Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
File: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json)
Hash identifier: MFwR7qAqPGB4D0SDv8a4JnhIvYRQ9OxFLo0ffStWUFE=
Subject key identifier: CD:E1:ED:F9:50:19:84:35:C4:69:67:D7:A9:98:FA:5C:A6:21:D6:83
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Certificate issuer: /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial: 019895242CD6A8DE150CDD8F7B0925A86E95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
Manifest number: 1628
Signing time: Sun 10 Aug 2025 18:00:32 +0000
Manifest this update: Sun 10 Aug 2025 18:00:32 +0000
Manifest next update: Mon 11 Aug 2025 18:00:32 +0000
Files and hashes: 1: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: i/WiKsuFTXgZGpQwXVEnXG4cu2x6TXnWq2guYVdYgyM=)
2: yGFlSDdiFlFUJBTzkBDJlODQZoY.roa (hash: 5kgFGMiEYqgnd4sbR3CvLQA6/mpT37R4CFK6/AUcK/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:24:2c:d6:a8:de:15:0c:dd:8f:7b:09:25:a8:6e:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Validity
Not Before: Aug 10 18:00:32 2025 GMT
Not After : Aug 11 18:00:32 2025 GMT
Subject: CN=cde1edf950198435c46967d7a998fa5ca621d683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d4:fc:d2:c7:f3:9b:b6:30:7c:bc:02:c9:05:
3d:68:9b:68:c8:18:5c:cd:b3:cc:94:9d:25:b1:91:
30:72:90:88:55:ea:b4:a3:11:68:92:c3:3b:01:0b:
26:52:37:9b:ed:f8:3f:03:13:b9:db:5d:71:d4:3d:
6a:e4:ae:88:f6:61:68:74:2f:ce:a8:04:b9:34:3c:
84:8c:1c:cf:09:9e:d3:30:cb:bb:ad:8d:0d:f7:e9:
be:8a:7d:94:f1:d6:e5:b4:b9:d7:14:75:af:75:e0:
73:e3:3a:64:86:3b:13:cd:ab:ba:e7:97:fb:81:e8:
1f:6c:7e:e1:96:17:3a:2d:6d:0f:c7:62:13:ee:dd:
eb:d2:2f:e0:08:13:1f:de:0f:f5:20:b7:5c:8c:3d:
0d:96:e2:63:6d:cb:3a:de:1e:2d:85:de:13:ea:a9:
37:dd:41:cf:9d:36:d6:7f:65:e4:5c:46:6e:0f:2f:
be:87:56:cb:71:4b:0f:78:d6:01:f6:d8:01:52:76:
87:b9:0b:b2:e0:65:4a:40:32:57:e2:8f:d6:e9:23:
c6:b4:8e:f4:21:55:de:f4:ad:79:45:ed:03:97:45:
b8:a2:77:d9:8d:68:09:0b:71:28:d9:22:a8:65:fc:
6e:2b:a5:00:ad:42:12:41:aa:bf:07:a8:b8:12:0c:
f5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E1:ED:F9:50:19:84:35:C4:69:67:D7:A9:98:FA:5C:A6:21:D6:83
X509v3 Authority Key Identifier:
keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:51:c1:e2:27:c5:a0:27:85:21:4d:7d:62:fb:6b:d2:46:85:
e9:cf:f0:a8:16:15:2b:a3:22:3d:75:50:83:56:3f:c2:9a:68:
