Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.mft
File: khPywtBsZLiVRXq1D8SSAoOknMc.mft (raw, json)
Hash identifier: pssQOIYaD7tu9MRJ5v+0qHEK/buzBzhVVXnZucavicE=
Subject key identifier: 14:B9:25:0F:8E:00:3B:23:1E:F4:F2:F7:54:B0:A6:25:5B:A9:67:A6
Authority key identifier: 92:13:F2:C2:D0:6C:64:B8:95:45:7A:B5:0F:C4:92:02:83:A4:9C:C7
Certificate issuer: /CN=9213f2c2d06c64b895457ab50fc4920283a49cc7
Certificate serial: 01976960FDF68E80180A1D682FEF67B8AD1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khPywtBsZLiVRXq1D8SSAoOknMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.mft
Manifest number: 1592
Signing time: Fri 13 Jun 2025 13:00:53 +0000
Manifest this update: Fri 13 Jun 2025 13:00:53 +0000
Manifest next update: Sat 14 Jun 2025 13:00:53 +0000
Files and hashes: 1: WzcaaMQRrlChBNRzpd6ejVsnjhE.roa (hash: thxrjBXbUSSC8DCWldp79G7rZSMi1abwsQ1q60K08dg=)
2: iRKQaDksCLDeAQtwp0YKQ3SovAI.roa (hash: wixldrtyd3fdUQpeC4X4fRGfwA4fNIJXJhW2tQSWdew=)
3: khPywtBsZLiVRXq1D8SSAoOknMc.crl (hash: 8WuNPebbK3yhbWU4anzXccKsK4gOlBAGPLKSSosGUDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/khPywtBsZLiVRXq1D8SSAoOknMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:60:fd:f6:8e:80:18:0a:1d:68:2f:ef:67:b8:ad:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9213f2c2d06c64b895457ab50fc4920283a49cc7
Validity
Not Before: Jun 13 13:00:53 2025 GMT
Not After : Jun 14 13:00:53 2025 GMT
Subject: CN=14b9250f8e003b231ef4f2f754b0a6255ba967a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fb:11:99:b1:56:cf:42:0c:d9:68:37:f5:4d:
d9:25:09:d5:1f:e8:70:70:60:43:bb:72:2e:19:a8:
2b:dd:d7:57:2a:cd:d4:b3:e0:ce:cb:3c:ed:75:72:
f1:5d:c1:61:e5:78:6a:33:59:d4:ce:64:e6:e4:1a:
92:f8:cf:62:2e:3b:4c:03:45:02:bc:46:df:41:f5:
52:4c:e0:d0:f9:df:0f:33:0d:34:a7:cc:1d:b5:37:
b6:3e:8d:86:29:55:fc:bf:df:62:c4:06:de:25:ce:
d1:b4:7b:94:11:4d:e8:23:c2:ac:cd:41:23:a1:f3:
d7:21:fe:4e:0f:1d:be:cd:f3:3e:a6:a4:f1:27:d9:
8a:ea:26:74:ac:84:24:26:7b:59:00:cf:43:09:04:
a2:41:51:6b:08:28:09:9f:47:c8:e2:2c:60:a6:b2:
ae:11:b8:1b:dd:37:32:fd:20:ef:61:12:b4:67:23:
ca:ac:78:fd:5b:3f:49:02:ee:54:93:af:39:fa:19:
82:94:d6:fd:1d:69:a5:d6:7c:30:a7:a1:40:78:3c:
31:41:3e:45:ae:94:a6:bf:89:50:69:a4:9d:b2:00:
1c:44:62:68:5a:ee:3c:f2:cc:e4:ea:d9:f5:0e:d1:
86:82:62:9f:42:5d:ff:8a:02:a9:b4:2d:42:13:75:
39:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:B9:25:0F:8E:00:3B:23:1E:F4:F2:F7:54:B0:A6:25:5B:A9:67:A6
X509v3 Authority Key Identifier:
keyid:92:13:F2:C2:D0:6C:64:B8:95:45:7A:B5:0F:C4:92:02:83:A4:9C:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khPywtBsZLiVRXq1D8SSAoOknMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:38:96:8c:9f:78:5a:54:9a:9f:ab:be:ea:f3:72:79:b0:5e:
24:f6:8b:8a:cc:52:e7:e0:29:ff:e8:76:12:d0:fd:c6:38:4c:
b4:2c:68:c9:b0:7e:15:a1:3d:fd:e3:f4:40:a8:91:92:ce:71:
fd:cc:c7:36:b8:f4:e0:57:8a:01:9a:62:39:2b:ca:75:4e:62:
22:d9:0c:eb:f7:14:7c:5c:8e:5c:2a:7a:b0:9a:8d:69:90:49:
0c:00:bb:66:74:e8:6e:ae:dc:21:c7:1f:a8:4e:15:02:9c:3e:
2e:c8:48:15:de:43:33:04:6e:cf:94:44:50:6f:62:5b:07:10:
8d:a0:1c:59:47:ab:d0:e6:61:29:fd:3d:4a:10:57:63:62:9b:
f7:6a:93:00:3d:42:25:16:39:fa:35:ae:a8:57:99:0d:cc:28:
20:fc:7c:2b:67:a7:74:39:9f:5f:a5:0c:1a:61:e3:ca:43:40:
60:63:b3:ba:09:d7:35:1d:1d:87:9d:53:8a:84:1a:3c:8f:12:
04:31:7c:6c:c6:71:29:99:9f:7a:a6:20:c3:cc:77:7b:34:de:
50:d5:3b:a6:fb:77:4b:aa:5c:bd:34:ce:92:42:59:48:eb:5e:
cd:64:b5:25:11:a3:e7:bc:0b:c1:3b:d2:eb:7e:1c:2f:4f:ed:
88:f7:6b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:04:12 2025 by rpki-client