Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
File: KhLvrumX6adjtGCrWS3dpnoN63A.mft (raw, json)
Hash identifier: CWwMCLxpd4psuKRa1x1fNouodovq0I1pQCAY+hENX+o=
Subject key identifier: 46:3E:1D:5E:8E:DB:91:40:08:5A:D5:00:B1:43:53:73:58:30:96:BB
Authority key identifier: 2A:12:EF:AE:E9:97:E9:A7:63:B4:60:AB:59:2D:DD:A6:7A:0D:EB:70
Certificate issuer: /CN=2a12efaee997e9a763b460ab592ddda67a0deb70
Certificate serial: 01977F0CBF2040159A176D55E833EE9CF961
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KhLvrumX6adjtGCrWS3dpnoN63A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
Manifest number: 017C
Signing time: Tue 17 Jun 2025 18:00:31 +0000
Manifest this update: Tue 17 Jun 2025 18:00:31 +0000
Manifest next update: Wed 18 Jun 2025 18:00:31 +0000
Files and hashes: 1: 8u9hb0S_4Uuo5fYUwLVSXZK5rxM.roa (hash: 6iQilpXzVprtaKFu2A9AhzRE5Pgx6o9DaMAB494sBrc=)
2: KhLvrumX6adjtGCrWS3dpnoN63A.crl (hash: xH9Q05D9f314w6CxzTPUW4uSWwq8lhRadP05LbdWEDs=)
3: SccPUBWuljMHYcMk3K5QOdOVb6g.roa (hash: uBtJ4Y5vGvXPCHheXT9gg13uzVBy/aYh9vF63HwlhDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
rsync://rpki.ripe.net/repository/DEFAULT/KhLvrumX6adjtGCrWS3dpnoN63A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 13:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7f:0c:bf:20:40:15:9a:17:6d:55:e8:33:ee:9c:f9:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a12efaee997e9a763b460ab592ddda67a0deb70
Validity
Not Before: Jun 17 18:00:31 2025 GMT
Not After : Jun 18 18:00:31 2025 GMT
Subject: CN=463e1d5e8edb9140085ad500b1435373583096bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:eb:58:7c:60:6a:76:94:f3:72:9e:ca:ae:bf:
e4:96:50:9e:0b:91:46:19:4b:0d:9e:98:f8:9c:b5:
fb:54:76:55:17:77:62:a7:28:6d:66:b9:f7:c0:b9:
e6:db:b2:4c:a0:28:d2:9d:2c:db:52:35:26:17:89:
1a:c6:23:57:31:27:f1:79:b5:55:0b:fe:e6:55:55:
84:22:b3:d3:84:99:ff:1b:d6:38:9b:7f:d6:27:f0:
72:8f:8f:00:87:d1:44:0e:db:1a:62:39:65:3f:3f:
10:66:58:da:29:62:69:8e:ad:70:07:75:ef:e1:b7:
03:ad:53:ba:26:92:fb:f7:0f:d8:dc:14:df:10:6b:
16:48:04:85:b4:bd:9e:6c:9b:8a:26:61:47:e7:51:
27:bc:22:97:74:64:45:9f:b4:51:91:d9:90:e5:88:
be:f8:1b:3a:86:87:3d:87:9d:42:5b:68:44:f3:0b:
b5:44:d7:c3:cd:5e:61:72:89:af:7a:78:67:4e:8a:
48:c6:5d:3b:99:3c:a1:94:7e:fd:7d:b2:c8:f7:ff:
09:07:72:6b:86:5f:dc:a8:95:4a:82:f2:57:36:83:
94:82:17:5c:be:8f:c6:d6:8d:41:17:18:51:93:a3:
5f:ee:bc:14:05:10:8b:f8:6c:90:35:10:a1:3a:f1:
92:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:3E:1D:5E:8E:DB:91:40:08:5A:D5:00:B1:43:53:73:58:30:96:BB
X509v3 Authority Key Identifier:
