Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/khxP2jZ8U4OxXCpxQ61LEMlVzqA.mft
File: khxP2jZ8U4OxXCpxQ61LEMlVzqA.mft (raw, json)
Hash identifier: 5Kf7zSI8z7QPgZZdc25J8sDy9/biOBB//bkY92nczk0=
Subject key identifier: D2:0F:47:67:0C:52:4E:4B:27:DE:AA:E5:5F:1E:D1:D9:D9:4A:82:15
Authority key identifier: 92:1C:4F:DA:36:7C:53:83:B1:5C:2A:71:43:AD:4B:10:C9:55:CE:A0
Certificate issuer: /CN=921c4fda367c5383b15c2a7143ad4b10c955cea0
Certificate serial: 01976FD13FD51978347DDA30EE9D6D729951
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khxP2jZ8U4OxXCpxQ61LEMlVzqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/khxP2jZ8U4OxXCpxQ61LEMlVzqA.mft
Manifest number: 12A3
Signing time: Sat 14 Jun 2025 19:01:13 +0000
Manifest this update: Sat 14 Jun 2025 19:01:13 +0000
Manifest next update: Sun 15 Jun 2025 19:01:13 +0000
Files and hashes: 1: K_0VKEBHZ8AzTGdtRKig6YmReAg.roa (hash: V6KL9KuDWKfGzsEoPpZURMCt8ttu62n0nd3Y+gExuwA=)
2: khxP2jZ8U4OxXCpxQ61LEMlVzqA.crl (hash: q1qv7ikF2vI05cQyRHYHVoeeFd2mOgefvXDqUUhM8sg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/khxP2jZ8U4OxXCpxQ61LEMlVzqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/khxP2jZ8U4OxXCpxQ61LEMlVzqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/khxP2jZ8U4OxXCpxQ61LEMlVzqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d1:3f:d5:19:78:34:7d:da:30:ee:9d:6d:72:99:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921c4fda367c5383b15c2a7143ad4b10c955cea0
Validity
Not Before: Jun 14 19:01:13 2025 GMT
Not After : Jun 15 19:01:13 2025 GMT
Subject: CN=d20f47670c524e4b27deaae55f1ed1d9d94a8215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bb:78:48:bf:3e:32:ee:2a:75:5e:ea:d2:4d:
76:92:a9:15:06:9a:7a:db:81:2d:0b:da:3d:0c:22:
82:e4:1d:73:58:d9:94:af:a7:97:ed:e6:1e:4f:58:
55:b0:61:e9:8f:4c:fc:1d:8c:9b:69:1d:a8:da:e5:
f1:fb:93:93:2b:9a:e4:ca:3c:e8:61:55:be:e3:fd:
82:8a:61:04:60:2c:3c:4c:85:ee:46:44:77:b0:b8:
ca:34:cf:4e:33:75:08:c8:6e:c1:ff:3a:03:84:75:
86:b1:32:d3:24:b5:8b:7e:49:10:85:75:fb:58:c3:
f6:a4:df:f5:22:08:7d:18:29:02:e9:f6:a3:72:6f:
b6:2d:ba:78:fb:aa:44:1e:c7:80:0f:b2:27:15:87:
64:2d:ed:1f:5c:68:c7:ed:9b:1a:94:23:fe:72:db:
b1:c1:c9:64:ef:92:6c:2c:c1:1d:e7:35:b4:c1:8b:
a1:cf:cc:11:99:8d:54:5a:ac:0d:d9:0b:7d:27:b6:
db:ff:6f:b0:9e:81:f6:89:d9:5b:e2:b7:94:f4:62:
0f:92:7e:e8:fe:7a:e8:9b:b1:d4:7e:23:5b:6d:fb:
23:99:9e:4a:2e:51:6f:4a:07:a2:f3:95:85:5a:0d:
84:e0:70:93:eb:c9:31:09:17:ef:4f:cb:40:8e:04:
f9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:0F:47:67:0C:52:4E:4B:27:DE:AA:E5:5F:1E:D1:D9:D9:4A:82:15
X509v3 Authority Key Identifier:
