Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/569574-441e-415b-803f-54bd649b4852/1/KhQFaUht0XjbWDoKHklt8iMYXTU.mft
File: KhQFaUht0XjbWDoKHklt8iMYXTU.mft (raw, json)
Hash identifier: kRO4yjU79snziE3aaEyBDE/IJ5teYuBgfrDOfEtQotU=
Subject key identifier: F4:BC:28:63:BA:EC:9B:D9:BF:45:F8:CF:AC:7C:6C:CD:30:BC:F4:8D
Authority key identifier: 2A:14:05:69:48:6D:D1:78:DB:58:3A:0A:1E:49:6D:F2:23:18:5D:35
Certificate issuer: /CN=2a140569486dd178db583a0a1e496df223185d35
Certificate serial: 019849D36A3469C8163ED250B6FFDD5E5E1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KhQFaUht0XjbWDoKHklt8iMYXTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/569574-441e-415b-803f-54bd649b4852/1/KhQFaUht0XjbWDoKHklt8iMYXTU.mft
Manifest number: 0847
Signing time: Sun 27 Jul 2025 03:00:48 +0000
Manifest this update: Sun 27 Jul 2025 03:00:48 +0000
Manifest next update: Mon 28 Jul 2025 03:00:48 +0000
Files and hashes: 1: KhQFaUht0XjbWDoKHklt8iMYXTU.crl (hash: dexa1uX1TYl1d5qWqiC9Q0T77lpW3KJ1K3NGXrXRRwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/569574-441e-415b-803f-54bd649b4852/1/KhQFaUht0XjbWDoKHklt8iMYXTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/569574-441e-415b-803f-54bd649b4852/1/KhQFaUht0XjbWDoKHklt8iMYXTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KhQFaUht0XjbWDoKHklt8iMYXTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:6a:34:69:c8:16:3e:d2:50:b6:ff:dd:5e:5e:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a140569486dd178db583a0a1e496df223185d35
Validity
Not Before: Jul 27 03:00:48 2025 GMT
Not After : Jul 28 03:00:48 2025 GMT
Subject: CN=f4bc2863baec9bd9bf45f8cfac7c6ccd30bcf48d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6d:37:c4:9f:50:89:c0:46:76:67:79:72:fe:
ea:a4:a9:e4:96:3f:57:37:37:0b:d1:85:ef:8c:22:
f0:bd:30:bd:11:33:e6:f2:95:b4:45:0f:31:70:33:
24:1c:86:f8:59:cf:ed:b2:85:9f:9e:1f:ce:4d:a1:
19:3f:e6:95:fe:39:30:9b:7e:ef:78:c4:76:99:00:
f0:77:42:41:80:39:5d:c1:c8:88:de:89:2c:1a:78:
42:d6:17:7a:b8:be:1e:26:6c:56:bc:db:33:4b:9d:
06:ba:26:52:fb:12:c8:b9:31:f5:b2:52:65:85:d0:
f1:b1:69:fc:3f:2c:22:e5:04:2c:b3:6c:4d:f3:67:
7a:27:4d:5c:6e:ac:5a:25:e1:3a:b9:c3:d0:d9:2c:
27:e0:42:e6:94:1f:1b:a9:79:40:a7:ec:4b:83:31:
7e:3b:39:90:a7:0a:f9:df:17:6e:bc:1d:79:59:03:
4c:97:c0:f4:46:74:3b:c8:b5:53:b6:60:a3:fa:d9:
8f:c0:fb:59:15:c5:2a:32:c9:1d:8c:fc:a6:ce:d1:
14:0d:1c:9a:89:e2:eb:bd:3c:62:13:ff:b2:34:c9:
cc:13:1e:43:04:7b:f0:14:3a:aa:14:5a:4a:2c:01:
88:6b:6c:30:38:ac:ba:7b:ac:ec:47:61:2b:70:ae:
0b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:BC:28:63:BA:EC:9B:D9:BF:45:F8:CF:AC:7C:6C:CD:30:BC:F4:8D
X509v3 Authority Key Identifier:
keyid:2A:14:05:69:48:6D:D1:78:DB:58:3A:0A:1E:49:6D:F2:23:18:5D:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KhQFaUht0XjbWDoKHklt8iMYXTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/569574-441e-415b-803f-54bd649b4852/1/KhQFaUht0XjbWDoKHklt8iMYXTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/569574-441e-415b-803f-54bd649b4852/1/KhQFaUht0XjbWDoKHklt8iMYXTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:6d:59:56:e6:9a:fc:02:50:aa:1e:3e:32:da:4a:57:0e:c4:
04:4a:4e:c0:b2:46:8f:08:05:f9:81:85:25:36:e1:8b:6e:ae:
99:62:68:46:c7:e0:b6:1f:ea:b5:4c:12:3b:51:d8:f2:1a:d4:
f2:28:30:3c:d9:f7:ea:dc:b2:8f:6b:49:5f:2f:b6:d6:c4:77:
a4:41:4f:21:90:76:4f:a1:44:9d:81:12:56:4c:a6:30:c6:19:
36:0f:07:ea:40:dd:e2:07:8b:b1:5e:f0:6d:71:41:27:26:49:
35:d2:ec:b7:4b:ae:61:22:48:3e:81:26:6f:5c:4a:90:64:1a:
bf:16:70:4e:94:22:1d:e9:02:60:d1:6f:30:d0:2a:f9:18:d3:
0a:27:54:73:f6:5b:f0:56:43:2d:e5:5b:4c:70:e7:1a:1a:b5:
2e:75:30:1d:c0:09:ac:b1:28:8d:10:1b:eb:2a:e0:6c:54:d7:
bd:ad:77:01:f7:fc:ab:41:ad:4f:b4:51:d3:8b:24:2c:ca:42:
ef:15:33:97:e8:e8:8d:0f:1b:b8:d9:3c:1a:aa:60:54:be:97:
b8:81:fa:98:73:e2:96:d3:1d:0f:71:45:64:a4:cb:09:79:1d:
bd:ae:da:85:c0:dd:7b:48:f4:5d:40:75:9a:09:e6:a5:b8:25:
88:e3:ff:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:25:52 2025 by rpki-client