Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/46e223-6d23-4795-9525-bc877ce9061a/1/khjNJev3TLGwBLAe5QVQP_8kbWE.mft
File: khjNJev3TLGwBLAe5QVQP_8kbWE.mft (raw, json)
Hash identifier: quMPjmz0/cSN24CHvwIq0iTM/rJdqvhzeCUQlBT8LiY=
Subject key identifier: 76:C3:E1:26:A4:8A:A9:B2:E4:99:43:13:81:10:2F:F3:BC:8C:D9:FB
Authority key identifier: 92:18:CD:25:EB:F7:4C:B1:B0:04:B0:1E:E5:05:50:3F:FF:24:6D:61
Certificate issuer: /CN=9218cd25ebf74cb1b004b01ee505503fff246d61
Certificate serial: 0197B6A2066A07BDCFE43C41335FD4E4E198
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khjNJev3TLGwBLAe5QVQP_8kbWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/46e223-6d23-4795-9525-bc877ce9061a/1/khjNJev3TLGwBLAe5QVQP_8kbWE.mft
Manifest number: 03EC
Signing time: Sat 28 Jun 2025 13:02:41 +0000
Manifest this update: Sat 28 Jun 2025 13:02:41 +0000
Manifest next update: Sun 29 Jun 2025 13:02:41 +0000
Files and hashes: 1: TrlRH64mTqxgPbbyg2lJDlsMeB0.roa (hash: Ar7RtZkoApHXI4MhYkDHCkz8Varr+3EYOSwaeqk+kiE=)
2: eWQbNDk7Bizpa1HJwWi556Oud3s.roa (hash: PwNs4nRmZS0NVFzVnjZatxVrXUe/B08COyWu1QU2ZLs=)
3: khjNJev3TLGwBLAe5QVQP_8kbWE.crl (hash: HL72a813799kIx1DcKej0vciUFJwbkYOGSJ9a8Sfq2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/46e223-6d23-4795-9525-bc877ce9061a/1/khjNJev3TLGwBLAe5QVQP_8kbWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/46e223-6d23-4795-9525-bc877ce9061a/1/khjNJev3TLGwBLAe5QVQP_8kbWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/khjNJev3TLGwBLAe5QVQP_8kbWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:06:6a:07:bd:cf:e4:3c:41:33:5f:d4:e4:e1:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9218cd25ebf74cb1b004b01ee505503fff246d61
Validity
Not Before: Jun 28 13:02:41 2025 GMT
Not After : Jun 29 13:02:41 2025 GMT
Subject: CN=76c3e126a48aa9b2e499431381102ff3bc8cd9fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5e:4a:f6:24:2f:16:a2:b3:c7:0b:f0:4a:aa:
59:46:ea:47:50:d8:ad:4c:db:ac:68:a7:69:f3:0b:
ec:a3:8f:00:b7:7f:24:5d:df:64:cf:22:8e:0d:7e:
4e:b8:44:c9:d9:87:ca:7d:57:7d:9b:4b:dc:70:46:
1a:f3:f7:96:b1:92:7f:56:65:4d:b2:17:a7:70:08:
24:76:d2:4e:ea:7f:d6:c6:54:9d:d0:82:65:e5:74:
cd:9d:eb:ce:c5:f2:74:d3:a7:a8:fe:36:ee:b8:15:
28:41:b3:6d:23:4a:5c:ac:5e:d0:18:c9:f6:5c:f5:
1a:30:03:98:42:40:b5:45:0a:52:cf:a6:22:0a:2c:
e9:ce:5b:38:9a:c7:00:07:48:07:af:3a:ce:6c:d6:
75:00:46:b1:ff:6e:f1:33:ea:6a:df:e7:dc:89:ba:
7b:90:7c:f3:3f:ba:9d:ed:69:d6:88:01:fe:7d:fe:
4a:7c:96:2c:84:4e:c7:e5:69:0a:bc:6f:dd:20:a2:
58:1b:24:bc:77:a6:f3:d6:22:7f:65:ed:7c:f5:fb:
bd:27:d6:b6:6a:ce:e2:b4:46:25:fa:ef:0e:a7:cd:
b6:75:61:91:aa:34:94:91:aa:c5:50:f6:eb:a7:04:
61:f0:71:4e:99:47:d5:6c:54:fd:12:34:73:be:96:
76:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:C3:E1:26:A4:8A:A9:B2:E4:99:43:13:81:10:2F:F3:BC:8C:D9:FB
X509v3 Authority Key Identifier:
keyid:92:18:CD:25:EB:F7:4C:B1:B0:04:B0:1E:E5:05:50:3F:FF:24:6D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khjNJev3TLGwBLAe5QVQP_8kbWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/46e223-6d23-4795-9525-bc877ce9061a/1/khjNJev3TLGwBLAe5QVQP_8kbWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/46e223-6d23-4795-9525-bc877ce9061a/1/khjNJev3TLGwBLAe5QVQP_8kbWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:b3:44:a6:f1:31:8d:3c:c9:c0:69:10:22:b3:c7:1b:da:7d:
ca:76:67:fd:fa:97:ef:93:d9:4b:79:d5:d3:1d:eb:61:f7:2f:
e7:ef:6e:d3:ef:b9:a2:aa:a9:86:55:1a:ab:78:a5:d0:e7:2e:
f0:6c:6b:c7:c0:d2:eb:62:aa:12:d4:3c:58:7d:c6:74:c8:5a:
9a:ee:5a:2f:24:6d:22:4e:87:37:40:42:7d:a5:a4:d8:f4:0a:
39:02:5f:59:98:19:b5:4f:8f:97:b4:92:87:6f:c5:c5:6a:9b:
f2:fd:7d:ee:85:e2:29:b7:71:ef:20:5d:11:1d:c6:87:3e:85:
c1:38:4c:57:3b:c6:b9:7b:be:d2:9b:19:31:df:98:ff:06:91:
40:bb:7e:a9:a8:29:6f:eb:0f:d8:b2:c4:02:2a:56:4d:d4:4e:
89:36:64:b1:94:46:ba:5c:9c:13:e7:e4:c1:3c:6b:8b:c4:92:
aa:df:eb:d0:e3:04:92:82:9e:86:06:20:7b:93:ad:c0:88:71:
94:c4:ef:aa:71:8f:f2:55:05:b1:bf:96:68:6e:9c:99:8d:79:
80:5f:6c:fb:0e:df:cd:6e:39:37:08:42:99:91:73:b0:e8:85:
20:d2:d7:2f:f2:99:f5:d9:32:73:b3:82:ef:a7:9f:96:d0:f9:
90:79:f1:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:56:52 2025 by rpki-client