Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/khxP2jZ8U4OxXCpxQ61LEMlVzqA.mft
File: khxP2jZ8U4OxXCpxQ61LEMlVzqA.mft (raw, json)
Hash identifier: IngiZqs+5ohrHt20bCJHbo21j9cv2FgecyU06WVEqg4=
Subject key identifier: 5D:6A:AB:13:D1:17:2C:C6:F2:3B:16:D9:6D:30:89:C2:B5:1C:6D:40
Authority key identifier: 92:1C:4F:DA:36:7C:53:83:B1:5C:2A:71:43:AD:4B:10:C9:55:CE:A0
Certificate issuer: /CN=921c4fda367c5383b15c2a7143ad4b10c955cea0
Certificate serial: 01984A0A4122A4B910943D62095ABC34FB54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khxP2jZ8U4OxXCpxQ61LEMlVzqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/khxP2jZ8U4OxXCpxQ61LEMlVzqA.mft
Manifest number: 1314
Signing time: Sun 27 Jul 2025 04:00:42 +0000
Manifest this update: Sun 27 Jul 2025 04:00:42 +0000
Manifest next update: Mon 28 Jul 2025 04:00:42 +0000
Files and hashes: 1: K_0VKEBHZ8AzTGdtRKig6YmReAg.roa (hash: V6KL9KuDWKfGzsEoPpZURMCt8ttu62n0nd3Y+gExuwA=)
2: khxP2jZ8U4OxXCpxQ61LEMlVzqA.crl (hash: XHudyUo7jJtrZC4IthCzzEB4ViHX+k+UyFza801dsmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/khxP2jZ8U4OxXCpxQ61LEMlVzqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/khxP2jZ8U4OxXCpxQ61LEMlVzqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/khxP2jZ8U4OxXCpxQ61LEMlVzqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:41:22:a4:b9:10:94:3d:62:09:5a:bc:34:fb:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921c4fda367c5383b15c2a7143ad4b10c955cea0
Validity
Not Before: Jul 27 04:00:42 2025 GMT
Not After : Jul 28 04:00:42 2025 GMT
Subject: CN=5d6aab13d1172cc6f23b16d96d3089c2b51c6d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:3d:10:f9:d2:42:3c:93:63:2f:97:6f:b1:98:
d2:9d:9c:1b:24:50:0b:3f:cd:a8:0e:b2:cd:8f:d6:
dd:7f:e2:e5:00:2b:ef:c7:7d:e5:82:0a:b0:6f:06:
86:9e:16:75:e0:ae:0f:c5:95:7c:c2:e0:a7:e6:d8:
95:6c:99:a3:fd:b5:94:2e:43:1c:8c:eb:3d:4d:71:
2d:4d:3e:77:6c:e4:8a:60:15:9e:f1:2b:19:4c:59:
b4:7d:51:83:f2:a1:a2:91:0e:71:e6:03:c5:20:ab:
89:fa:74:d9:bb:a2:cd:24:6b:a7:c8:af:2c:6e:2b:
10:3e:5d:a0:8c:4b:ca:08:5f:ef:11:6d:c2:f6:4b:
f9:c2:14:68:2b:c1:9e:af:10:37:27:e8:d9:9c:90:
5b:19:0c:2c:8f:94:8e:45:ba:19:6f:e4:17:ec:7a:
69:ec:b6:42:b5:70:97:35:f6:b4:01:bd:ae:f1:74:
f3:d1:b0:78:a2:c7:5d:c2:5a:fc:e8:ec:bd:76:4c:
2c:d5:ba:b6:e9:ba:fc:c0:53:d7:d3:46:ca:6e:c3:
bc:85:b9:78:a3:0e:9d:19:24:f2:bc:bc:9e:a0:57:
fc:88:a9:df:62:c9:a7:d1:fd:5f:2a:d3:8b:dc:a3:
1b:3f:de:ec:3c:6f:79:2b:bc:1f:12:09:69:b9:7f:
28:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:6A:AB:13:D1:17:2C:C6:F2:3B:16:D9:6D:30:89:C2:B5:1C:6D:40
X509v3 Authority Key Identifier:
keyid:92:1C:4F:DA:36:7C:53:83:B1:5C:2A:71:43:AD:4B:10:C9:55:CE:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khxP2jZ8U4OxXCpxQ61LEMlVzqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/khxP2jZ8U4OxXCpxQ61LEMlVzqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/khxP2jZ8U4OxXCpxQ61LEMlVzqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:67:8c:3e:55:95:bc:ac:20:0f:77:17:dc:ce:47:bb:b7:ff:
e1:bc:82:ca:45:cb:10:ef:cf:02:c5:16:0e:d0:e9:23:4a:51:
67:6f:e2:58:f5:75:ef:00:e8:07:1d:21:cb:18:55:8e:5d:57:
ab:ff:8b:c7:b0:b8:67:ae:02:7e:20:a5:5f:f8:5e:c2:55:0c:
ab:87:83:99:24:2e:f8:88:32:21:cf:70:26:a6:15:a1:a7:12:
c9:af:27:e5:93:3e:90:e4:26:7e:16:2b:ad:0a:6e:e7:53:03:
25:1e:38:38:59:9c:82:46:35:48:46:d4:03:a8:f5:ed:96:66:
bc:89:e7:58:0f:1e:bd:aa:c6:96:86:13:5b:13:27:7e:85:bb:
41:3f:75:1c:ed:56:71:0e:4c:0e:5a:b4:0a:a7:32:66:ee:60:
ca:98:92:9f:35:a1:15:13:1c:80:23:56:5e:ce:fe:44:2b:eb:
e2:61:2e:93:94:9c:27:17:13:df:23:0f:f9:f8:73:fe:d2:7a:
ad:71:e4:e0:e9:dc:1b:db:25:a5:21:bd:59:b1:08:2d:23:8c:
83:0d:72:15:db:9a:e6:64:fa:e7:77:30:6b:38:31:50:8a:da:
c0:75:3e:50:3f:59:8d:9b:97:59:9f:a1:e6:85:d3:0c:7a:b9:
85:55:f5:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:16:13 2025 by rpki-client