Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.mft
File: khPywtBsZLiVRXq1D8SSAoOknMc.mft (raw, json)
Hash identifier: HWwaQaQ6xGHqvKgoDCJoXrZ5UeJ9Q9brGESzPnsmX6s=
Subject key identifier: 43:C5:0C:DB:32:D7:F8:CB:20:7C:B6:A2:57:37:60:66:59:4D:6E:06
Authority key identifier: 92:13:F2:C2:D0:6C:64:B8:95:45:7A:B5:0F:C4:92:02:83:A4:9C:C7
Certificate issuer: /CN=9213f2c2d06c64b895457ab50fc4920283a49cc7
Certificate serial: 019A4EF453DB9C2442F88FC34DA8859E7D18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khPywtBsZLiVRXq1D8SSAoOknMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.mft
Manifest number: 1712
Signing time: Tue 04 Nov 2025 13:00:26 +0000
Manifest this update: Tue 04 Nov 2025 13:00:26 +0000
Manifest next update: Wed 05 Nov 2025 13:00:26 +0000
Files and hashes: 1: WzcaaMQRrlChBNRzpd6ejVsnjhE.roa (hash: thxrjBXbUSSC8DCWldp79G7rZSMi1abwsQ1q60K08dg=)
2: iRKQaDksCLDeAQtwp0YKQ3SovAI.roa (hash: wixldrtyd3fdUQpeC4X4fRGfwA4fNIJXJhW2tQSWdew=)
3: khPywtBsZLiVRXq1D8SSAoOknMc.crl (hash: zur79mLd7wsp/zUje+UgWQnL+ChSpbOU59K/Ci2Byc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/khPywtBsZLiVRXq1D8SSAoOknMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:53:db:9c:24:42:f8:8f:c3:4d:a8:85:9e:7d:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9213f2c2d06c64b895457ab50fc4920283a49cc7
Validity
Not Before: Nov 4 13:00:26 2025 GMT
Not After : Nov 5 13:00:26 2025 GMT
Subject: CN=43c50cdb32d7f8cb207cb6a257376066594d6e06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7c:e7:cd:5a:b5:d8:a4:f8:fe:64:a7:e4:8b:
14:67:62:a2:9f:34:74:4d:79:06:d9:79:c3:7d:63:
82:f6:c5:7d:e3:20:12:59:e4:1c:7c:22:09:f3:25:
b2:5f:fd:67:78:aa:5e:47:07:2e:39:ef:32:92:79:
2d:61:94:67:e5:92:ed:c2:c5:e5:80:f6:29:41:49:
68:48:2e:44:33:d5:74:8b:e7:3c:f4:21:09:77:17:
93:55:8a:c5:f6:ae:3d:8d:fb:d1:fe:7d:25:0e:84:
4e:53:92:81:e2:4b:7d:6c:92:7e:db:82:13:0c:2c:
87:e4:05:78:4e:ed:20:8b:86:61:21:7b:eb:f0:6a:
85:df:75:83:ca:fd:9f:21:3a:26:12:71:40:4b:75:
6d:fd:f5:2e:71:3a:80:02:cf:1f:17:17:35:04:80:
85:6c:d3:fb:e1:9b:5a:cc:5d:bc:f3:e4:1f:fb:79:
87:cb:66:6f:44:e0:1d:52:b9:19:fb:e0:c8:24:9b:
c7:f3:6d:26:a7:dd:f5:fd:d0:57:57:5e:ff:0e:bd:
bc:97:49:26:7b:ea:7e:5a:8d:a3:30:72:4e:2c:66:
fe:b4:01:6e:67:ee:46:4a:2d:3f:83:3e:8a:db:21:
f5:df:ec:83:e6:0c:6a:1b:49:b7:fc:2a:7b:61:98:
eb:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C5:0C:DB:32:D7:F8:CB:20:7C:B6:A2:57:37:60:66:59:4D:6E:06
X509v3 Authority Key Identifier:
keyid:92:13:F2:C2:D0:6C:64:B8:95:45:7A:B5:0F:C4:92:02:83:A4:9C:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khPywtBsZLiVRXq1D8SSAoOknMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:37:fe:1b:dd:38:d1:50:05:d2:fe:56:c8:a5:0f:c6:e9:19:
c9:4b:b3:cf:c2:89:3d:48:9b:53:69:65:e5:ee:e1:9b:7b:7a:
34:fa:81:ca:08:eb:6a:7d:2b:a7:2d:16:0c:6c:f4:b3:5d:66:
a1:6f:df:1d:59:25:f4:ad:a6:e2:14:cb:07:65:74:bc:9f:1f:
7a:b2:e4:88:bc:cb:b9:26:b0:a0:e8:05:6b:b7:cb:09:07:40:
a9:af:ec:43:26:4c:57:2f:ac:fb:17:3c:90:a2:9e:e0:a8:bd:
e3:c2:f9:2c:48:40:41:65:e4:f2:01:e8:26:51:38:bf:14:92:
c6:9f:2e:b5:b0:a9:b1:71:46:be:af:c3:05:53:48:df:4c:8a:
4e:cb:3b:97:93:8a:d0:17:c5:26:82:53:87:ea:fb:52:73:37:
b4:ea:16:86:9e:73:88:16:c5:c0:82:f9:16:a5:37:2b:66:a1:
65:88:1a:4f:d3:b5:91:01:4b:81:00:a8:51:93:c8:45:c6:be:
e5:e0:7c:30:4a:d8:4f:17:68:47:bf:18:e2:b5:e8:5e:2e:3e:
65:55:b9:59:be:27:52:7f:a1:53:8e:46:3e:fa:a3:c1:bb:81:
43:33:ea:c8:00:fc:ca:33:69:ef:c2:12:e5:24:c8:58:4f:e2:
b9:ae:0f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:16:55 2025 by rpki-client