Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft
File: khkujXhVgfcrGGRCJL2MP6ii0Rs.mft (raw, json)
Hash identifier: bFTSsc5Sfop10i27Dj/ms79EdEKRdCb9El6bhSyybJg=
Subject key identifier: 7F:47:92:46:3F:09:A0:88:35:BA:9E:5D:CD:04:C3:9C:CD:F4:FC:06
Authority key identifier: 92:19:2E:8D:78:55:81:F7:2B:18:64:42:24:BD:8C:3F:A8:A2:D1:1B
Certificate issuer: /CN=92192e8d785581f72b18644224bd8c3fa8a2d11b
Certificate serial: 01987E2F0F4383BB2D15A037EC597DDB1A59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft
Manifest number: 1060
Signing time: Wed 06 Aug 2025 07:01:09 +0000
Manifest this update: Wed 06 Aug 2025 07:01:09 +0000
Manifest next update: Thu 07 Aug 2025 07:01:09 +0000
Files and hashes: 1: U5brV2wu1x_E4LYsBJQzT_Q5MOM.roa (hash: ETh8nXKXUOu2Azl2VyxOp9oStSQiBL2JNlN9c3tCXQ0=)
2: WCwlNGrnqXg0s07Q732U-2ylHg4.roa (hash: JC3pVBoWwnSgFg4cCXzdGvV9c4AWdX+y7n3AH9a1Lis=)
3: khkujXhVgfcrGGRCJL2MP6ii0Rs.crl (hash: ekwoFqJqF42AXwBT6CkxSXErfx+VZhLLkk34uz47j6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 07:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:2f:0f:43:83:bb:2d:15:a0:37:ec:59:7d:db:1a:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92192e8d785581f72b18644224bd8c3fa8a2d11b
Validity
Not Before: Aug 6 07:01:09 2025 GMT
Not After : Aug 7 07:01:09 2025 GMT
Subject: CN=7f4792463f09a08835ba9e5dcd04c39ccdf4fc06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e4:19:68:fa:17:a9:24:66:3a:2e:e5:58:79:
34:f7:83:0b:a1:70:13:14:67:61:df:b4:5e:0e:ac:
d3:a4:af:bc:6c:73:c1:89:38:69:13:26:61:62:e5:
35:f5:01:80:71:94:71:2f:9c:82:68:54:35:9e:9f:
ef:f0:d6:25:b5:74:ea:8d:97:4c:56:ed:48:c5:c7:
ce:30:f6:d3:4c:7b:a1:8b:4c:1a:8b:43:4a:52:dc:
c4:11:ef:f4:51:c4:ff:9a:8e:79:c5:fb:3f:2f:8a:
a0:b7:27:e2:05:0e:a3:57:db:21:e2:59:6d:8d:11:
df:d7:29:2f:97:04:19:26:70:bf:98:5a:af:df:6f:
dc:f0:73:e4:b2:02:b8:65:e0:5b:fd:b4:cb:48:71:
9b:29:2f:bf:c5:6f:11:14:c8:c9:5a:6e:21:fb:ba:
5e:7a:1a:d3:f7:67:0b:aa:df:7f:b4:01:1e:a1:aa:
02:12:04:17:84:df:b5:84:f6:1a:9e:8e:20:62:44:
57:69:ff:84:b1:5f:8c:47:eb:59:b9:9c:ce:3c:b2:
b5:c6:9c:f6:35:76:dd:7c:2d:92:2f:d0:0a:b5:e5:
7c:ff:a6:06:2e:10:51:69:c9:18:da:34:c2:07:fb:
6f:40:83:c6:8d:09:24:e0:88:0e:fe:a7:18:5e:a5:
84:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:47:92:46:3F:09:A0:88:35:BA:9E:5D:CD:04:C3:9C:CD:F4:FC:06
X509v3 Authority Key Identifier:
keyid:92:19:2E:8D:78:55:81:F7:2B:18:64:42:24:BD:8C:3F:A8:A2:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:2e:0b:67:dc:33:75:26:4f:a5:4c:66:a3:60:3c:f4:eb:ec:
94:b4:26:91:0c:cf:19:8f:c7:ea:65:61:1f:89:11:47:cb:4b:
a2:07:12:26:bb:15:69:52:97:af:d3:22:52:f5:e4:13:ca:ef:
99:2c:e9:f2:e8:7a:49:7e:1a:2f:04:39:a0:8a:ec:ec:4c:48:
27:25:5b:3c:e1:08:c6:64:48:48:66:50:f5:7f:dc:29:e5:0c:
68:fb:eb:87:70:44:58:a2:fd:51:84:f0:f1:c6:e3:49:04:a0:
25:54:3e:7c:79:fd:8d:a6:9d:3b:bc:00:64:d9:0e:c9:1a:dd:
46:bd:7b:7f:69:d1:df:ce:0c:cf:bd:bf:84:88:eb:7a:1e:b6:
09:cd:6e:71:cd:e9:64:3d:02:75:f3:f3:bd:04:ac:48:de:29:
69:06:cb:a7:2e:d1:c2:57:23:3d:cf:d2:71:a6:4f:05:87:70:
07:8d:c6:16:9f:b6:9d:ae:e5:7c:3c:66:09:37:8e:ca:76:6b:
46:44:95:e7:13:bd:60:07:e7:ff:39:3d:64:c6:21:19:ec:0e:
f6:39:c5:a9:03:30:3f:b5:af:fc:da:63:09:0e:80:39:a9:06:
17:d5:d8:fc:f5:5e:f9:b6:c4:ea:61:8b:f6:bf:d1:ee:ee:21:
ec:28:01:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:13:26 2025 by rpki-client