Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.mft
File: KHXxhYI9vGqC0QWzyhYHfbVyk3c.mft (raw, json)
Hash identifier: 94Z4Ta4NfjJETb4oy6m5VKQxNHfEbM4ruMYUqfmmKYA=
Subject key identifier: B8:E4:A5:DF:70:69:CB:78:97:4C:49:69:64:34:21:8F:CF:4C:4E:A3
Authority key identifier: 28:75:F1:85:82:3D:BC:6A:82:D1:05:B3:CA:16:07:7D:B5:72:93:77
Certificate issuer: /CN=2875f185823dbc6a82d105b3ca16077db5729377
Certificate serial: 0199FCC61E9A36FFA91778E6F2868C91B1FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KHXxhYI9vGqC0QWzyhYHfbVyk3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 14:01:06 +0000
Manifest this update: Sun 19 Oct 2025 14:01:06 +0000
Manifest next update: Mon 20 Oct 2025 14:01:06 +0000
Files and hashes: 1: DUHPPbMiJZ5g5-MVvzd1BoFThPs.roa (hash: jYJfj32NL3hL8Amv7vFPn8VdtIOctCQTglUuBNZ6asM=)
2: KHXxhYI9vGqC0QWzyhYHfbVyk3c.crl (hash: rG1yO2m8Q1qeq7MJE5rK+zqKyqzMHVmwgt4F3aJx4mY=)
3: v7cahpSyhHNf-9u3vX0WVgp6xg4.roa (hash: An2ilVmevKfJ9Krr3t4y0gOa1n+BDhvcN3VZHuTlMls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/KHXxhYI9vGqC0QWzyhYHfbVyk3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:1e:9a:36:ff:a9:17:78:e6:f2:86:8c:91:b1:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2875f185823dbc6a82d105b3ca16077db5729377
Validity
Not Before: Oct 19 14:01:06 2025 GMT
Not After : Oct 20 14:01:06 2025 GMT
Subject: CN=b8e4a5df7069cb78974c49696434218fcf4c4ea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:39:eb:c0:32:31:96:e9:52:42:45:da:fe:4c:
44:e4:da:1e:a5:63:ac:75:a2:bb:48:1f:e1:ae:67:
a1:63:0d:2a:37:94:bd:95:ae:7d:ab:eb:f5:d4:b8:
da:66:0d:25:14:00:22:6f:5e:95:eb:01:24:fe:f5:
26:d7:1f:a0:29:d7:6a:a3:7f:9b:4e:82:5e:78:69:
ef:cd:72:fc:bd:1e:72:fc:13:6c:61:18:89:39:ad:
36:fd:5d:fd:28:9e:1d:de:52:cf:d2:4b:0e:79:97:
fb:df:5e:b7:02:70:31:69:c2:b2:18:4b:1c:a9:9a:
03:8d:d7:ee:ba:90:5a:90:ce:76:41:0c:88:17:fb:
22:84:9b:07:26:fe:67:59:ae:8b:a1:0a:0f:9d:5b:
ff:23:06:e2:ab:56:7f:5b:55:bc:89:af:e8:f6:d1:
3d:ef:9d:00:86:02:f8:6f:26:c7:a0:94:9b:c5:93:
20:f1:9e:31:0e:80:59:e2:54:46:01:a4:65:f9:14:
bc:d8:c8:25:e4:9e:33:08:9c:c9:64:51:76:d1:93:
f9:3d:c1:70:08:b4:09:f5:2e:42:78:a3:aa:ac:73:
f2:15:14:e7:52:45:b4:3c:a7:57:6a:1c:cf:54:da:
c3:da:a0:d6:69:03:d8:be:ab:4b:8d:a8:3c:00:e1:
09:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E4:A5:DF:70:69:CB:78:97:4C:49:69:64:34:21:8F:CF:4C:4E:A3
X509v3 Authority Key Identifier:
keyid:28:75:F1:85:82:3D:BC:6A:82:D1:05:B3:CA:16:07:7D:B5:72:93:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KHXxhYI9vGqC0QWzyhYHfbVyk3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:15:2c:59:86:48:f7:ec:c9:7c:47:c2:6f:1d:7e:0e:0c:a7:
f1:6f:6a:bb:3f:db:24:9b:44:9a:c7:07:96:47:e1:ff:52:00:
c9:d4:ae:f4:a0:5a:ab:01:76:2b:28:57:89:14:bb:ff:0d:bc:
f8:d3:48:7f:b0:c2:bb:3b:f4:13:93:10:f6:c0:b3:01:bd:b7:
6f:a9:f0:2e:26:9a:7b:2b:52:91:6f:6f:d5:b6:81:0e:9a:36:
b7:3c:3d:96:a9:0c:9c:b6:77:27:7f:55:c4:f9:ba:8e:ef:62:
9f:da:e4:a5:ea:bc:97:29:25:d2:67:22:3d:56:b5:56:b6:93:
31:6b:10:82:65:d3:4e:2b:09:fd:ea:23:d9:67:ac:26:03:79:
0e:56:e1:48:e2:de:03:5e:30:53:49:29:80:b8:88:ca:24:3c:
82:fc:9b:17:9b:fd:00:9c:4e:ae:59:98:0d:6a:8a:35:33:34:
41:d8:be:46:51:55:05:f9:6d:c1:5e:d1:c2:34:7a:55:91:58:
9a:95:95:fe:39:46:fb:ad:df:5c:db:cd:19:c9:20:82:7f:ab:
26:e2:fb:04:94:b9:1e:e1:40:11:41:d9:b9:a9:4f:fd:bc:30:
bc:47:98:86:11:50:ed:09:fd:f2:bb:8d:c1:65:bb:93:f8:24:
89:37:a7:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:10:17 2025 by rpki-client