keyid:2A:12:EF:AE:E9:97:E9:A7:63:B4:60:AB:59:2D:DD:A6:7A:0D:EB:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KhLvrumX6adjtGCrWS3dpnoN63A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:ee:d3:14:fe:06:44:54:39:38:ea:35:07:93:e0:64:ae:23:
26:33:93:94:a0:ac:c7:97:00:96:c8:ee:23:e2:81:6c:60:42:
68:f2:49:9c:3e:0b:f9:bc:78:78:93:b6:db:b4:8f:da:3d:b2:
5d:5a:a2:e1:fb:08:aa:aa:b1:03:5c:6c:54:ae:d5:3c:95:a0:
1e:ec:98:77:e7:d0:a7:3d:ac:0f:ee:86:83:70:b8:26:c5:3e:
1d:11:ea:b7:63:20:d7:d5:de:0e:2c:3b:0b:1b:d6:71:b5:45:
7d:dd:e7:9c:6f:96:5f:50:8b:53:5f:95:8a:d7:80:54:c4:98:
42:97:e6:c3:bd:a7:7a:08:c2:dd:bb:73:21:4e:68:78:ae:2c:
cf:b8:64:94:35:05:e9:e5:a0:8c:8d:2a:ae:9c:26:78:b1:1d:
73:f9:e0:6c:8b:3d:3f:3b:65:62:44:b9:cf:24:0f:70:bc:70:
c9:fe:6b:70:17:29:8a:65:eb:29:20:91:92:59:42:bf:da:64:
7e:ed:a0:90:d1:a8:08:1c:bc:dd:45:4f:66:16:5c:07:29:b0:
4d:ad:46:a8:b9:55:c2:0b:56:76:bf:95:9a:59:b7:bb:83:0f:
f5:c0:f5:03:5a:e1:28:68:c3:c5:05:89:17:db:41:ec:76:27:
b2:ac:c7:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd/DL8gQBWaF21V6DPunPlhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhMTJlZmFlZTk5N2U5YTc2M2I0NjBhYjU5MmRkZGE2N2Ew
ZGViNzAwHhcNMjUwNjE3MTgwMDMxWhcNMjUwNjE4MTgwMDMxWjAzMTEwLwYDVQQD
Eyg0NjNlMWQ1ZThlZGI5MTQwMDg1YWQ1MDBiMTQzNTM3MzU4MzA5NmJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1OtYfGBqdpTzcp7Krr/kllCeC5FG
GUsNnpj4nLX7VHZVF3dipyhtZrn3wLnm27JMoCjSnSzbUjUmF4kaxiNXMSfxebVV
C/7mVVWEIrPThJn/G9Y4m3/WJ/Byj48Ah9FEDtsaYjllPz8QZljaKWJpjq1wB3Xv
4bcDrVO6JpL79w/Y3BTfEGsWSASFtL2ebJuKJmFH51EnvCKXdGRFn7RRkdmQ5Yi+
+Bs6hoc9h51CW2hE8wu1RNfDzV5hcomvenhnTopIxl07mTyhlH79fbLI9/8JB3Jr
hl/cqJVKgvJXNoOUghdcvo/G1o1BFxhRk6Nf7rwUBRCL+GyQNRChOvGSUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEY+HV6O25FACFrVALFDU3NYMJa7MB8GA1UdIwQY
MBaAFCoS767pl+mnY7Rgq1kt3aZ6DetwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2hMdnJ1bVg2YWRqdEdDcldTM2Rwbm9ONjNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny82ZmY0M2ItMjdhYi00MDY0LWFmMWQt
MDllZDc4MDBmZGZiLzEvS2hMdnJ1bVg2YWRqdEdDcldTM2Rwbm9ONjNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny82ZmY0M2ItMjdhYi00MDY0LWFmMWQtMDllZDc4MDBmZGZi
LzEvS2hMdnJ1bVg2YWRqdEdDcldTM2Rwbm9ONjNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA+7TFP4G
RFQ5OOo1B5PgZK4jJjOTlKCsx5cAlsjuI+KBbGBCaPJJnD4L+bx4eJO227SP2j2y
XVqi4fsIqqqxA1xsVK7VPJWgHuyYd+fQpz2sD+6Gg3C4JsU+HRHqt2Mg19XeDiw7
CxvWcbVFfd3nnG+WX1CLU1+ViteAVMSYQpfmw72negjC3btzIU5oeK4sz7hklDUF
6eWgjI0qrpwmeLEdc/ngbIs9PztlYkS5zyQPcLxwyf5rcBcpimXrKSCRkllCv9pk
fu2gkNGoCBy83UVPZhZcBymwTa1GqLlVwgtWdr+Vmlm3u4MP9cD1A1rhKGjDxQWJ
F9tB7HYnsqzHxg==
-----END CERTIFICATE-----
Generated at Tue Jun 17 23:16:10 2025 by rpki-client