Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.mft
File: KHXxhYI9vGqC0QWzyhYHfbVyk3c.mft (raw, json)
Hash identifier: 34XpLerAtoJUP3o+ghWVMQR0ZxeOSTRQ3f4cc+dabas=
Subject key identifier: 21:F1:F4:80:A6:0F:DE:0E:76:73:35:87:70:CA:DF:1A:10:44:CD:4E
Authority key identifier: 28:75:F1:85:82:3D:BC:6A:82:D1:05:B3:CA:16:07:7D:B5:72:93:77
Certificate issuer: /CN=2875f185823dbc6a82d105b3ca16077db5729377
Certificate serial: 019775D34B3AEA58F1027B7EB60BF5B4DD93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KHXxhYI9vGqC0QWzyhYHfbVyk3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.mft
Manifest number: 1596
Signing time: Sun 15 Jun 2025 23:01:10 +0000
Manifest this update: Sun 15 Jun 2025 23:01:10 +0000
Manifest next update: Mon 16 Jun 2025 23:01:10 +0000
Files and hashes: 1: DUHPPbMiJZ5g5-MVvzd1BoFThPs.roa (hash: jYJfj32NL3hL8Amv7vFPn8VdtIOctCQTglUuBNZ6asM=)
2: KHXxhYI9vGqC0QWzyhYHfbVyk3c.crl (hash: CK/5ztbCatusgFbge+DNHlP967Whfc/s/Xbaxbpgbkg=)
3: v7cahpSyhHNf-9u3vX0WVgp6xg4.roa (hash: An2ilVmevKfJ9Krr3t4y0gOa1n+BDhvcN3VZHuTlMls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/KHXxhYI9vGqC0QWzyhYHfbVyk3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 20:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:75:d3:4b:3a:ea:58:f1:02:7b:7e:b6:0b:f5:b4:dd:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2875f185823dbc6a82d105b3ca16077db5729377
Validity
Not Before: Jun 15 23:01:10 2025 GMT
Not After : Jun 16 23:01:10 2025 GMT
Subject: CN=21f1f480a60fde0e7673358770cadf1a1044cd4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1a:de:c7:8d:91:26:00:4c:d3:db:31:ed:5c:
b5:7b:da:41:c5:de:1b:b1:76:3d:46:04:82:b3:5c:
7d:b8:61:75:b7:28:aa:69:50:c5:9c:be:9c:5c:12:
fe:6c:39:04:ca:50:25:b4:34:d6:cb:8f:78:90:d9:
7c:9b:fa:48:76:32:9b:9e:4b:6c:8e:ba:c6:29:32:
96:24:e1:b1:d3:2a:0a:d5:6a:30:7c:8a:e5:60:dc:
69:e1:3f:92:5c:94:b5:79:03:a9:4d:74:30:1e:35:
5a:50:c5:7b:97:62:3f:66:4e:45:ae:23:39:61:b6:
29:2e:4e:65:90:39:7d:04:f2:37:62:11:86:05:5b:
2c:e1:28:5e:f6:b5:5f:de:3e:51:ea:3e:b0:06:df:
a9:7f:88:68:96:ce:11:09:a7:1d:25:2a:fb:6d:77:
5e:08:dc:3a:22:c4:f6:5e:e1:0a:82:72:d4:3d:5f:
85:e5:9c:2d:d4:dc:28:58:35:2f:b2:d6:bc:84:80:
e5:71:af:8c:5f:c7:4d:ff:65:2b:6f:9c:7f:b5:39:
0a:fb:67:c2:77:11:0b:70:cf:31:46:51:d5:5a:fd:
e4:28:d6:97:a0:94:c5:91:77:6f:7c:b9:35:c1:bc:
8d:d1:e4:aa:b8:aa:3b:bf:53:78:f9:b4:86:99:ed:
11:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F1:F4:80:A6:0F:DE:0E:76:73:35:87:70:CA:DF:1A:10:44:CD:4E
X509v3 Authority Key Identifier:
keyid:28:75:F1:85:82:3D:BC:6A:82:D1:05:B3:CA:16:07:7D:B5:72:93:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KHXxhYI9vGqC0QWzyhYHfbVyk3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:27:02:c6:b1:a5:bb:32:90:af:a5:24:20:4f:10:c1:7d:4b:
45:14:98:b8:79:77:1e:d2:0d:ad:bc:0a:85:51:78:83:dc:26:
41:18:8e:8a:47:d5:6b:63:53:56:fd:02:d3:59:7b:0b:a0:61:
ab:62:f0:f0:90:4c:15:e7:66:8c:aa:09:83:c9:b9:bb:b3:d8:
f1:b5:39:df:1c:fe:fb:3f:1e:51:11:16:b0:f4:ec:13:70:c0:
f8:e4:89:6b:a8:40:ee:75:c2:24:9d:87:4f:b2:f6:b0:ad:f1:
eb:d4:73:ea:aa:d7:4c:c8:be:0a:8c:58:aa:c8:d8:dc:0e:92:
b5:43:e5:70:5b:18:b8:e4:4a:51:fb:7a:a9:7b:28:56:f4:c2:
f5:83:bb:ec:b4:2d:89:ac:43:14:d6:d7:33:a2:00:2b:c0:e1:
9e:12:e1:70:24:2f:8f:54:29:5e:38:1d:df:4e:e0:f6:49:57:
25:0e:d5:b6:6e:df:23:c8:be:78:de:d3:8e:f0:37:8b:43:c5:
a2:6a:3f:37:cb:c1:83:5f:fc:a1:a6:77:06:b0:86:cf:7d:db:
58:42:3b:eb:e6:2f:d7:89:2d:7f:8b:e3:98:95:dd:ad:d7:a9:
3b:40:30:1c:6c:56:3f:18:a5:99:24:d6:84:4e:84:dd:e9:f2:
b8:49:23:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:55:23 2025 by rpki-client