Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/54e498-e629-41e8-8abc-df5f20dd76ad/1/KhmTnyGLthMV6bOzez24WWCXXRQ.mft
File: KhmTnyGLthMV6bOzez24WWCXXRQ.mft (raw, json)
Hash identifier: e5ungtzP7u7UuM/89bc0zG1uI65kFUlvKOj79KFXknc=
Subject key identifier: AE:03:41:9A:45:E4:AF:3C:38:A5:DA:2D:C0:9E:99:95:C6:BC:E3:FB
Authority key identifier: 2A:19:93:9F:21:8B:B6:13:15:E9:B3:B3:7B:3D:B8:59:60:97:5D:14
Certificate issuer: /CN=2a19939f218bb61315e9b3b37b3db85960975d14
Certificate serial: 01987306DC03020C54757EB8D2FEFD831021
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KhmTnyGLthMV6bOzez24WWCXXRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/54e498-e629-41e8-8abc-df5f20dd76ad/1/KhmTnyGLthMV6bOzez24WWCXXRQ.mft
Manifest number: 1011
Signing time: Mon 04 Aug 2025 03:01:25 +0000
Manifest this update: Mon 04 Aug 2025 03:01:25 +0000
Manifest next update: Tue 05 Aug 2025 03:01:25 +0000
Files and hashes: 1: ICnu7sUwpSSY15uEDFVsgADJKAc.roa (hash: OMIgQNcZqzMDzM+I0pk5KXUbjDdmpf89SBEO3vtX8ZE=)
2: KhmTnyGLthMV6bOzez24WWCXXRQ.crl (hash: tpoVEQ2DKqaCK64WIP7b6/1WCwdgc9YAES6lV76lyyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/54e498-e629-41e8-8abc-df5f20dd76ad/1/KhmTnyGLthMV6bOzez24WWCXXRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/54e498-e629-41e8-8abc-df5f20dd76ad/1/KhmTnyGLthMV6bOzez24WWCXXRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KhmTnyGLthMV6bOzez24WWCXXRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:dc:03:02:0c:54:75:7e:b8:d2:fe:fd:83:10:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a19939f218bb61315e9b3b37b3db85960975d14
Validity
Not Before: Aug 4 03:01:25 2025 GMT
Not After : Aug 5 03:01:25 2025 GMT
Subject: CN=ae03419a45e4af3c38a5da2dc09e9995c6bce3fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:dc:d6:f1:3b:20:13:db:f1:13:50:da:12:71:
80:4c:23:74:7a:54:3c:b1:00:8b:75:dd:ca:b7:8d:
92:4a:67:3f:66:a1:be:0e:32:b7:3a:92:79:eb:85:
75:07:cc:c2:e9:46:4f:9b:12:b8:9d:35:77:ba:1e:
e2:0c:15:4e:50:b3:03:da:21:36:72:95:00:bc:cc:
5a:9a:e4:d2:7d:c8:b9:72:65:b0:c5:30:76:75:26:
31:2c:3a:5b:90:f3:ea:94:26:91:df:d0:bb:6b:88:
f3:92:1f:7a:2c:a8:55:ea:c4:55:53:ea:27:4f:76:
ce:67:6c:e5:e7:1c:ea:a2:45:d7:ad:57:6a:3c:1f:
dc:e1:7d:4a:8e:2d:3a:21:a3:b3:76:80:e0:1b:68:
89:91:4c:29:96:1c:27:49:3a:d3:c2:ce:4b:ee:88:
5e:83:41:91:08:b2:61:49:33:eb:ba:ad:cb:f5:18:
d8:21:52:2e:ef:a9:ef:8b:43:7f:01:8d:78:8d:1c:
a2:a7:83:99:e1:0d:7d:bc:d1:d0:35:5f:54:72:8d:
d1:f2:06:3a:5a:bf:9f:20:0b:80:e5:5a:d0:b5:3d:
f0:77:77:08:72:fa:bb:d9:18:b6:41:29:fd:f5:07:
12:0b:0d:8a:88:91:d7:86:e5:70:d5:d1:7e:7b:c1:
fa:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:03:41:9A:45:E4:AF:3C:38:A5:DA:2D:C0:9E:99:95:C6:BC:E3:FB
X509v3 Authority Key Identifier:
keyid:2A:19:93:9F:21:8B:B6:13:15:E9:B3:B3:7B:3D:B8:59:60:97:5D:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KhmTnyGLthMV6bOzez24WWCXXRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/54e498-e629-41e8-8abc-df5f20dd76ad/1/KhmTnyGLthMV6bOzez24WWCXXRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/54e498-e629-41e8-8abc-df5f20dd76ad/1/KhmTnyGLthMV6bOzez24WWCXXRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:8a:fd:0b:47:d9:76:6c:5b:8b:e4:c1:10:d5:f2:27:fa:49:
eb:78:4e:43:41:bd:00:7c:79:4d:8a:cc:e2:8c:70:5c:20:28:
64:9f:07:0a:45:fe:c7:ca:a5:80:94:0a:8d:1f:e5:16:72:40:
bc:f4:6d:92:60:e6:f7:b9:d9:e8:f7:e9:1a:d6:bc:5b:c2:e2:
0b:d2:37:2c:07:a9:da:67:3e:64:46:1d:87:06:39:0a:53:6d:
d2:ff:87:5b:06:86:95:a6:af:d1:d4:a9:e3:f1:18:6d:90:69:
07:8e:80:44:32:67:f9:14:1e:33:25:b9:6a:5e:ba:d6:3f:a8:
18:62:ea:9f:2f:02:e0:2c:72:e3:dc:6a:3d:11:16:37:45:28:
73:34:2b:a5:36:10:4d:e6:0d:c6:1a:2a:4f:1c:b9:b0:d5:08:
93:1c:eb:92:8f:da:14:9d:e8:c3:f0:32:86:78:8b:80:c1:e4:
f8:62:cf:14:12:07:06:4f:b2:3f:22:15:80:78:8e:d4:42:dd:
2b:19:0f:7d:59:3e:ac:bb:4c:94:35:05:c2:f8:2c:eb:84:d9:
e8:d5:75:d1:73:a1:62:83:02:7b:84:be:1a:dc:a6:d9:24:d7:
02:bc:40:45:3b:22:c1:d6:c4:20:b0:51:92:c7:e3:6f:ab:00:
06:a0:e0:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:15:01 2025 by rpki-client