Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.mft
File: khPywtBsZLiVRXq1D8SSAoOknMc.mft (raw, json)
Hash identifier: Q71yDF11kW4vxIn+BVSWkkP+HJKNjwaFtMgA8y30MSo=
Subject key identifier: 81:E3:89:89:F9:24:82:2B:B1:EA:FE:67:90:72:B1:98:43:2A:5E:AF
Authority key identifier: 92:13:F2:C2:D0:6C:64:B8:95:45:7A:B5:0F:C4:92:02:83:A4:9C:C7
Certificate issuer: /CN=9213f2c2d06c64b895457ab50fc4920283a49cc7
Certificate serial: 01983616230D5485990C2BD680BED9239AB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khPywtBsZLiVRXq1D8SSAoOknMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.mft
Manifest number: 15FC
Signing time: Wed 23 Jul 2025 07:01:17 +0000
Manifest this update: Wed 23 Jul 2025 07:01:17 +0000
Manifest next update: Thu 24 Jul 2025 07:01:17 +0000
Files and hashes: 1: WzcaaMQRrlChBNRzpd6ejVsnjhE.roa (hash: thxrjBXbUSSC8DCWldp79G7rZSMi1abwsQ1q60K08dg=)
2: iRKQaDksCLDeAQtwp0YKQ3SovAI.roa (hash: wixldrtyd3fdUQpeC4X4fRGfwA4fNIJXJhW2tQSWdew=)
3: khPywtBsZLiVRXq1D8SSAoOknMc.crl (hash: WybcVsEsuAi2Gn95t35cLV7yOyEawgB9f8cvMYkKhwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/khPywtBsZLiVRXq1D8SSAoOknMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:36:16:23:0d:54:85:99:0c:2b:d6:80:be:d9:23:9a:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9213f2c2d06c64b895457ab50fc4920283a49cc7
Validity
Not Before: Jul 23 07:01:17 2025 GMT
Not After : Jul 24 07:01:17 2025 GMT
Subject: CN=81e38989f924822bb1eafe679072b198432a5eaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6d:8f:82:0a:c2:56:db:15:55:9a:06:df:1b:
82:de:e9:ad:ce:41:24:d3:08:b5:71:4e:82:ac:7b:
3c:5b:91:49:de:97:d4:0f:51:b9:6b:9d:d4:ef:bb:
34:08:c6:eb:52:d6:25:88:49:84:64:31:8e:31:61:
7e:78:5f:a9:b5:57:a5:07:c2:58:29:1c:e9:db:e2:
68:c7:06:18:b3:66:fe:b7:7b:53:69:0b:29:af:3e:
61:76:e3:a8:3c:41:01:29:60:82:08:b0:f0:2e:2b:
9d:c8:ac:5c:f2:5a:69:ed:a5:38:33:78:0b:fa:35:
20:55:8d:5b:83:08:3f:7a:16:f4:19:93:be:0b:0d:
2d:6a:d3:46:42:24:8e:1c:3f:71:4a:b3:91:90:15:
57:45:86:2a:4b:59:e1:3f:b3:cf:52:26:56:16:69:
29:29:6a:f8:06:b9:91:67:9a:64:73:64:69:13:bb:
6f:fb:db:5f:96:7f:7b:93:03:92:1f:f7:f5:dc:c6:
22:ca:41:8f:90:1b:e8:69:74:2d:62:a8:57:ef:2c:
9e:1d:ac:9b:ae:7a:51:58:6e:96:2b:81:60:18:b4:
e4:30:94:4d:a2:45:10:fd:52:6e:55:62:95:e3:3e:
dc:34:a3:f6:ff:6f:b6:c9:85:fc:5f:3d:45:d0:b1:
65:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:E3:89:89:F9:24:82:2B:B1:EA:FE:67:90:72:B1:98:43:2A:5E:AF
X509v3 Authority Key Identifier:
keyid:92:13:F2:C2:D0:6C:64:B8:95:45:7A:B5:0F:C4:92:02:83:A4:9C:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khPywtBsZLiVRXq1D8SSAoOknMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:cc:1f:db:46:3e:5f:94:f3:c1:d6:86:a4:de:8e:dc:b1:ad:
05:51:40:8a:5b:51:40:89:d4:82:e1:a1:09:58:70:43:c3:e5:
45:e2:bc:ab:dc:3d:a1:b4:34:18:67:7e:9b:50:5e:bb:fe:43:
75:0b:9e:3d:83:51:c8:a6:21:10:34:e3:17:cf:58:b4:8e:1f:
97:d6:d3:fa:ee:64:b2:68:48:ac:2a:3f:34:cc:ff:87:bb:fc:
37:da:13:85:bd:a3:3d:9a:5b:0b:e0:ba:fa:33:03:89:7a:fd:
ca:c3:32:95:9f:62:30:9e:46:64:0d:21:1a:c7:08:30:b7:9f:
3e:fa:38:4b:f5:23:04:9a:4a:50:7f:9d:8a:63:03:26:ce:d6:
d5:56:ba:36:9d:01:c9:e6:dc:86:ca:be:70:54:ea:fe:12:b2:
d1:49:1c:e6:94:1a:5c:db:fb:ef:16:34:be:22:ca:ae:27:ec:
4f:fd:ef:94:ef:ba:ea:21:c9:a5:c1:08:37:b0:01:be:5b:a4:
e3:02:8f:fe:e5:a5:c0:9b:33:a0:33:12:5f:08:ed:ad:ae:b1:
8d:10:5e:33:92:49:de:22:08:36:84:5c:5c:8d:0f:6e:25:b5:
63:33:f3:44:0e:f9:a6:a1:82:de:fa:71:a7:8c:82:c8:75:d4:
e8:7d:48:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:24:00 2025 by rpki-client