Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/66a439-cf33-47c5-92ab-80b5118abaf6/1/KhfSVHdMl6nGhansXSTy_GlomQg.mft
File: KhfSVHdMl6nGhansXSTy_GlomQg.mft (raw, json)
Hash identifier: GaDTZN6wybLupb266ivY/QFC8GM0Bm9YQq9Upk75sYs=
Subject key identifier: D5:10:CA:86:05:9F:4B:37:83:50:8E:91:D2:BD:35:D5:59:F2:66:0A
Authority key identifier: 2A:17:D2:54:77:4C:97:A9:C6:85:A9:EC:5D:24:F2:FC:69:68:99:08
Certificate issuer: /CN=2a17d254774c97a9c685a9ec5d24f2fc69689908
Certificate serial: 019A4E4F5F3A7A14C67073D950327D132314
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KhfSVHdMl6nGhansXSTy_GlomQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/66a439-cf33-47c5-92ab-80b5118abaf6/1/KhfSVHdMl6nGhansXSTy_GlomQg.mft
Manifest number: 1448
Signing time: Tue 04 Nov 2025 10:00:15 +0000
Manifest this update: Tue 04 Nov 2025 10:00:15 +0000
Manifest next update: Wed 05 Nov 2025 10:00:15 +0000
Files and hashes: 1: 1ibpJfSu5zvmElDRsm3yBPA2Psc.roa (hash: fl2TXrWlprslHDoqKeFpyUnoLUsON1oTzkxdU0IwAjQ=)
2: KhfSVHdMl6nGhansXSTy_GlomQg.crl (hash: 7PLOfuxRLKRlamLgFnVvPhp5BqEKD52iRZ1ztjiY1eA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/66a439-cf33-47c5-92ab-80b5118abaf6/1/KhfSVHdMl6nGhansXSTy_GlomQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/66a439-cf33-47c5-92ab-80b5118abaf6/1/KhfSVHdMl6nGhansXSTy_GlomQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KhfSVHdMl6nGhansXSTy_GlomQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:5f:3a:7a:14:c6:70:73:d9:50:32:7d:13:23:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a17d254774c97a9c685a9ec5d24f2fc69689908
Validity
Not Before: Nov 4 10:00:15 2025 GMT
Not After : Nov 5 10:00:15 2025 GMT
Subject: CN=d510ca86059f4b3783508e91d2bd35d559f2660a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:35:5c:fc:17:c0:5f:e4:44:e5:88:66:52:36:
86:7f:f8:84:b8:85:e4:6a:1e:fa:e2:e2:37:7d:42:
61:45:f2:20:71:8f:2b:d1:02:8b:3c:54:d4:f7:10:
5d:55:9b:a2:f8:a8:b8:d9:bc:30:19:07:bf:fb:35:
07:3a:50:e5:d7:a1:12:49:e9:4b:1c:fd:c3:d1:bd:
be:a6:8a:4c:bb:b2:6e:a2:93:69:75:b4:b6:9e:f4:
be:74:0d:aa:9d:36:18:fd:a3:46:53:61:47:91:a4:
59:4a:0b:b2:6f:63:75:2b:df:9b:b5:f2:dd:7b:92:
09:07:f7:93:06:df:ac:29:eb:fe:4a:8f:7e:7d:7c:
cc:d2:66:bf:02:75:7b:58:ce:3e:e5:85:4b:89:b1:
38:45:30:53:25:31:df:c8:67:e9:7b:c8:ac:c9:b8:
04:eb:87:18:df:6a:5c:70:8a:f0:e1:14:ce:3b:df:
01:f1:89:38:c8:db:2d:8e:eb:c0:a4:07:cc:70:9d:
6c:1b:4a:64:c2:93:2a:44:37:54:c6:74:8b:a9:c6:
2a:30:e7:4f:56:20:da:e8:f3:c3:1f:7b:49:42:49:
fd:32:89:8d:8f:f4:0d:5c:e7:04:8f:76:33:22:59:
b6:16:fa:d8:4c:46:1e:03:2a:c5:87:36:61:ff:d0:
7d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:10:CA:86:05:9F:4B:37:83:50:8E:91:D2:BD:35:D5:59:F2:66:0A
X509v3 Authority Key Identifier:
keyid:2A:17:D2:54:77:4C:97:A9:C6:85:A9:EC:5D:24:F2:FC:69:68:99:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KhfSVHdMl6nGhansXSTy_GlomQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/66a439-cf33-47c5-92ab-80b5118abaf6/1/KhfSVHdMl6nGhansXSTy_GlomQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/66a439-cf33-47c5-92ab-80b5118abaf6/1/KhfSVHdMl6nGhansXSTy_GlomQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:a6:64:eb:40:76:ca:86:3d:ba:f0:ce:2d:a0:0d:6c:58:99:
48:6f:94:0c:0a:7c:14:de:fb:60:38:ca:b7:d9:49:74:a5:f9:
7d:41:ee:b3:aa:b8:be:b8:ae:0b:ef:0b:0b:ba:1e:c8:61:17:
ae:4e:d6:33:36:54:dc:ba:a5:e5:aa:5d:b6:56:a9:73:b9:af:
72:b4:66:ea:08:1c:97:93:75:02:a6:28:e7:0c:1a:d6:f6:6b:
8e:38:44:1c:f9:a7:67:f3:95:14:c3:85:b2:51:93:94:37:29:
b0:c6:7c:ec:f7:2c:a7:ef:ab:1b:7d:19:c4:f8:a1:f1:53:f5:
5a:e8:62:b0:76:02:fb:c1:5d:f2:37:d5:b6:5d:48:13:12:e3:
be:08:14:ed:db:3c:98:e9:54:0a:83:1f:ac:20:eb:c1:66:48:
d4:95:67:15:ee:38:fb:d6:2b:2a:bf:38:1d:56:70:31:dd:6e:
b2:44:45:27:91:47:64:a8:53:ea:a0:20:c2:70:86:18:f1:48:
3f:6b:86:29:dc:88:19:3d:f3:ee:ff:75:5b:d4:e5:ec:17:70:
f3:38:69:71:73:9f:83:20:d1:a3:e1:b2:d6:66:16:8a:ad:c1:
8f:4f:fe:c7:10:84:10:99:73:fb:e5:86:1b:6e:bb:16:25:8b:
96:7b:bd:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:35:46 2025 by rpki-client