Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/54e498-e629-41e8-8abc-df5f20dd76ad/1/KhmTnyGLthMV6bOzez24WWCXXRQ.mft
File: KhmTnyGLthMV6bOzez24WWCXXRQ.mft (raw, json)
Hash identifier: eoYn4gBbNkzJOhEpnRn4gw2si2KPJa2CgkTPngtzuPs=
Subject key identifier: F7:0F:C4:A3:F1:8F:56:67:49:F4:95:BE:85:95:CC:1D:FC:A9:8F:4A
Authority key identifier: 2A:19:93:9F:21:8B:B6:13:15:E9:B3:B3:7B:3D:B8:59:60:97:5D:14
Certificate issuer: /CN=2a19939f218bb61315e9b3b37b3db85960975d14
Certificate serial: 019A53E3F8C2919F4D8D8BA32B0172151B36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KhmTnyGLthMV6bOzez24WWCXXRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/54e498-e629-41e8-8abc-df5f20dd76ad/1/KhmTnyGLthMV6bOzez24WWCXXRQ.mft
Manifest number: 110A
Signing time: Wed 05 Nov 2025 12:00:40 +0000
Manifest this update: Wed 05 Nov 2025 12:00:40 +0000
Manifest next update: Thu 06 Nov 2025 12:00:40 +0000
Files and hashes: 1: ICnu7sUwpSSY15uEDFVsgADJKAc.roa (hash: OMIgQNcZqzMDzM+I0pk5KXUbjDdmpf89SBEO3vtX8ZE=)
2: KhmTnyGLthMV6bOzez24WWCXXRQ.crl (hash: syEgUS3f0NhFrux0ggMQNvkUmrGXrl8AIV8oa9bSbrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/54e498-e629-41e8-8abc-df5f20dd76ad/1/KhmTnyGLthMV6bOzez24WWCXXRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/54e498-e629-41e8-8abc-df5f20dd76ad/1/KhmTnyGLthMV6bOzez24WWCXXRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KhmTnyGLthMV6bOzez24WWCXXRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:e3:f8:c2:91:9f:4d:8d:8b:a3:2b:01:72:15:1b:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a19939f218bb61315e9b3b37b3db85960975d14
Validity
Not Before: Nov 5 12:00:40 2025 GMT
Not After : Nov 6 12:00:40 2025 GMT
Subject: CN=f70fc4a3f18f566749f495be8595cc1dfca98f4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a0:e5:aa:b1:a0:e8:2d:b2:f2:de:67:0c:94:
65:58:24:42:e3:5b:97:a5:2b:63:30:f0:88:9c:ff:
3d:0e:77:2c:76:22:1d:2f:ca:24:20:e4:18:d0:71:
08:77:1a:5c:4d:7b:67:9f:6a:23:1c:e3:6b:5b:24:
fa:fd:03:0a:08:e2:2b:55:02:8a:9d:4d:4d:46:8c:
dd:27:9b:73:5a:b6:cd:b8:24:6d:7c:14:a3:cc:69:
25:09:0b:ce:af:fc:72:93:a0:70:45:78:6b:08:5c:
a9:14:ef:c4:66:a5:a3:66:23:d1:f1:00:c8:a7:85:
3a:e9:0d:ac:a8:79:68:cf:17:53:f8:12:5d:51:60:
b3:53:1b:f3:8d:c4:22:fe:d4:9f:9e:b4:85:27:bf:
e0:15:5c:7f:8c:86:53:4f:26:a8:6e:22:bc:50:41:
82:cd:8c:b2:47:9d:e6:e1:36:ae:d4:c0:64:06:35:
ca:a0:42:e6:b4:16:92:25:b2:a2:75:1a:0a:41:83:
8d:a7:c3:00:d7:44:68:f9:95:a0:36:f9:39:cd:f5:
e6:4b:09:70:b1:6b:b2:a0:1a:f0:aa:34:cc:58:8b:
e3:db:91:91:1b:81:72:19:58:96:b8:99:ba:2e:d6:
b4:f7:b2:bd:45:52:cb:86:a7:3e:21:8f:9f:47:1c:
ea:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:0F:C4:A3:F1:8F:56:67:49:F4:95:BE:85:95:CC:1D:FC:A9:8F:4A
X509v3 Authority Key Identifier:
keyid:2A:19:93:9F:21:8B:B6:13:15:E9:B3:B3:7B:3D:B8:59:60:97:5D:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KhmTnyGLthMV6bOzez24WWCXXRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/54e498-e629-41e8-8abc-df5f20dd76ad/1/KhmTnyGLthMV6bOzez24WWCXXRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/54e498-e629-41e8-8abc-df5f20dd76ad/1/KhmTnyGLthMV6bOzez24WWCXXRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:b2:dd:d4:c9:56:86:85:eb:68:25:7f:06:db:97:e6:ea:a8:
45:4c:ee:25:87:4c:b0:eb:f1:3f:9c:f5:b2:33:c5:28:00:22:
1b:15:0e:8e:ad:f3:10:d3:56:cf:ba:6b:19:ab:ac:d6:4c:53:
07:46:10:44:01:98:6d:9b:a0:d6:51:18:d0:e2:c5:b0:8e:3f:
aa:9e:ec:48:cb:b6:a1:d7:a2:ec:6c:e3:4a:94:86:1b:ed:a9:
29:4c:89:4a:1b:ad:0e:c4:91:db:7a:af:da:c7:ea:0d:d7:61:
fa:3a:73:63:8b:56:19:81:6f:44:d9:f5:04:78:fe:f2:a2:c7:
a0:42:43:4a:84:fe:01:98:9d:7c:96:fc:ad:96:aa:bc:9f:59:
f7:14:d8:2d:38:d2:b8:80:ad:74:de:b5:62:41:86:65:09:3b:
8a:54:7e:05:6c:ba:02:9d:cf:63:4d:9a:01:78:06:33:68:49:
fe:2d:ff:df:51:ca:59:64:f8:1b:8d:8c:87:e3:58:93:ec:a4:
88:d6:a6:14:d6:3f:fb:ad:e7:d5:35:7d:64:03:6d:12:f3:ee:
d6:60:b0:23:b2:02:b8:1f:b3:b8:64:a2:cb:57:84:5e:ed:b7:
8c:79:23:97:8d:f6:29:62:c7:e5:2c:d3:7a:6e:9a:6e:f1:35:
4c:ff:da:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:45:30 2025 by rpki-client