2e:f8:01:4e:3e:80:1d:a3:4a:3f:6d:74:25:87:ab:09:a2:10:
83:a3:d8:cb:80:e9:c0:bd:78:ee:ad:ec:5f:9b:7c:ca:e2:c8:
b0:1e:64:5b:63:5a:de:1b:4d:9a:55:75:e4:54:07:bd:5a:21:
41:ba:da:d2:16:ee:53:97:c3:b9:3f:c6:cd:5d:d9:18:98:a1:
3f:08:6e:51:94:5d:01:62:52:28:3b:d9:8e:9a:f6:4e:17:16:
65:03:6e:a2:f0:9e:69:32:c5:28:ac:ed:74:2b:89:1c:94:d5:
ec:a4:73:92:5d:a9:a7:fc:33:6d:f2:4b:4b:7c:28:8d:fa:a4:
84:cb:11:37:68:b3:54:48:a7:8a:35:dc:37:fe:08:86:78:34:
ec:10:c6:3a:49:ef:ee:b4:94:2e:82:35:0e:9d:bb:50:e6:58:
9a:51:73:d8:2f:6d:8f:b5:ad:d0:f4:01:26:2e:ad:aa:07:72:
29:43:37:b9:e4:e1:7c:c5:d4:4b:8d:88:c4:4d:90:68:33:40:
5b:b5:b3:24:81:01:37:e6:a1:e8:c1:e0:7e:c3:81:1f:b2:90:
5d:a1:08:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiVJCzWqN4VDN2PewklqG6VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyMWI0Yzg1Y2FhOGQ4YjE2NjE5YmY5NDVhMmZkNmFmMWM3
N2ZjNzgwHhcNMjUwODEwMTgwMDMyWhcNMjUwODExMTgwMDMyWjAzMTEwLwYDVQQD
EyhjZGUxZWRmOTUwMTk4NDM1YzQ2OTY3ZDdhOTk4ZmE1Y2E2MjFkNjgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNT80sfzm7YwfLwCyQU9aJtoyBhc
zbPMlJ0lsZEwcpCIVeq0oxFoksM7AQsmUjeb7fg/AxO5211x1D1q5K6I9mFodC/O
qAS5NDyEjBzPCZ7TMMu7rY0N9+m+in2U8dbltLnXFHWvdeBz4zpkhjsTzau655f7
gegfbH7hlhc6LW0Px2IT7t3r0i/gCBMf3g/1ILdcjD0NluJjbcs63h4thd4T6qk3
3UHPnTbWf2XkXEZuDy++h1bLcUsPeNYB9tgBUnaHuQuy4GVKQDJX4o/W6SPGtI70
IVXe9K15Re0Dl0W4onfZjWgJC3Eo2SKoZfxuK6UArUISQaq/B6i4Egz1XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM3h7flQGYQ1xGln16mY+lymIdaDMB8GA1UdIwQY
MBaAFJIbTIXKqNixZhm/lFov1q8cd/x4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2h0TWhjcW8yTEZtR2ItVVdpX1dyeHgzX0hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC80MmIxNzktNDc5MC00NTIwLWIxNzQt
NTA1MDUzODJmZDcyLzEva2h0TWhjcW8yTEZtR2ItVVdpX1dyeHgzX0hnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC80MmIxNzktNDc5MC00NTIwLWIxNzQtNTA1MDUzODJmZDcy
LzEva2h0TWhjcW8yTEZtR2ItVVdpX1dyeHgzX0hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADlHB4ifF
oCeFIU19Yvtr0kaF6c/wqBYVK6MiPXVQg1Y/wppoLvgBTj6AHaNKP210JYerCaIQ
g6PYy4DpwL147q3sX5t8yuLIsB5kW2Na3htNmlV15FQHvVohQbra0hbuU5fDuT/G
zV3ZGJihPwhuUZRdAWJSKDvZjpr2ThcWZQNuovCeaTLFKKztdCuJHJTV7KRzkl2p
p/wzbfJLS3wojfqkhMsRN2izVEinijXcN/4Ihng07BDGOknv7rSULoI1Dp27UOZY
mlFz2C9tj7Wt0PQBJi6tqgdyKUM3ueThfMXUS42IxE2QaDNAW7WzJIEBN+ah6MHg
fsOBH7KQXaEIeQ==
-----END CERTIFICATE-----
Generated at Sun Aug 10 21:10:38 2025 by rpki-client