keyid:92:1C:4F:DA:36:7C:53:83:B1:5C:2A:71:43:AD:4B:10:C9:55:CE:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khxP2jZ8U4OxXCpxQ61LEMlVzqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/khxP2jZ8U4OxXCpxQ61LEMlVzqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/khxP2jZ8U4OxXCpxQ61LEMlVzqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:52:46:60:72:13:e4:0e:e7:c7:c4:fc:06:1a:ba:27:33:d5:
c1:49:a4:e6:5f:2e:38:7c:9c:5b:4e:e9:14:f9:65:05:05:bf:
22:b3:61:17:6e:1a:96:ad:0c:3e:93:f5:05:d8:f9:ed:a5:2f:
9d:ff:2a:82:a2:52:82:dd:97:22:e1:5e:53:9f:10:2d:ea:88:
c7:70:a4:f3:3a:53:92:a6:40:83:10:27:db:1c:73:73:43:1d:
d8:ae:04:23:06:06:1e:69:2b:71:da:1e:94:22:77:3e:05:0d:
cb:b1:b2:81:21:1c:7b:16:83:78:be:c0:0d:c3:55:87:3f:5c:
78:7c:c0:3b:99:a7:c7:55:33:1f:fd:d3:f9:9c:f8:1c:18:38:
16:74:78:e2:1f:ed:3b:d7:d1:d7:0b:93:ad:4c:e3:fc:9e:eb:
0d:d8:a2:bc:b3:70:c5:83:dc:15:80:05:73:04:02:68:e0:c6:
bc:da:d4:01:e7:44:3e:49:f1:ef:77:c2:46:10:9d:8a:83:b0:
51:ab:93:17:da:80:dd:61:0e:6e:f3:72:3b:6c:12:5a:4c:3b:
46:2f:10:94:a1:65:52:6d:3d:88:24:f2:ee:8f:dc:f4:c4:bb:
d5:00:8f:51:8f:9a:5d:a7:27:6c:c4:dc:44:b8:10:1b:53:e0:
5b:5e:9c:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdv0T/VGXg0fdow7p1tcplRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyMWM0ZmRhMzY3YzUzODNiMTVjMmE3MTQzYWQ0YjEwYzk1
NWNlYTAwHhcNMjUwNjE0MTkwMTEzWhcNMjUwNjE1MTkwMTEzWjAzMTEwLwYDVQQD
EyhkMjBmNDc2NzBjNTI0ZTRiMjdkZWFhZTU1ZjFlZDFkOWQ5NGE4MjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrt4SL8+Mu4qdV7q0k12kqkVBpp6
24EtC9o9DCKC5B1zWNmUr6eX7eYeT1hVsGHpj0z8HYybaR2o2uXx+5OTK5rkyjzo
YVW+4/2CimEEYCw8TIXuRkR3sLjKNM9OM3UIyG7B/zoDhHWGsTLTJLWLfkkQhXX7
WMP2pN/1Igh9GCkC6fajcm+2Lbp4+6pEHseAD7InFYdkLe0fXGjH7ZsalCP+ctux
wclk75JsLMEd5zW0wYuhz8wRmY1UWqwN2Qt9J7bb/2+wnoH2idlb4reU9GIPkn7o
/nrom7HUfiNbbfsjmZ5KLlFvSgei85WFWg2E4HCT68kxCRfvT8tAjgT5kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNIPR2cMUk5LJ96q5V8e0dnZSoIVMB8GA1UdIwQY
MBaAFJIcT9o2fFODsVwqcUOtSxDJVc6gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2h4UDJqWjhVNE94WENweFE2MUxFTWxWenFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8zZDZiMWEtNmQ2MS00NGI4LThjYmIt
MjM2MDhmNmFlMmVhLzEva2h4UDJqWjhVNE94WENweFE2MUxFTWxWenFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8zZDZiMWEtNmQ2MS00NGI4LThjYmItMjM2MDhmNmFlMmVh
LzEva2h4UDJqWjhVNE94WENweFE2MUxFTWxWenFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHVJGYHIT
5A7nx8T8Bhq6JzPVwUmk5l8uOHycW07pFPllBQW/IrNhF24alq0MPpP1Bdj57aUv
nf8qgqJSgt2XIuFeU58QLeqIx3Ck8zpTkqZAgxAn2xxzc0Md2K4EIwYGHmkrcdoe
lCJ3PgUNy7GygSEcexaDeL7ADcNVhz9ceHzAO5mnx1UzH/3T+Zz4HBg4FnR44h/t
O9fR1wuTrUzj/J7rDdiivLNwxYPcFYAFcwQCaODGvNrUAedEPknx73fCRhCdioOw
UauTF9qA3WEObvNyO2wSWkw7Ri8QlKFlUm09iCTy7o/c9MS71QCPUY+aXacnbMTc
RLgQG1PgW16cjg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 00:55:18 2025 by rpki-client