Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/46e223-6d23-4795-9525-bc877ce9061a/1/khjNJev3TLGwBLAe5QVQP_8kbWE.mft
File: khjNJev3TLGwBLAe5QVQP_8kbWE.mft (raw, json)
Hash identifier: PYx2vfD/zcXzf7xbaF2VBcuz9YRbb+bBVrsYfsech3w=
Subject key identifier: 0C:02:92:A4:12:38:AD:2F:35:26:E9:94:67:21:40:BD:9A:22:F3:CD
Authority key identifier: 92:18:CD:25:EB:F7:4C:B1:B0:04:B0:1E:E5:05:50:3F:FF:24:6D:61
Certificate issuer: /CN=9218cd25ebf74cb1b004b01ee505503fff246d61
Certificate serial: 0198D660FC2BCF1909CD4715FEFE2D33D477
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khjNJev3TLGwBLAe5QVQP_8kbWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/46e223-6d23-4795-9525-bc877ce9061a/1/khjNJev3TLGwBLAe5QVQP_8kbWE.mft
Manifest number: 0481
Signing time: Sat 23 Aug 2025 10:02:16 +0000
Manifest this update: Sat 23 Aug 2025 10:02:16 +0000
Manifest next update: Sun 24 Aug 2025 10:02:16 +0000
Files and hashes: 1: TrlRH64mTqxgPbbyg2lJDlsMeB0.roa (hash: Ar7RtZkoApHXI4MhYkDHCkz8Varr+3EYOSwaeqk+kiE=)
2: eWQbNDk7Bizpa1HJwWi556Oud3s.roa (hash: PwNs4nRmZS0NVFzVnjZatxVrXUe/B08COyWu1QU2ZLs=)
3: khjNJev3TLGwBLAe5QVQP_8kbWE.crl (hash: AgOupQEkctoDeDmW8WsQTT6ehyMefkYuiJV6xGP+w6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/46e223-6d23-4795-9525-bc877ce9061a/1/khjNJev3TLGwBLAe5QVQP_8kbWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/46e223-6d23-4795-9525-bc877ce9061a/1/khjNJev3TLGwBLAe5QVQP_8kbWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/khjNJev3TLGwBLAe5QVQP_8kbWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:fc:2b:cf:19:09:cd:47:15:fe:fe:2d:33:d4:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9218cd25ebf74cb1b004b01ee505503fff246d61
Validity
Not Before: Aug 23 10:02:16 2025 GMT
Not After : Aug 24 10:02:16 2025 GMT
Subject: CN=0c0292a41238ad2f3526e994672140bd9a22f3cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:97:77:86:fe:89:d3:49:6c:90:d1:35:90:70:
86:67:3c:c9:6b:e6:bc:e7:bd:bc:7e:00:82:06:df:
7d:55:bd:ec:2b:70:3a:d6:a6:31:b0:0e:e6:f6:a7:
50:fc:a0:b8:c7:3c:24:c2:13:8c:c0:0c:53:d2:1b:
d4:6f:d2:62:22:a5:cc:d4:f2:72:f5:26:94:0d:62:
40:2f:ae:c1:17:ad:e5:04:c0:a6:18:be:8a:d9:ea:
10:7b:37:a2:c1:67:81:fb:cf:f7:7e:b3:4e:29:ef:
33:f8:8f:7e:de:cd:bc:a8:83:59:91:86:31:a7:98:
2a:5a:69:cb:4c:91:d2:01:20:8f:4c:2b:dd:b9:fd:
39:1c:48:70:59:1e:5b:66:cb:66:37:72:f3:e9:64:
27:00:67:38:2a:9b:ea:41:a4:f9:85:86:da:f6:cc:
4c:e5:e4:4e:a3:2c:6c:96:a3:d9:10:cb:6b:9f:b5:
55:bb:15:61:d8:bd:f3:cb:0a:1c:54:a6:19:34:2b:
68:96:db:46:d0:d6:29:34:64:96:83:a9:41:7c:28:
67:34:2a:f0:7c:14:85:62:e3:20:46:38:73:16:4e:
cd:68:fa:d2:c5:4e:44:91:6b:e7:09:3c:88:37:b9:
30:12:b6:d3:c4:5e:47:3f:e0:4b:b2:0c:04:ae:05:
d1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:02:92:A4:12:38:AD:2F:35:26:E9:94:67:21:40:BD:9A:22:F3:CD
X509v3 Authority Key Identifier:
keyid:92:18:CD:25:EB:F7:4C:B1:B0:04:B0:1E:E5:05:50:3F:FF:24:6D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khjNJev3TLGwBLAe5QVQP_8kbWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/46e223-6d23-4795-9525-bc877ce9061a/1/khjNJev3TLGwBLAe5QVQP_8kbWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/46e223-6d23-4795-9525-bc877ce9061a/1/khjNJev3TLGwBLAe5QVQP_8kbWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:87:25:11:9b:f3:69:f8:90:ec:52:c9:f8:21:81:1c:99:d5:
0f:68:91:49:a2:9a:01:51:4b:b4:d8:f3:6e:8a:e0:43:21:14:
39:06:d5:fd:b4:f3:d8:87:66:d2:93:08:9f:0d:e8:17:0d:31:
64:92:b1:80:10:44:41:b1:62:4f:e0:51:7c:82:b1:72:d9:65:
a6:e4:95:59:33:ac:8e:20:2c:39:5c:47:82:1b:31:cd:0b:6e:
39:8e:84:04:2e:a0:09:0e:6b:ee:47:70:68:86:c3:be:3b:97:
2b:0d:7d:4c:1a:c9:5a:6c:c1:45:76:51:03:6b:6c:bd:58:47:
a2:5c:ff:ec:51:b9:8f:65:4f:e3:f5:4d:c0:44:56:e7:b5:c5:
4f:d2:bc:75:94:2c:63:19:e8:a0:d8:8e:41:38:ca:29:0d:08:
c7:5f:f6:28:3c:00:06:e5:d1:f0:9d:2e:84:a4:6f:0d:27:ff:
59:f7:52:49:24:4c:4a:7b:7f:a1:c8:3d:3f:88:39:d5:69:13:
d0:9f:72:eb:95:e9:18:43:92:a0:4a:71:38:ff:32:3e:b2:d8:
f0:2c:05:90:23:c2:72:23:99:c3:6f:3c:f5:5b:20:d4:77:3d:
45:a1:86:55:6d:37:ae:24:fb:8e:c9:53:ca:e0:c1:a4:ee:d5:
45:8e:b7:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:55:37 2025 by rpki-client