Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft
File: khkujXhVgfcrGGRCJL2MP6ii0Rs.mft (raw, json)
Hash identifier: 7Q5HgjZwI9F5dnHlRm+jLxh8D7iUwSlrfwZSGDy/BYo=
Subject key identifier: 8C:AA:E4:C9:D2:0C:52:AB:A7:4F:2E:15:54:23:D6:63:1C:83:59:75
Authority key identifier: 92:19:2E:8D:78:55:81:F7:2B:18:64:42:24:BD:8C:3F:A8:A2:D1:1B
Certificate issuer: /CN=92192e8d785581f72b18644224bd8c3fa8a2d11b
Certificate serial: 01976FD155CEC6A45180FEB2F506A49CE85E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft
Manifest number: 0FD4
Signing time: Sat 14 Jun 2025 19:01:19 +0000
Manifest this update: Sat 14 Jun 2025 19:01:19 +0000
Manifest next update: Sun 15 Jun 2025 19:01:19 +0000
Files and hashes: 1: U5brV2wu1x_E4LYsBJQzT_Q5MOM.roa (hash: ETh8nXKXUOu2Azl2VyxOp9oStSQiBL2JNlN9c3tCXQ0=)
2: WCwlNGrnqXg0s07Q732U-2ylHg4.roa (hash: JC3pVBoWwnSgFg4cCXzdGvV9c4AWdX+y7n3AH9a1Lis=)
3: khkujXhVgfcrGGRCJL2MP6ii0Rs.crl (hash: ZW6djjfv5RfcWKx1i7LBsMPjOSwndka9amo0ZRwCuj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d1:55:ce:c6:a4:51:80:fe:b2:f5:06:a4:9c:e8:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92192e8d785581f72b18644224bd8c3fa8a2d11b
Validity
Not Before: Jun 14 19:01:19 2025 GMT
Not After : Jun 15 19:01:19 2025 GMT
Subject: CN=8caae4c9d20c52aba74f2e155423d6631c835975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:48:ba:27:fe:67:a5:cb:24:7c:73:b7:ef:08:
c2:c9:ae:2c:9f:5f:90:f4:17:8d:29:0d:27:49:4c:
cb:0b:e5:21:f9:b5:8f:63:c7:89:f5:cd:f6:a8:f9:
ee:0e:4f:33:7a:5c:0e:40:c0:b4:4b:20:49:bc:f0:
16:c7:3e:95:80:d6:dc:08:55:d0:ea:8a:6d:27:ab:
78:29:d2:fd:6d:66:eb:05:20:02:a7:d2:d0:56:0a:
f6:b0:60:a6:55:62:47:96:dd:b9:a7:6d:5a:c0:09:
7d:2a:a1:b1:4b:de:3d:c5:a8:a6:1b:90:02:a1:92:
d6:b8:99:27:c4:a3:c6:ac:b9:b9:e4:ae:bb:d1:35:
27:0e:1e:a1:37:c2:d2:7c:04:a3:d0:01:c6:cd:06:
5d:21:96:9f:fc:a7:25:f4:ba:d1:18:28:2d:40:11:
22:5a:6e:41:f8:0e:d6:55:95:29:e4:71:a3:3e:13:
aa:c0:df:7d:b3:9d:1e:a8:e3:82:0e:dc:fc:fe:83:
34:cd:41:57:66:db:1a:d1:31:0a:2c:c5:a9:48:b5:
de:85:ef:96:5a:af:a2:b5:d4:63:b3:74:1d:5c:37:
de:fa:7e:83:a0:f2:36:d2:0e:5f:98:83:c0:32:a4:
d6:dc:dc:84:77:41:18:72:5a:50:c4:51:18:6d:5f:
bf:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:AA:E4:C9:D2:0C:52:AB:A7:4F:2E:15:54:23:D6:63:1C:83:59:75
X509v3 Authority Key Identifier:
keyid:92:19:2E:8D:78:55:81:F7:2B:18:64:42:24:BD:8C:3F:A8:A2:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:f5:a4:7f:76:c3:4c:8e:d8:bb:ce:87:6e:96:d6:de:0b:ae:
af:3a:16:e7:ba:a7:1a:c3:12:fe:5c:da:50:09:65:39:23:6a:
19:88:54:e7:01:92:2c:f0:58:57:6e:df:62:ce:e5:8d:2f:13:
c3:77:06:65:5a:73:9b:50:69:d1:14:01:9a:a0:06:3b:b4:49:
11:69:c4:d9:b9:25:d4:99:99:3c:10:96:61:ee:af:06:c5:82:
4d:ed:80:68:5b:ae:db:6b:32:b0:ad:17:fd:54:04:29:8f:87:
70:67:f8:48:d9:30:0b:02:ea:84:74:af:00:da:6e:83:8d:cd:
21:2c:a7:af:5b:f9:d5:28:51:fb:bf:99:a3:71:d7:d7:44:67:
e8:a8:b8:e9:ef:00:d5:62:71:8d:0a:35:19:fc:00:c6:85:e9:
a4:ac:6c:4a:8d:eb:30:bc:75:f0:5c:1a:1d:c3:67:96:2e:5a:
8a:be:f2:77:90:ff:f1:55:87:14:ec:f6:df:7b:7f:21:5d:23:
12:db:dc:d8:c0:63:66:d1:86:8e:35:c4:07:c3:e4:de:ab:26:
3d:c4:18:85:f8:a0:c2:aa:a0:10:f0:88:78:f9:29:68:14:aa:
f4:20:36:03:a0:a9:73:ef:8c:e4:48:ad:c7:5c:c5:d9:99:24:
20:63:34:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:16:54 2025 by rpki-client