Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
File: KhLvrumX6adjtGCrWS3dpnoN63A.mft (raw, json)
Hash identifier: dKHMap2+NKXlEC1gPmEeh5zjDmAN/rP6Cx9KFhJPLmk=
Subject key identifier: DD:E0:4B:E6:29:A4:C0:DE:5B:DC:9E:6C:A0:45:FD:80:6C:27:C9:74
Authority key identifier: 2A:12:EF:AE:E9:97:E9:A7:63:B4:60:AB:59:2D:DD:A6:7A:0D:EB:70
Certificate issuer: /CN=2a12efaee997e9a763b460ab592ddda67a0deb70
Certificate serial: 01984BC20B751C70B2616D477F40DBE34649
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KhLvrumX6adjtGCrWS3dpnoN63A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
Manifest number: 01E6
Signing time: Sun 27 Jul 2025 12:01:04 +0000
Manifest this update: Sun 27 Jul 2025 12:01:04 +0000
Manifest next update: Mon 28 Jul 2025 12:01:04 +0000
Files and hashes: 1: 8u9hb0S_4Uuo5fYUwLVSXZK5rxM.roa (hash: 6iQilpXzVprtaKFu2A9AhzRE5Pgx6o9DaMAB494sBrc=)
2: KhLvrumX6adjtGCrWS3dpnoN63A.crl (hash: cybo6WkceL8222lvwWNVy/u0+27WyvXlC9IB8lnLzfc=)
3: SccPUBWuljMHYcMk3K5QOdOVb6g.roa (hash: uBtJ4Y5vGvXPCHheXT9gg13uzVBy/aYh9vF63HwlhDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
rsync://rpki.ripe.net/repository/DEFAULT/KhLvrumX6adjtGCrWS3dpnoN63A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:c2:0b:75:1c:70:b2:61:6d:47:7f:40:db:e3:46:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a12efaee997e9a763b460ab592ddda67a0deb70
Validity
Not Before: Jul 27 12:01:04 2025 GMT
Not After : Jul 28 12:01:04 2025 GMT
Subject: CN=dde04be629a4c0de5bdc9e6ca045fd806c27c974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4e:92:ea:d5:25:55:3f:96:37:9a:a6:2b:38:
af:11:a0:78:b5:a0:28:37:1b:43:5b:3c:42:44:ca:
4c:4c:3c:c2:7f:03:04:09:24:c4:b7:c5:57:ca:88:
33:41:3f:97:84:b5:e1:cd:91:68:d4:aa:3e:80:55:
59:b1:ad:b8:e5:c9:21:67:c0:e7:93:26:86:ec:2b:
26:5f:a9:95:61:91:b8:49:e7:0f:61:fa:99:fc:c7:
93:30:c1:17:d4:2b:62:39:92:e0:72:ae:2d:7c:f5:
1c:8b:c7:80:42:18:2b:28:ec:a0:8b:6b:49:c8:3f:
f6:b5:3d:d2:c5:0d:e9:29:d2:66:f6:0f:a5:d6:ad:
50:41:c2:d4:a1:f2:86:d9:33:cf:d2:29:18:58:f8:
36:07:40:73:6d:bb:e0:d2:1f:52:3e:35:9c:8b:25:
a8:df:60:ea:0f:58:79:3b:b2:2a:07:38:05:6a:60:
43:91:2e:bf:f4:5e:1c:75:cb:1b:37:65:f1:fe:4a:
f4:cc:30:b2:8b:a8:e6:60:9c:c5:84:6c:41:ce:43:
6e:6f:41:23:1d:1e:dd:fc:a9:f6:31:38:10:91:ca:
00:4c:a1:77:67:59:2e:39:30:ac:49:ff:77:fa:f3:
42:eb:99:fe:ee:db:55:50:1d:b2:42:70:bd:ca:a4:
f8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E0:4B:E6:29:A4:C0:DE:5B:DC:9E:6C:A0:45:FD:80:6C:27:C9:74
X509v3 Authority Key Identifier:
