e1:
41:a4:d9:dc:1a:72:91:2d:2e:e3:05:0b:d7:cc:ed:
e4:d9:52:68:e5:d7:5a:37:25:da:ae:9a:ad:93:23:
cd:7e:84:61:c0:24:f5:9b:f0:52:92:95:e7:1b:ae:
24:e3:fc:61:2b:04:d2:fb:24:93:c7:f7:fd:42:ea:
ea:2a:35:50:ed:4f:4b:fd:fd:0f:8b:b6:27:fb:99:
73:4d:70:b3:c9:6f:fe:46:c6:da:63:92:bb:a8:9d:
60:ac:8e:f5:6f:70:c3:6f:cf:99:bf:85:dd:5e:e2:
4d:b5:aa:be:f6:b8:b3:77:b6:20:3c:0d:8d:e9:fd:
d9:1c:55:a7:62:5f:77:2e:64:fb:93:09:c0:fd:30:
0b:9d:68:4d:5d:d9:75:99:0f:7a:51:b4:d6:16:09:
f7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:3A:68:4F:79:D9:3B:3C:BC:1A:87:A9:DE:FC:EF:7C:F7:32:83:54
X509v3 Authority Key Identifier:
keyid:92:19:2E:8D:78:55:81:F7:2B:18:64:42:24:BD:8C:3F:A8:A2:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:25:3f:68:7b:d4:7a:98:2f:28:e6:7f:4f:b0:9d:5f:b0:11:
84:fe:3d:f0:91:41:c9:64:34:7d:fd:e4:de:ef:5a:20:9e:28:
b3:b2:24:06:58:30:c5:9d:e8:51:20:3d:de:ca:9b:9b:2d:cf:
36:bc:37:2b:82:16:a6:9e:66:ff:5d:09:1c:4c:8e:93:73:29:
ad:e4:d6:9d:49:14:e1:eb:f7:c0:fc:b3:11:c0:d5:b8:94:da:
cb:82:3e:38:57:c3:17:4b:10:ed:d8:ae:83:9e:d6:a7:0d:61:
f4:54:14:77:d1:9b:25:91:c7:83:2e:08:7e:3e:b6:98:ee:e6:
1e:fb:54:df:89:b2:76:c7:53:9d:3a:88:5c:f6:05:88:f7:31:
64:91:3b:7d:77:0a:c0:5f:0f:51:6f:ba:81:4e:78:d6:1e:1b:
c0:80:17:8d:e0:68:6b:55:12:41:75:3f:be:5b:e1:82:ac:ed:
67:df:49:c7:de:28:36:b0:fa:15:85:8f:d6:da:89:74:7e:66:
de:b8:24:d8:97:6c:23:23:32:4d:ba:b4:0d:7c:de:b9:7c:f8:
6d:28:da:36:df:cf:29:66:37:b1:f5:d5:f2:92:61:e1:35:07:
ff:15:41:ca:ba:f5:3c:22:9e:f8:5c:3f:2c:4c:4d:bb:5a:0a:
5a:7d:72:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:29:35 2025 by rpki-client