Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.mft
File: khP5CqTY5H6rs0hZAVf0h4v3Rvg.mft (raw, json)
Hash identifier: e+IPcr9Bwe5Z3Qgir9oAMRiZ+sAsRLGYLBh5Vbof7Qk=
Subject key identifier: AA:E1:7E:9A:AC:88:DD:EC:E0:CE:53:EE:08:A4:35:08:A6:F7:C1:8D
Authority key identifier: 92:13:F9:0A:A4:D8:E4:7E:AB:B3:48:59:01:57:F4:87:8B:F7:46:F8
Certificate issuer: /CN=9213f90aa4d8e47eabb348590157f4878bf746f8
Certificate serial: 0198752BB8714DAC81A58F91873FBB46F0F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khP5CqTY5H6rs0hZAVf0h4v3Rvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.mft
Manifest number: 0446
Signing time: Mon 04 Aug 2025 13:00:56 +0000
Manifest this update: Mon 04 Aug 2025 13:00:56 +0000
Manifest next update: Tue 05 Aug 2025 13:00:56 +0000
Files and hashes: 1: khP5CqTY5H6rs0hZAVf0h4v3Rvg.crl (hash: dwWVe+rJEfkRlZjqIqgW0EX+qQH+1XWeP7eAC+JSIsg=)
2: zXilNDKWsxIaUq_LEMDiwJqBNJI.roa (hash: Eo6IWAeJUaI2CdPXL2mpqljbcAx/G9eShos6ic97+nk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khP5CqTY5H6rs0hZAVf0h4v3Rvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:2b:b8:71:4d:ac:81:a5:8f:91:87:3f:bb:46:f0:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9213f90aa4d8e47eabb348590157f4878bf746f8
Validity
Not Before: Aug 4 13:00:56 2025 GMT
Not After : Aug 5 13:00:56 2025 GMT
Subject: CN=aae17e9aac88ddece0ce53ee08a43508a6f7c18d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:04:21:10:98:b6:6a:d2:30:6c:e2:43:c7:ab:
4a:28:b0:5f:5e:75:90:ea:c3:50:ba:e2:80:73:e7:
8d:a3:22:55:b4:f6:a3:ef:14:f8:5d:09:13:32:b9:
94:18:6b:3e:75:f8:1c:1d:4c:e5:bc:06:22:83:90:
b2:67:7b:57:a2:95:0b:52:33:85:50:81:8f:3d:04:
62:fc:08:af:cd:ce:18:9a:ef:c7:32:15:95:a1:2b:
c5:c4:ff:15:d1:a1:f1:6b:9d:51:25:cf:6a:1a:bd:
89:4e:94:d2:db:e9:39:e4:8a:c5:77:f1:bd:8a:a9:
dd:05:47:6c:a9:fd:f4:81:e6:6c:a2:75:b5:e9:60:
07:26:1f:21:31:a3:49:dc:4d:24:aa:68:9d:9c:8e:
90:f1:bd:5c:44:d2:3d:f4:76:3b:43:6a:fa:ec:61:
7e:bd:e5:6b:51:1b:e5:c6:04:7c:66:a7:27:72:fa:
af:9e:0e:49:8c:96:a5:f2:46:2a:b2:45:d7:90:ef:
26:ea:92:4c:3b:5b:a5:d3:33:a5:8e:73:82:dd:5b:
df:55:55:14:5f:25:de:42:51:b6:89:01:e2:dd:46:
b4:f0:4e:3c:0b:97:26:5d:e1:45:e4:ae:94:fd:96:
b6:5a:b0:7e:18:79:e1:5d:60:93:4e:dc:bb:81:c0:
04:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E1:7E:9A:AC:88:DD:EC:E0:CE:53:EE:08:A4:35:08:A6:F7:C1:8D
X509v3 Authority Key Identifier:
keyid:92:13:F9:0A:A4:D8:E4:7E:AB:B3:48:59:01:57:F4:87:8B:F7:46:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khP5CqTY5H6rs0hZAVf0h4v3Rvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:40:98:f4:6a:d7:92:dd:87:18:76:d6:3a:94:13:a1:32:53:
b3:41:10:57:66:7a:ac:67:68:75:fb:95:d0:f5:3a:e2:ae:3e:
6e:63:a7:0f:57:5d:57:84:15:26:99:2f:c1:93:6a:9c:f5:01:
cc:60:85:22:57:2a:28:ed:fe:75:55:37:c9:9b:3a:26:59:57:
24:a2:d6:6b:37:0d:a7:df:9a:79:f2:ad:b9:53:b0:ab:ae:4c:
58:0c:82:fa:a4:cc:b6:0d:44:3a:a7:ec:0d:52:42:5d:6a:ce:
02:de:4c:26:24:e2:31:75:87:4b:57:6d:08:90:45:5e:fb:a7:
c2:71:af:b9:6c:02:7e:73:24:9f:06:3c:46:96:e9:92:0f:05:
42:a5:dd:48:4b:15:cd:14:8e:94:3b:1f:4e:1c:c9:54:ec:79:
0c:78:14:7b:d4:35:c7:9a:2a:a4:41:a0:ee:1f:b7:03:f4:2c:
da:69:92:64:52:9c:c4:95:b7:fd:d2:fc:a4:5e:06:71:c6:5b:
d1:ef:7e:3a:05:f8:06:f3:76:40:b9:27:13:14:d2:d3:74:37:
5e:77:14:aa:33:06:11:b0:2e:54:61:f0:88:c4:49:d8:de:8b:
08:c7:b3:d4:8d:08:7c:c5:d9:7d:2a:8d:3c:cd:e3:cd:c8:f9:
20:40:3a:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:00:04 2025 by rpki-client