Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/khxP2jZ8U4OxXCpxQ61LEMlVzqA.mft
File: khxP2jZ8U4OxXCpxQ61LEMlVzqA.mft (raw, json)
Hash identifier: VeED84DlH4y/QrcZGEYFuCcVl26d8WrRaDOA9rtA2ec=
Subject key identifier: 25:A2:14:77:39:F6:E7:8B:07:0E:6E:DE:41:80:40:3E:02:1B:F0:65
Authority key identifier: 92:1C:4F:DA:36:7C:53:83:B1:5C:2A:71:43:AD:4B:10:C9:55:CE:A0
Certificate issuer: /CN=921c4fda367c5383b15c2a7143ad4b10c955cea0
Certificate serial: 01987E2ED9CF873AE40DAC73960E708FCAA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khxP2jZ8U4OxXCpxQ61LEMlVzqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/khxP2jZ8U4OxXCpxQ61LEMlVzqA.mft
Manifest number: 132F
Signing time: Wed 06 Aug 2025 07:00:56 +0000
Manifest this update: Wed 06 Aug 2025 07:00:56 +0000
Manifest next update: Thu 07 Aug 2025 07:00:56 +0000
Files and hashes: 1: K_0VKEBHZ8AzTGdtRKig6YmReAg.roa (hash: V6KL9KuDWKfGzsEoPpZURMCt8ttu62n0nd3Y+gExuwA=)
2: khxP2jZ8U4OxXCpxQ61LEMlVzqA.crl (hash: 7XVAhBVsT1KtfinXyk2FZqujFTyBy49OBe9+dEdysKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/khxP2jZ8U4OxXCpxQ61LEMlVzqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/khxP2jZ8U4OxXCpxQ61LEMlVzqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/khxP2jZ8U4OxXCpxQ61LEMlVzqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 07:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:2e:d9:cf:87:3a:e4:0d:ac:73:96:0e:70:8f:ca:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921c4fda367c5383b15c2a7143ad4b10c955cea0
Validity
Not Before: Aug 6 07:00:56 2025 GMT
Not After : Aug 7 07:00:56 2025 GMT
Subject: CN=25a2147739f6e78b070e6ede4180403e021bf065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:01:f7:c7:a4:ab:e6:a9:fe:40:e5:d2:8f:e0:
f9:a8:e8:a1:09:6e:96:1a:af:89:51:46:4f:7d:5d:
b6:f0:5e:67:d2:f5:6e:c7:30:72:f3:7f:81:a2:57:
5d:46:4b:59:59:c2:fd:64:24:7d:a6:4f:e1:8c:64:
35:92:4a:9e:9d:ff:fa:e5:42:eb:d4:c9:9b:ae:e6:
89:3c:bf:78:3c:6f:3f:ee:43:38:5e:b8:a1:2c:7c:
7e:5e:3d:7e:7f:16:9c:19:f2:78:aa:b0:fb:e3:a0:
04:01:e7:c1:57:24:d2:eb:42:4e:91:d6:18:0f:07:
f5:d1:47:a2:3f:f0:cf:00:5d:fe:55:b0:f2:53:9b:
02:e0:7a:a2:62:0f:c5:ef:e5:7b:0b:c1:c7:b9:04:
9d:0a:a8:7c:55:20:ef:5d:88:38:58:a4:a4:de:01:
c8:a8:bb:81:c0:21:7e:4f:b1:cb:0b:2e:0d:6c:f3:
f3:fa:24:2c:7f:0f:d2:e5:9f:82:f5:41:d1:00:b9:
ee:bd:e1:a7:89:4c:3d:87:16:57:94:bd:8f:71:b4:
6f:c9:39:ad:3b:6f:58:36:c8:de:08:00:f5:40:a4:
00:fd:c8:01:6c:ab:5a:e7:0d:be:73:08:37:01:48:
8e:58:e3:83:11:26:56:26:a2:68:1f:97:31:e2:74:
70:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A2:14:77:39:F6:E7:8B:07:0E:6E:DE:41:80:40:3E:02:1B:F0:65
X509v3 Authority Key Identifier:
keyid:92:1C:4F:DA:36:7C:53:83:B1:5C:2A:71:43:AD:4B:10:C9:55:CE:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khxP2jZ8U4OxXCpxQ61LEMlVzqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/khxP2jZ8U4OxXCpxQ61LEMlVzqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/khxP2jZ8U4OxXCpxQ61LEMlVzqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:e7:69:10:a7:92:17:98:2e:65:9c:4e:3d:10:64:fe:4b:e3:
06:7f:5a:2c:9e:47:bf:e1:cf:45:33:71:48:cb:2c:56:d9:c3:
a1:60:19:31:f8:d6:cf:df:9c:93:03:1c:56:de:bd:6b:d8:a6:
97:4e:a8:34:f8:f7:82:2e:de:8a:23:0e:c0:e8:02:99:7e:05:
74:33:3d:d6:29:5f:45:33:b5:46:92:5b:b8:fd:9a:65:6f:89:
ac:78:14:d4:6d:00:fc:df:20:75:7f:e1:93:82:de:b2:78:7d:
ad:d3:34:8e:75:8f:ca:9e:1f:ee:60:8a:d8:ee:9d:ee:c5:09:
ae:55:90:65:88:92:67:f8:2b:6d:bd:79:5b:f1:24:d9:6e:29:
76:36:0d:66:ef:2c:37:e9:da:a1:47:5a:0c:5b:40:89:c4:3a:
3c:9e:cc:d4:44:da:e9:e1:e4:d3:d7:9d:ba:29:c7:b4:9a:72:
98:6b:09:6a:bd:0e:83:cc:f9:67:4e:45:b3:41:2e:1f:56:54:
c8:70:59:3c:13:c7:ca:6d:3f:71:43:52:ea:d7:8d:f6:f5:2e:
72:10:53:91:89:a2:5e:17:c0:a5:21:91:30:02:f3:aa:b7:4e:
f9:dd:49:39:64:35:30:04:8b:15:5b:da:e0:c1:30:0e:3a:f1:
f9:47:23:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:18:03 2025 by rpki-client