Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/66a439-cf33-47c5-92ab-80b5118abaf6/1/KhfSVHdMl6nGhansXSTy_GlomQg.mft
File: KhfSVHdMl6nGhansXSTy_GlomQg.mft (raw, json)
Hash identifier: AbM7V0MaVLd3m7Xv4vM0UwVFi3sRTXwHs3KvNLH7ttc=
Subject key identifier: 8A:54:A6:CF:73:38:DF:0E:AE:33:A9:70:C6:A3:D5:31:53:E1:FB:79
Authority key identifier: 2A:17:D2:54:77:4C:97:A9:C6:85:A9:EC:5D:24:F2:FC:69:68:99:08
Certificate issuer: /CN=2a17d254774c97a9c685a9ec5d24f2fc69689908
Certificate serial: 01988C58A9B6DDED0C8FD256D994203654F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KhfSVHdMl6nGhansXSTy_GlomQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/66a439-cf33-47c5-92ab-80b5118abaf6/1/KhfSVHdMl6nGhansXSTy_GlomQg.mft
Manifest number: 135F
Signing time: Sat 09 Aug 2025 01:01:17 +0000
Manifest this update: Sat 09 Aug 2025 01:01:17 +0000
Manifest next update: Sun 10 Aug 2025 01:01:17 +0000
Files and hashes: 1: 1ibpJfSu5zvmElDRsm3yBPA2Psc.roa (hash: fl2TXrWlprslHDoqKeFpyUnoLUsON1oTzkxdU0IwAjQ=)
2: KhfSVHdMl6nGhansXSTy_GlomQg.crl (hash: Bm2zKHIwo0X5RpEnyjHEzAbavyhreX8nQIWCkSWIq1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/66a439-cf33-47c5-92ab-80b5118abaf6/1/KhfSVHdMl6nGhansXSTy_GlomQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/66a439-cf33-47c5-92ab-80b5118abaf6/1/KhfSVHdMl6nGhansXSTy_GlomQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KhfSVHdMl6nGhansXSTy_GlomQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 01:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:58:a9:b6:dd:ed:0c:8f:d2:56:d9:94:20:36:54:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a17d254774c97a9c685a9ec5d24f2fc69689908
Validity
Not Before: Aug 9 01:01:17 2025 GMT
Not After : Aug 10 01:01:17 2025 GMT
Subject: CN=8a54a6cf7338df0eae33a970c6a3d53153e1fb79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d9:2e:63:a0:82:3b:fc:97:2f:02:99:d8:60:
0c:96:9a:35:d5:0a:bf:8a:7c:1f:83:69:38:4c:ed:
f9:e9:af:1e:b1:5f:45:cd:85:51:14:48:65:31:33:
c5:01:a4:6c:ba:27:b9:d3:90:37:d7:5a:9d:54:78:
b0:7f:02:92:15:bb:f4:f7:13:81:19:ad:0d:ed:ab:
fb:9e:17:d4:9e:55:89:10:3c:60:02:42:f8:49:f9:
d5:24:2b:64:e5:8a:4e:58:92:3a:a3:e9:42:19:29:
b3:1e:27:87:6a:e1:f3:93:e9:df:6c:2b:1a:6d:a2:
c4:63:fe:5f:b7:dd:54:59:14:00:88:cf:a3:4b:c3:
c5:a8:7f:4c:a5:1e:c3:ff:78:70:c6:6a:e6:de:84:
36:61:e1:c4:ae:9d:7a:51:e4:5f:ce:3c:a4:f9:8a:
92:16:76:e5:9b:be:6b:42:ca:d6:97:63:30:e4:65:
cf:01:2b:db:06:2f:07:f1:dc:b8:cc:2d:d4:65:d3:
92:44:c2:ef:2d:98:1c:c1:3f:d8:0e:41:19:00:82:
6b:f6:a8:5b:70:9e:95:36:c8:d9:db:72:88:70:a7:
95:cc:35:49:c5:df:06:cb:fc:eb:00:8a:f0:66:42:
7c:3b:af:d0:4b:14:32:4a:cf:01:92:3a:52:c4:54:
f3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:54:A6:CF:73:38:DF:0E:AE:33:A9:70:C6:A3:D5:31:53:E1:FB:79
X509v3 Authority Key Identifier:
keyid:2A:17:D2:54:77:4C:97:A9:C6:85:A9:EC:5D:24:F2:FC:69:68:99:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KhfSVHdMl6nGhansXSTy_GlomQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/66a439-cf33-47c5-92ab-80b5118abaf6/1/KhfSVHdMl6nGhansXSTy_GlomQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/66a439-cf33-47c5-92ab-80b5118abaf6/1/KhfSVHdMl6nGhansXSTy_GlomQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:a8:b6:d1:6b:18:87:4c:9d:69:29:2b:31:0c:34:88:58:a1:
22:91:fb:9d:e9:14:ad:5b:6f:c6:80:1e:98:da:e0:ab:da:d1:
07:2e:d7:9d:f1:94:4b:c8:f1:55:71:d5:bf:c1:c2:7f:d9:0e:
a5:41:2b:76:a5:19:19:d8:b8:de:7a:d2:dd:ce:40:f4:e0:c7:
a9:70:ec:2f:c6:5b:1f:bd:44:55:a2:7c:1a:53:19:f2:be:7f:
3b:ca:c9:8d:5f:b3:8e:a5:22:4e:36:ea:9b:c7:38:dd:9d:82:
f6:d2:d8:2f:ae:b7:9e:bd:cb:ef:bf:e8:e6:53:d0:53:a1:98:
2f:b2:e0:35:f4:2b:0e:7a:d0:ea:af:53:5f:62:7a:08:8e:65:
8a:2a:bc:14:52:e5:bb:d6:c5:26:b0:ff:db:df:08:06:05:f2:
9b:e2:88:8f:97:45:85:d8:c2:a2:b0:28:33:68:e7:10:a9:f5:
54:d0:15:5b:60:37:70:41:55:3a:71:df:3a:34:1d:c1:f1:51:
43:56:91:27:b7:2f:a0:48:61:a7:f8:2c:3e:70:2e:ac:06:81:
1e:65:85:f2:55:a6:7f:63:ff:b7:9a:8a:5c:34:78:df:2a:6a:
c3:2d:03:6f:7b:a2:69:fe:52:20:9c:66:0b:94:5d:6e:4c:7e:
b8:29:0e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:32:53 2025 by rpki-client