Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.mft
File: khPywtBsZLiVRXq1D8SSAoOknMc.mft (raw, json)
Hash identifier: malV6liiTAH9X74QA4ooFC903nKKjFc56nSRTrpNPCM=
Subject key identifier: 38:AB:75:F8:9C:8F:0C:C2:43:42:44:F9:97:3A:E7:80:F4:EB:4E:26
Authority key identifier: 92:13:F2:C2:D0:6C:64:B8:95:45:7A:B5:0F:C4:92:02:83:A4:9C:C7
Certificate issuer: /CN=9213f2c2d06c64b895457ab50fc4920283a49cc7
Certificate serial: 019873E2E7AF7F0E909A617A2F6B0C1C0AAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khPywtBsZLiVRXq1D8SSAoOknMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.mft
Manifest number: 161C
Signing time: Mon 04 Aug 2025 07:01:46 +0000
Manifest this update: Mon 04 Aug 2025 07:01:46 +0000
Manifest next update: Tue 05 Aug 2025 07:01:46 +0000
Files and hashes: 1: WzcaaMQRrlChBNRzpd6ejVsnjhE.roa (hash: thxrjBXbUSSC8DCWldp79G7rZSMi1abwsQ1q60K08dg=)
2: iRKQaDksCLDeAQtwp0YKQ3SovAI.roa (hash: wixldrtyd3fdUQpeC4X4fRGfwA4fNIJXJhW2tQSWdew=)
3: khPywtBsZLiVRXq1D8SSAoOknMc.crl (hash: he7drpTbhe4pL9WW+cv/8D0HALRSihNxgU9OlbDjU5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/khPywtBsZLiVRXq1D8SSAoOknMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:e7:af:7f:0e:90:9a:61:7a:2f:6b:0c:1c:0a:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9213f2c2d06c64b895457ab50fc4920283a49cc7
Validity
Not Before: Aug 4 07:01:46 2025 GMT
Not After : Aug 5 07:01:46 2025 GMT
Subject: CN=38ab75f89c8f0cc2434244f9973ae780f4eb4e26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e4:66:83:b3:49:de:05:f5:67:52:f3:12:b8:
a7:78:ea:80:fe:29:f2:41:1b:01:62:39:1a:f5:2a:
bc:08:7a:c1:53:4f:1f:f0:ed:fe:2f:56:c8:59:3e:
c9:21:04:73:b1:f2:4c:22:3b:c4:8f:57:a4:4d:b3:
38:6d:ae:bf:f6:5f:61:25:14:88:ef:03:9a:59:c9:
18:96:f0:69:02:3e:a6:a6:15:29:74:75:53:e8:4c:
ae:c2:af:dd:26:18:04:7c:0d:ae:ca:22:9e:c0:75:
d6:02:06:85:98:da:cc:b4:6a:d5:7b:18:1c:4a:a6:
4e:b9:fb:b0:01:87:c5:24:b0:e0:d0:28:29:78:92:
32:f9:90:33:6d:84:4c:cc:1a:98:e2:69:f3:2b:af:
4b:6c:11:dd:41:9d:eb:5d:f2:c2:59:8a:10:1a:70:
73:cb:77:5e:6c:1d:7d:3c:26:72:23:47:eb:86:57:
21:44:90:3f:0b:50:5d:9b:46:db:64:51:14:49:10:
1e:10:67:8b:7a:3c:13:b8:92:50:1b:59:df:a2:78:
6a:ba:82:82:6b:32:51:ed:b7:14:9b:2d:42:f4:a8:
1e:e3:07:81:d5:16:1b:6a:f4:70:5f:13:a3:0f:fa:
66:24:bd:87:6e:cd:8e:58:c4:40:ac:ed:49:16:d4:
69:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:AB:75:F8:9C:8F:0C:C2:43:42:44:F9:97:3A:E7:80:F4:EB:4E:26
X509v3 Authority Key Identifier:
keyid:92:13:F2:C2:D0:6C:64:B8:95:45:7A:B5:0F:C4:92:02:83:A4:9C:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khPywtBsZLiVRXq1D8SSAoOknMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:e0:74:0c:e7:38:55:3a:a9:d3:d5:1b:09:82:3f:ca:a1:30:
8c:22:57:f6:3d:4d:32:de:90:25:24:15:fa:5a:96:3c:ff:0f:
4e:db:1e:24:df:de:29:26:9b:51:65:f2:10:dc:3b:d6:db:1c:
a9:9c:1e:5e:6a:3c:9a:21:bd:ac:b4:e7:49:34:b7:15:72:d3:
cf:d3:2f:53:38:54:f0:eb:2e:25:ff:09:27:4c:10:ed:e9:02:
49:1e:b8:04:00:16:12:1f:98:21:e3:d1:dc:48:6e:35:c4:98:
92:16:d3:d6:8b:4b:5a:2b:85:46:51:1b:6e:7e:d2:44:e5:7d:
5e:27:39:fb:ad:9a:db:89:8a:a3:97:4b:05:77:31:ec:65:26:
ee:8a:3f:3d:f4:74:99:c9:be:0e:ef:4e:6e:d8:30:86:95:b4:
59:94:12:cc:96:ce:52:79:80:98:f7:ea:62:3f:23:b2:fc:16:
a1:1f:13:f4:2f:c0:c8:8a:53:d3:c5:1a:74:96:55:8d:26:dd:
be:95:5b:80:cd:7d:fe:79:eb:7a:cf:e5:66:72:c7:b4:40:40:
80:25:c0:7d:1f:dc:48:1d:0d:cd:39:3a:6a:b8:9b:cb:0f:a7:
43:b4:00:35:ba:a6:9e:65:6a:df:d1:8e:d7:2d:e4:3f:40:06:
58:48:ff:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:55 2025 by rpki-client