Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
File: Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft (raw, json)
Hash identifier: +auR14X1GsJJZEcttlkCygFpg13tspFYld8K4VejMD0=
Subject key identifier: E9:A7:E5:88:8A:12:88:FF:83:12:5C:8E:46:99:6B:9A:22:44:E0:15
Authority key identifier: 2A:1E:65:F8:08:3C:85:9B:CD:0D:2C:52:A1:E0:61:EB:51:31:F5:F1
Certificate issuer: /CN=2a1e65f8083c859bcd0d2c52a1e061eb5131f5f1
Certificate serial: 0198D5836025E940A3CF09C09A98F836E7B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 06:00:13 +0000
Manifest this update: Sat 23 Aug 2025 06:00:13 +0000
Manifest next update: Sun 24 Aug 2025 06:00:13 +0000
Files and hashes: 1: 0GPPNqD70BhEEc5OGdElRSZQ_uA.roa (hash: d+8R//aHUIcUEfpxVOLBHR3p78wpduw1XLPn+Xxxlzo=)
2: Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.crl (hash: 4+rgMBwVoFphckXNekBlFfKrQni2P8o+s8JAG9AryW0=)
3: NA2ltT3Sfb3V_iisdx5vwEvFMeE.roa (hash: vazWrh+R+LWtlS3ZJjQYp6mVJnmrGyyhkAQ7rsXsUf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:60:25:e9:40:a3:cf:09:c0:9a:98:f8:36:e7:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a1e65f8083c859bcd0d2c52a1e061eb5131f5f1
Validity
Not Before: Aug 23 06:00:13 2025 GMT
Not After : Aug 24 06:00:13 2025 GMT
Subject: CN=e9a7e5888a1288ff83125c8e46996b9a2244e015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:de:ec:ec:c0:07:f4:82:7d:70:87:d9:d3:e5:
06:d9:3a:96:84:fe:3b:57:13:4a:f8:97:df:20:d4:
50:3d:6b:57:de:24:b8:0e:cc:4c:5f:05:b0:ca:bb:
d7:22:74:b3:53:38:6c:ee:01:59:e3:c9:c0:df:c4:
07:6d:94:28:6c:40:f5:82:9c:3e:2f:3d:71:e0:52:
50:21:e2:15:b0:dd:15:d4:39:4a:74:b4:87:1e:85:
e1:65:96:9f:03:fe:b1:3e:33:29:26:de:21:76:0a:
82:1f:53:ae:7f:4f:9a:6f:2a:e1:41:45:c4:9b:7f:
c5:e9:9e:f9:e4:c2:25:66:44:04:7a:b4:73:1c:97:
29:60:f9:29:7b:d3:82:a0:17:d9:1f:68:4f:1b:6a:
48:90:1f:af:3a:95:c9:83:15:53:58:af:92:08:91:
a2:db:a3:f7:7e:ac:32:2c:88:df:aa:a8:5d:34:97:
3e:3b:1b:8a:e6:a3:f8:c4:f2:9c:bd:e2:e1:12:82:
0a:da:cc:d0:72:d2:2b:a2:e7:a6:4b:b2:15:af:81:
f9:7d:18:a8:1d:ef:01:3f:bb:86:6b:ad:1e:67:d2:
b9:c1:2f:52:31:4d:46:f2:13:2f:7a:13:73:dc:e7:
ca:3d:99:6d:8c:dd:1d:43:40:aa:fc:48:ed:a1:a2:
fe:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A7:E5:88:8A:12:88:FF:83:12:5C:8E:46:99:6B:9A:22:44:E0:15
X509v3 Authority Key Identifier:
keyid:2A:1E:65:F8:08:3C:85:9B:CD:0D:2C:52:A1:E0:61:EB:51:31:F5:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:4b:86:c6:cb:41:c9:e8:07:a4:da:19:69:f4:75:d7:d9:82:
73:92:b6:d1:66:10:ba:b6:2b:d1:d5:94:87:f9:68:62:ee:c1:
72:37:7e:8e:42:35:10:7b:54:bf:38:d7:2f:a5:aa:f4:c9:65:
60:51:f8:6c:b0:7f:35:39:74:b2:df:3c:2d:94:d4:8b:f4:38:
5f:9c:17:3d:23:eb:07:7c:b7:ae:78:51:c3:f0:99:38:9b:67:
1c:1c:81:61:dd:b8:ea:17:34:5b:a9:36:39:ac:3f:4f:a9:19:
0e:24:7b:ac:5b:10:38:4c:f2:75:32:9e:19:1f:0e:fb:51:6c:
f0:83:f5:2b:df:88:a5:a8:6f:76:3d:1c:a0:2c:f3:17:7b:41:
c4:98:82:c6:a9:aa:41:2f:35:50:4e:0a:c1:2e:3c:d4:6e:84:
ef:cc:a8:49:53:1f:3b:b7:df:a8:e6:9e:f8:27:84:5b:b3:af:
5a:aa:ac:f7:44:11:7b:f6:21:7b:32:03:f8:8d:40:87:71:a0:
80:0e:98:01:d3:e0:32:d0:c9:b4:a4:61:fe:75:20:01:3a:9d:
cc:da:82:33:aa:20:94:67:90:97:25:54:0e:f6:15:5d:4d:fe:
0b:70:d0:e7:e2:97:c1:1c:c2:d8:a7:5c:02:5d:62:33:d5:e7:
49:08:e6:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:36 2025 by rpki-client