Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/46e223-6d23-4795-9525-bc877ce9061a/1/khjNJev3TLGwBLAe5QVQP_8kbWE.mft
File: khjNJev3TLGwBLAe5QVQP_8kbWE.mft (raw, json)
Hash identifier: gZ9z8LPiOiSfBHKHflbR1LG6GSfoU9aJCKa8C9RftTI=
Subject key identifier: 3B:27:54:AB:31:B5:9B:3D:1A:18:46:56:D5:DA:9E:ED:5B:DF:B4:D2
Authority key identifier: 92:18:CD:25:EB:F7:4C:B1:B0:04:B0:1E:E5:05:50:3F:FF:24:6D:61
Certificate issuer: /CN=9218cd25ebf74cb1b004b01ee505503fff246d61
Certificate serial: 0198496619173BF192AA4D2156107A9FA172
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khjNJev3TLGwBLAe5QVQP_8kbWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/46e223-6d23-4795-9525-bc877ce9061a/1/khjNJev3TLGwBLAe5QVQP_8kbWE.mft
Manifest number: 0438
Signing time: Sun 27 Jul 2025 01:01:24 +0000
Manifest this update: Sun 27 Jul 2025 01:01:24 +0000
Manifest next update: Mon 28 Jul 2025 01:01:24 +0000
Files and hashes: 1: TrlRH64mTqxgPbbyg2lJDlsMeB0.roa (hash: Ar7RtZkoApHXI4MhYkDHCkz8Varr+3EYOSwaeqk+kiE=)
2: eWQbNDk7Bizpa1HJwWi556Oud3s.roa (hash: PwNs4nRmZS0NVFzVnjZatxVrXUe/B08COyWu1QU2ZLs=)
3: khjNJev3TLGwBLAe5QVQP_8kbWE.crl (hash: DKU7Dg4qil8qkJwlJ0K9qgefaiuGvNRbiRq9aYt5lYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/46e223-6d23-4795-9525-bc877ce9061a/1/khjNJev3TLGwBLAe5QVQP_8kbWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/46e223-6d23-4795-9525-bc877ce9061a/1/khjNJev3TLGwBLAe5QVQP_8kbWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/khjNJev3TLGwBLAe5QVQP_8kbWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:19:17:3b:f1:92:aa:4d:21:56:10:7a:9f:a1:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9218cd25ebf74cb1b004b01ee505503fff246d61
Validity
Not Before: Jul 27 01:01:24 2025 GMT
Not After : Jul 28 01:01:24 2025 GMT
Subject: CN=3b2754ab31b59b3d1a184656d5da9eed5bdfb4d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:e0:8a:78:d0:4e:8a:53:44:53:0e:06:0d:95:
f8:91:68:dd:52:b0:82:59:cf:c0:bd:91:81:a1:4b:
ad:0a:33:34:61:b1:af:f8:a5:de:8b:87:c7:e4:a1:
1c:eb:ee:b3:8e:dd:75:d0:87:3e:41:2d:ca:5c:9b:
19:b9:af:44:de:35:c1:42:8e:81:9e:5d:90:5f:50:
ca:75:35:68:2d:a6:59:f3:ec:94:f6:80:3e:83:ae:
f3:f5:14:c6:f1:d0:87:81:da:f6:42:12:f6:5a:70:
48:47:09:c9:11:db:fa:f3:28:6c:3c:ff:e5:4c:5d:
22:8f:0d:7b:32:20:8b:3c:f7:36:a6:b8:79:00:1e:
a5:d0:94:62:af:11:b1:76:8a:a5:2e:b1:1a:17:23:
1c:f8:af:a4:3d:e3:2c:51:f4:60:91:e5:fe:26:a1:
b5:9f:52:83:a1:69:4a:bf:ee:8f:f1:a1:ba:bd:8f:
a9:75:55:22:82:99:07:7a:e4:9c:77:ab:49:bd:e5:
97:7f:68:8d:6b:5f:83:0c:f9:7d:04:8e:27:6e:3a:
e0:f9:a3:df:b9:d1:50:e5:34:d9:91:d2:55:94:0a:
78:fd:d0:bf:a8:48:ec:a1:2c:d4:27:77:05:4d:bf:
2e:17:cf:58:0c:05:5b:53:f5:90:4a:70:66:2b:86:
0a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:27:54:AB:31:B5:9B:3D:1A:18:46:56:D5:DA:9E:ED:5B:DF:B4:D2
X509v3 Authority Key Identifier:
keyid:92:18:CD:25:EB:F7:4C:B1:B0:04:B0:1E:E5:05:50:3F:FF:24:6D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khjNJev3TLGwBLAe5QVQP_8kbWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/46e223-6d23-4795-9525-bc877ce9061a/1/khjNJev3TLGwBLAe5QVQP_8kbWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/46e223-6d23-4795-9525-bc877ce9061a/1/khjNJev3TLGwBLAe5QVQP_8kbWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:63:5b:da:ee:c5:6a:eb:77:dc:fe:19:0d:38:31:30:9b:06:
04:54:9b:c0:fe:0f:b7:65:50:1f:e0:3c:1a:66:3d:45:d4:c7:
6e:57:e1:ec:f7:2c:ad:d7:cc:a0:b6:35:00:ca:16:b2:8f:f9:
9f:81:18:3b:ec:4f:f2:7c:66:6c:02:bb:54:97:0c:67:82:2f:
6f:94:f2:c6:d8:1a:b4:82:04:6b:e3:20:40:05:de:45:0f:84:
59:79:42:90:ba:84:dc:61:cb:df:b4:13:1a:bc:ab:79:e3:01:
6f:a8:65:22:5c:f7:aa:44:67:f7:07:5d:0f:90:b1:c3:e6:34:
5e:6e:8a:56:b8:ee:90:d6:55:ac:4d:2e:b9:bd:59:f8:0b:68:
35:37:9e:ce:d2:6c:94:00:1b:9b:a3:ae:5c:f2:a5:cd:29:78:
23:a5:41:b7:4e:fa:0a:01:92:ae:aa:36:d7:d6:04:73:64:cf:
7b:47:b9:13:3a:10:aa:8d:1c:76:eb:66:b2:59:7a:15:96:13:
ff:cb:c3:68:91:a0:78:b4:75:cc:db:98:0b:d1:cb:77:fb:3a:
a7:ff:ce:41:e0:71:e4:0a:87:25:9c:0f:7c:7c:da:b1:00:b6:
50:80:05:f5:25:cf:4b:62:3e:77:1e:ab:2b:a2:cb:c9:4f:65:
cc:a2:63:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:10:26 2025 by rpki-client