Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/46e223-6d23-4795-9525-bc877ce9061a/1/khjNJev3TLGwBLAe5QVQP_8kbWE.mft
File: khjNJev3TLGwBLAe5QVQP_8kbWE.mft (raw, json)
Hash identifier: gzwgMr9NJGzwho7wWOcj2PIxe2rOVILhLI6fSlKtKyk=
Subject key identifier: 37:3A:B9:0C:E3:29:92:E0:97:A2:A3:DA:18:7F:5A:BA:67:D5:92:2C
Authority key identifier: 92:18:CD:25:EB:F7:4C:B1:B0:04:B0:1E:E5:05:50:3F:FF:24:6D:61
Certificate issuer: /CN=9218cd25ebf74cb1b004b01ee505503fff246d61
Certificate serial: 0199FBEAB7F1FEFD1C9A85213FD47D17F657
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khjNJev3TLGwBLAe5QVQP_8kbWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/46e223-6d23-4795-9525-bc877ce9061a/1/khjNJev3TLGwBLAe5QVQP_8kbWE.mft
Manifest number: 0519
Signing time: Sun 19 Oct 2025 10:01:27 +0000
Manifest this update: Sun 19 Oct 2025 10:01:27 +0000
Manifest next update: Mon 20 Oct 2025 10:01:27 +0000
Files and hashes: 1: TrlRH64mTqxgPbbyg2lJDlsMeB0.roa (hash: Ar7RtZkoApHXI4MhYkDHCkz8Varr+3EYOSwaeqk+kiE=)
2: eWQbNDk7Bizpa1HJwWi556Oud3s.roa (hash: PwNs4nRmZS0NVFzVnjZatxVrXUe/B08COyWu1QU2ZLs=)
3: khjNJev3TLGwBLAe5QVQP_8kbWE.crl (hash: IPxGZpyd1F2NfhyuqiRh+MTjifAnbg9waWNmob4h7go=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/46e223-6d23-4795-9525-bc877ce9061a/1/khjNJev3TLGwBLAe5QVQP_8kbWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/46e223-6d23-4795-9525-bc877ce9061a/1/khjNJev3TLGwBLAe5QVQP_8kbWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/khjNJev3TLGwBLAe5QVQP_8kbWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:b7:f1:fe:fd:1c:9a:85:21:3f:d4:7d:17:f6:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9218cd25ebf74cb1b004b01ee505503fff246d61
Validity
Not Before: Oct 19 10:01:27 2025 GMT
Not After : Oct 20 10:01:27 2025 GMT
Subject: CN=373ab90ce32992e097a2a3da187f5aba67d5922c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:f8:0a:b4:96:94:28:05:e4:8b:f6:38:b4:c0:
d5:08:6a:75:0a:09:5b:25:59:49:f5:34:f8:00:df:
2e:95:dc:87:5b:73:e5:da:04:a7:d3:fd:9f:a5:90:
d4:a3:81:da:57:66:04:b0:67:d3:ad:fd:d1:08:e3:
02:8b:3c:c2:c4:8a:77:01:57:42:2c:a3:b1:a2:6b:
28:c8:d5:7d:0c:b1:f6:c8:6c:2c:93:76:26:7b:62:
34:f2:aa:6c:5d:73:28:b2:44:65:c6:65:19:ee:5f:
78:2d:83:a3:97:0f:9c:ad:0a:fb:ae:10:09:38:75:
60:21:99:25:e4:56:71:0c:d0:e2:3c:2e:11:cc:af:
d0:40:8c:d2:b2:67:13:60:fd:15:0d:50:24:bb:23:
b6:5d:f5:19:bf:b8:50:04:e4:9d:71:05:39:00:cc:
03:3a:29:aa:37:b0:96:d0:0d:f5:f0:49:13:98:16:
64:91:02:13:2d:f7:f4:a5:92:23:49:3f:50:29:0c:
99:c4:ef:f8:e8:8b:fa:d5:12:82:04:f7:3a:8d:e8:
35:ab:3d:d6:8e:93:bb:92:bd:de:a4:24:38:87:da:
54:b0:14:92:10:90:5b:63:bf:b3:9c:14:5e:bc:99:
09:d2:78:bb:0c:d8:a2:f5:a6:48:5c:18:12:37:6d:
c6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:3A:B9:0C:E3:29:92:E0:97:A2:A3:DA:18:7F:5A:BA:67:D5:92:2C
X509v3 Authority Key Identifier:
keyid:92:18:CD:25:EB:F7:4C:B1:B0:04:B0:1E:E5:05:50:3F:FF:24:6D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khjNJev3TLGwBLAe5QVQP_8kbWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/46e223-6d23-4795-9525-bc877ce9061a/1/khjNJev3TLGwBLAe5QVQP_8kbWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/46e223-6d23-4795-9525-bc877ce9061a/1/khjNJev3TLGwBLAe5QVQP_8kbWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:9f:44:b1:a9:5c:44:4e:d9:f2:e9:b9:9d:34:13:16:97:7b:
bb:5d:fe:b8:16:00:72:98:62:b0:8c:ab:17:d1:01:0f:4a:55:
57:ec:47:9f:ac:38:2d:a7:14:64:df:bb:0c:bb:3f:bb:04:19:
94:da:db:5b:a4:e0:fe:4f:2c:da:61:6f:13:d8:ab:24:f6:f0:
b5:a2:0d:63:6c:25:26:d6:df:4b:7f:aa:b2:4d:5d:7f:d2:cf:
9a:fc:fb:8c:f5:6e:c1:00:95:57:c5:8b:79:87:9b:52:d2:89:
d0:50:40:01:ff:c3:c5:72:d9:60:16:3a:94:1c:1d:81:b8:b2:
98:4e:f0:ad:0f:29:b4:8f:b8:39:32:3c:82:0d:8d:6d:82:4b:
1d:cb:49:0c:57:70:6b:74:e5:db:56:45:08:0e:fa:a2:2f:6c:
56:b6:cb:e1:12:09:35:b2:7b:41:8f:d6:75:80:ce:03:da:2d:
67:0d:63:5e:6d:85:ce:4a:30:1d:37:bb:24:0a:5c:c4:5d:78:
45:99:cd:66:4e:1c:bf:a8:26:11:c2:88:0e:a6:d3:ef:1f:e0:
13:04:f5:ae:ff:4f:7b:e8:1c:d1:66:66:23:29:0e:9d:ad:b8:
3d:82:e2:23:1c:19:13:29:64:72:b0:07:0e:04:82:26:42:36:
d0:9c:76:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:23 2025 by rpki-client