Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
File: KhLvrumX6adjtGCrWS3dpnoN63A.mft (raw, json)
Hash identifier: +iotz2o7YysQJFPI45xKkE5X2tj3WvUfulM46zhmT10=
Subject key identifier: D5:AB:37:3C:15:44:B2:0E:96:B8:F1:D4:91:79:6A:77:F6:D9:5E:78
Authority key identifier: 2A:12:EF:AE:E9:97:E9:A7:63:B4:60:AB:59:2D:DD:A6:7A:0D:EB:70
Certificate issuer: /CN=2a12efaee997e9a763b460ab592ddda67a0deb70
Certificate serial: 019A503DFFB5D43E4F8E37FFFB942708F13F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KhLvrumX6adjtGCrWS3dpnoN63A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
Manifest number: 02F2
Signing time: Tue 04 Nov 2025 19:00:31 +0000
Manifest this update: Tue 04 Nov 2025 19:00:31 +0000
Manifest next update: Wed 05 Nov 2025 19:00:31 +0000
Files and hashes: 1: 1-EYj7rCEm13C4ia18Eyfo_8k-RU.roa (hash: +ir98X5g2btNq9n+Pt6yr5mLVRkCwQv4UOQGouQJy1M=)
2: KhLvrumX6adjtGCrWS3dpnoN63A.crl (hash: C6AincV+yIAtbNxqB8D9GjvomvfALJOiKy5bfyOM+BQ=)
3: SccPUBWuljMHYcMk3K5QOdOVb6g.roa (hash: uBtJ4Y5vGvXPCHheXT9gg13uzVBy/aYh9vF63HwlhDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
rsync://rpki.ripe.net/repository/DEFAULT/KhLvrumX6adjtGCrWS3dpnoN63A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:ff:b5:d4:3e:4f:8e:37:ff:fb:94:27:08:f1:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a12efaee997e9a763b460ab592ddda67a0deb70
Validity
Not Before: Nov 4 19:00:31 2025 GMT
Not After : Nov 5 19:00:31 2025 GMT
Subject: CN=d5ab373c1544b20e96b8f1d491796a77f6d95e78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e2:ba:5f:26:49:bc:ee:cd:a8:87:26:76:97:
51:85:d0:92:39:1b:c6:22:d2:44:19:3a:cd:c7:9f:
34:77:9e:47:5f:4f:4c:24:28:8b:b5:c7:33:9f:7f:
c0:53:e5:75:01:9f:46:64:e9:6e:0a:53:67:2e:96:
56:d0:40:8e:4e:98:c2:78:a0:cf:7f:13:64:4e:0b:
68:6c:03:15:17:3f:eb:de:b4:50:58:e1:ad:cb:1a:
03:6c:72:e7:c2:6d:4d:fb:34:ee:9a:c5:4e:f8:6d:
18:f9:9f:ba:88:3e:4c:bf:61:6c:0a:49:a5:2a:cb:
89:0b:f1:68:ec:70:3c:eb:d9:8c:df:4b:d9:f3:b8:
e2:3d:50:4c:97:36:2c:12:3c:0b:ac:c6:d7:99:d1:
6f:3b:d0:64:14:06:12:66:26:de:f7:9e:88:89:d7:
95:1d:b6:50:11:64:7d:1b:6f:fb:ba:a5:40:51:b2:
fa:e1:0a:84:85:d7:de:5f:31:ae:d3:ca:6d:f6:07:
16:7e:51:b3:6a:8b:67:4d:c3:64:23:e4:74:ab:f0:
4f:f5:d4:30:6c:65:ae:21:31:b9:29:f4:5c:c9:ae:
40:67:87:1d:dc:98:e2:a3:5a:87:67:ed:a1:be:20:
80:f3:c6:8e:bd:96:e8:0d:27:cc:2d:87:a7:b3:2d:
25:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:AB:37:3C:15:44:B2:0E:96:B8:F1:D4:91:79:6A:77:F6:D9:5E:78
X509v3 Authority Key Identifier:
keyid:2A:12:EF:AE:E9:97:E9:A7:63:B4:60:AB:59:2D:DD:A6:7A:0D:EB:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KhLvrumX6adjtGCrWS3dpnoN63A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:4f:51:a0:1d:1a:ab:07:68:02:54:66:ec:e7:b2:36:c2:73:
08:11:8b:f6:f5:2a:58:55:ba:28:30:fd:1f:0a:87:13:21:15:
32:2a:c6:0d:2b:20:7c:ad:64:df:5f:2f:36:35:05:5c:76:be:
58:19:7c:6a:1d:43:f8:0c:03:b3:55:d0:c7:44:45:e9:64:90:
33:8a:ea:be:51:ef:33:19:01:ab:b8:78:71:b8:de:3a:ee:02:
d5:ce:07:60:32:2d:c6:b2:78:ac:0e:08:93:10:9f:be:0e:9b:
b1:9f:dc:b9:5e:4c:27:ad:a0:62:eb:64:95:53:d4:f4:3d:ce:
64:19:2c:88:39:2d:66:09:45:23:63:d0:5e:8c:dd:e1:94:4d:
dd:f2:45:83:42:f3:39:7b:86:4e:b6:61:bd:49:ab:d6:fa:0a:
11:a3:15:dd:09:d1:3f:d7:13:f0:8d:89:d5:02:0d:22:96:44:
c4:4d:cb:c3:23:ef:75:56:69:54:f3:17:c8:31:1f:3f:57:31:
e1:cf:d9:2c:22:92:ba:0e:c6:1a:ff:ea:e9:d5:7e:72:7e:61:
6c:ff:f6:8d:de:7d:8a:e1:27:b4:ee:fd:44:cf:35:5c:69:e0:
91:56:e5:64:c0:ec:23:e1:d0:8e:fb:d8:13:b5:14:ba:14:6b:
7b:e1:e1:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:22:11 2025 by rpki-client