keyid:2A:12:EF:AE:E9:97:E9:A7:63:B4:60:AB:59:2D:DD:A6:7A:0D:EB:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KhLvrumX6adjtGCrWS3dpnoN63A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:01:a0:7e:ed:bc:87:c2:1f:36:63:aa:b8:0f:0e:f3:a3:b8:
b5:83:d0:ef:12:50:61:e7:a0:c2:f4:a6:14:dc:98:d8:4b:30:
e8:d2:11:a9:eb:76:cb:e6:e8:b8:3f:9a:f6:24:59:ee:5f:1e:
6f:3a:53:3d:40:a9:fb:70:71:26:f5:53:f3:f1:94:e9:ae:51:
ae:ff:79:55:41:ba:4c:22:f5:73:ed:26:93:87:d5:6c:3f:af:
58:a5:d3:07:a1:45:e2:c6:22:66:79:80:89:6a:a8:28:52:6b:
a7:be:30:8e:aa:8b:e4:f8:3c:5d:b4:b9:ce:b7:4a:ef:60:4b:
74:81:6b:d6:c1:e1:43:51:6c:b3:4c:96:75:7d:02:ab:50:b8:
3b:16:12:23:fd:6a:5f:d6:75:3e:7b:39:b7:7d:97:94:a4:db:
b9:2c:73:2a:59:8a:7d:59:83:3e:69:eb:62:38:21:a9:3b:54:
1a:85:57:5d:38:37:11:70:ea:b3:9f:ea:ef:ff:29:09:b0:d0:
39:1a:5e:39:db:aa:98:2b:42:0a:83:6c:cd:4a:91:f3:de:8c:
0c:1f:ca:74:9f:70:4d:13:ed:e4:24:b7:c6:71:56:32:e1:7c:
b9:27:93:5c:f8:82:38:64:2e:f3:95:aa:1f:9b:6c:04:20:ed:
33:8e:7f:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhLwgt1HHCyYW1Hf0Db40ZJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhMTJlZmFlZTk5N2U5YTc2M2I0NjBhYjU5MmRkZGE2N2Ew
ZGViNzAwHhcNMjUwNzI3MTIwMTA0WhcNMjUwNzI4MTIwMTA0WjAzMTEwLwYDVQQD
EyhkZGUwNGJlNjI5YTRjMGRlNWJkYzllNmNhMDQ1ZmQ4MDZjMjdjOTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxU6S6tUlVT+WN5qmKzivEaB4taAo
NxtDWzxCRMpMTDzCfwMECSTEt8VXyogzQT+XhLXhzZFo1Ko+gFVZsa245ckhZ8Dn
kyaG7CsmX6mVYZG4SecPYfqZ/MeTMMEX1CtiOZLgcq4tfPUci8eAQhgrKOygi2tJ
yD/2tT3SxQ3pKdJm9g+l1q1QQcLUofKG2TPP0ikYWPg2B0Bzbbvg0h9SPjWciyWo
32DqD1h5O7IqBzgFamBDkS6/9F4cdcsbN2Xx/kr0zDCyi6jmYJzFhGxBzkNub0Ej
HR7d/Kn2MTgQkcoATKF3Z1kuOTCsSf93+vNC65n+7ttVUB2yQnC9yqT44wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN3gS+YppMDeW9yebKBF/YBsJ8l0MB8GA1UdIwQY
MBaAFCoS767pl+mnY7Rgq1kt3aZ6DetwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2hMdnJ1bVg2YWRqdEdDcldTM2Rwbm9ONjNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny82ZmY0M2ItMjdhYi00MDY0LWFmMWQt
MDllZDc4MDBmZGZiLzEvS2hMdnJ1bVg2YWRqdEdDcldTM2Rwbm9ONjNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny82ZmY0M2ItMjdhYi00MDY0LWFmMWQtMDllZDc4MDBmZGZi
LzEvS2hMdnJ1bVg2YWRqdEdDcldTM2Rwbm9ONjNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfgGgfu28
h8IfNmOquA8O86O4tYPQ7xJQYeegwvSmFNyY2Esw6NIRqet2y+bouD+a9iRZ7l8e
bzpTPUCp+3BxJvVT8/GU6a5Rrv95VUG6TCL1c+0mk4fVbD+vWKXTB6FF4sYiZnmA
iWqoKFJrp74wjqqL5Pg8XbS5zrdK72BLdIFr1sHhQ1Fss0yWdX0Cq1C4OxYSI/1q
X9Z1Pns5t32XlKTbuSxzKlmKfVmDPmnrYjghqTtUGoVXXTg3EXDqs5/q7/8pCbDQ
ORpeOduqmCtCCoNszUqR896MDB/KdJ9wTRPt5CS3xnFWMuF8uSeTXPiCOGQu85Wq
H5tsBCDtM45/UQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 15:04:08 2025 by rpki-client