Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft
File: khkujXhVgfcrGGRCJL2MP6ii0Rs.mft (raw, json)
Hash identifier: B7B2YdlJb/dw/D6ap0oaKJq3Z/inUcMFi5PGBrSLvGw=
Subject key identifier: EE:43:FC:34:2F:83:B8:3F:D4:AE:29:75:91:F3:96:F8:1C:76:88:76
Authority key identifier: 92:19:2E:8D:78:55:81:F7:2B:18:64:42:24:BD:8C:3F:A8:A2:D1:1B
Certificate issuer: /CN=92192e8d785581f72b18644224bd8c3fa8a2d11b
Certificate serial: 0197C4CA509B94FCDDC3116B2F137B596A53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft
Manifest number: 1000
Signing time: Tue 01 Jul 2025 07:01:22 +0000
Manifest this update: Tue 01 Jul 2025 07:01:22 +0000
Manifest next update: Wed 02 Jul 2025 07:01:22 +0000
Files and hashes: 1: U5brV2wu1x_E4LYsBJQzT_Q5MOM.roa (hash: ETh8nXKXUOu2Azl2VyxOp9oStSQiBL2JNlN9c3tCXQ0=)
2: WCwlNGrnqXg0s07Q732U-2ylHg4.roa (hash: JC3pVBoWwnSgFg4cCXzdGvV9c4AWdX+y7n3AH9a1Lis=)
3: khkujXhVgfcrGGRCJL2MP6ii0Rs.crl (hash: RcJAKhMQCd91v38v5yrqFLgnsfpXBLKwDBpwWi7J9+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 07:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:ca:50:9b:94:fc:dd:c3:11:6b:2f:13:7b:59:6a:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92192e8d785581f72b18644224bd8c3fa8a2d11b
Validity
Not Before: Jul 1 07:01:22 2025 GMT
Not After : Jul 2 07:01:22 2025 GMT
Subject: CN=ee43fc342f83b83fd4ae297591f396f81c768876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2a:48:63:34:51:a1:9c:18:f2:9d:0d:fd:4c:
e4:b7:34:ab:4d:dc:60:a9:ce:8d:d2:a6:86:4b:75:
af:af:48:66:a8:6f:2a:c5:b0:e5:11:a8:b9:0a:f7:
5d:4a:00:c0:0b:9b:8c:95:46:c5:83:c4:b2:10:22:
37:07:99:1d:01:f3:f5:d7:df:df:2f:4e:61:16:dd:
02:ac:4b:b7:52:ae:7c:d3:94:de:fc:f8:70:6a:fe:
85:35:ed:c7:4e:c2:da:99:99:9c:4b:68:bc:09:0f:
d1:13:ab:e7:77:6f:f5:6e:09:19:49:71:3b:0b:f6:
a7:51:64:0a:de:45:d8:02:88:97:05:1c:0d:60:36:
55:72:74:1a:7d:65:dd:b7:ea:bb:88:3f:88:86:5f:
aa:a6:92:b0:93:39:55:e7:16:66:86:9c:2d:ad:0c:
37:ef:c4:35:47:10:1a:75:a4:9a:dd:24:59:92:5b:
02:b7:fe:5a:15:15:cd:af:84:d4:23:0a:b4:82:f3:
e2:92:1e:bc:4f:09:b0:9a:c2:51:69:4e:f1:ba:c6:
1d:95:fb:57:fe:4d:7c:b2:be:2b:70:ad:6b:93:64:
85:f5:87:c4:8a:78:ef:e4:1f:21:31:dd:c6:ff:c5:
9a:0c:d1:28:ff:eb:a9:bd:d1:68:19:3e:1c:c4:81:
e7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:43:FC:34:2F:83:B8:3F:D4:AE:29:75:91:F3:96:F8:1C:76:88:76
X509v3 Authority Key Identifier:
keyid:92:19:2E:8D:78:55:81:F7:2B:18:64:42:24:BD:8C:3F:A8:A2:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:76:d2:37:10:12:85:80:6e:b6:01:24:70:a7:50:cb:64:b8:
51:19:a0:6f:81:9d:41:3e:0a:18:87:5d:94:78:b5:18:32:12:
0a:1c:d3:e5:6c:00:d6:7e:78:4f:89:55:81:fd:98:4f:bd:36:
b8:1c:22:02:0c:a7:2e:d3:07:46:07:3f:fb:f8:73:39:27:3c:
e6:71:2c:b9:e0:0d:e3:81:8c:02:a8:ad:d4:49:63:5c:74:7d:
9f:a4:32:fc:cb:4b:53:60:06:ae:cd:65:de:d3:45:cb:24:a2:
54:b7:fd:c6:37:69:83:f9:76:4f:3c:a0:3c:b8:26:f5:4e:2a:
78:bf:f3:94:e3:db:99:8e:55:74:0d:d0:e0:7f:4b:f0:cd:62:
ea:8d:cb:f6:7a:d9:eb:db:07:04:79:9a:bb:bd:97:aa:19:66:
7f:fc:4c:b5:12:fb:45:38:7f:87:ac:53:4e:7d:1b:58:93:d3:
f1:3d:50:b4:c6:5b:b5:60:35:c7:57:83:a1:4c:f5:56:66:af:
7d:8f:3c:8d:15:a7:4c:db:70:35:da:4a:34:02:86:0a:f7:b5:
65:69:e4:be:33:41:5a:e0:45:2c:9c:c7:c5:41:a3:d2:60:89:
07:6b:c4:73:9b:24:d8:3d:e2:9c:eb:09:6c:4e:7e:4c:19:1d:
37:c8:a2:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 10:00:09 2025 by rpki-client