Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
File: Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft (raw, json)
Hash identifier: N5BESmGBBOnt9BOteBy0hcARIKD2ekH+q5rKcHGdjZg=
Subject key identifier: 63:09:92:8C:16:74:D5:0F:AF:75:1F:84:6B:2E:BD:B3:1B:2F:84:FA
Authority key identifier: 2A:1E:65:F8:08:3C:85:9B:CD:0D:2C:52:A1:E0:61:EB:51:31:F5:F1
Certificate issuer: /CN=2a1e65f8083c859bcd0d2c52a1e061eb5131f5f1
Certificate serial: 0198353A18F90E24B3104312E801B440ED60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
Manifest number: 15F6
Signing time: Wed 23 Jul 2025 03:00:56 +0000
Manifest this update: Wed 23 Jul 2025 03:00:56 +0000
Manifest next update: Thu 24 Jul 2025 03:00:56 +0000
Files and hashes: 1: 0GPPNqD70BhEEc5OGdElRSZQ_uA.roa (hash: d+8R//aHUIcUEfpxVOLBHR3p78wpduw1XLPn+Xxxlzo=)
2: Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.crl (hash: JDWAxNy8/3NemhEfNhFrO0bG5CDZoZ5APtGPiUfOKiw=)
3: NA2ltT3Sfb3V_iisdx5vwEvFMeE.roa (hash: vazWrh+R+LWtlS3ZJjQYp6mVJnmrGyyhkAQ7rsXsUf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:35:3a:18:f9:0e:24:b3:10:43:12:e8:01:b4:40:ed:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a1e65f8083c859bcd0d2c52a1e061eb5131f5f1
Validity
Not Before: Jul 23 03:00:56 2025 GMT
Not After : Jul 24 03:00:56 2025 GMT
Subject: CN=6309928c1674d50faf751f846b2ebdb31b2f84fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:15:05:81:e4:32:13:ec:9c:6c:8f:5f:58:84:
73:8e:25:12:ad:84:ab:1d:06:6d:a6:fb:35:ca:c1:
4d:05:5e:99:ae:0a:0b:00:7c:ad:de:cd:17:a6:0b:
cd:ba:f2:fd:33:b1:39:93:b1:bd:cb:35:d3:7a:b7:
65:58:ec:07:9d:76:51:03:11:78:5d:b9:f4:ef:60:
f7:6b:c4:b1:9a:c6:97:94:90:a8:77:aa:65:fa:c3:
23:01:bf:55:25:c8:6f:e4:03:1c:01:0a:18:15:86:
43:46:2d:3c:42:4f:51:99:63:4f:19:f4:66:02:36:
79:57:45:b3:bb:19:a8:ef:5d:2d:3b:45:3e:89:c7:
68:7b:75:58:98:ab:f8:63:82:a7:a4:5f:63:77:8d:
68:c6:ef:1c:c8:2c:4f:21:6c:d6:09:66:c8:db:1d:
b2:06:f0:0d:5f:09:08:d7:3d:1e:8a:5e:ff:6b:16:
80:ba:9e:b7:4a:7e:a7:b5:2a:0b:3a:e2:a0:87:4e:
cc:06:1b:1d:06:cf:63:9a:20:51:3a:8e:7c:38:70:
47:6c:b4:7d:46:ff:dc:9f:1f:4a:68:0b:68:3f:eb:
bf:27:80:97:10:8b:77:c8:70:db:c5:0f:b2:5a:d0:
71:b4:e5:04:3f:32:a2:53:87:cf:0c:cd:58:ee:5c:
b6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:09:92:8C:16:74:D5:0F:AF:75:1F:84:6B:2E:BD:B3:1B:2F:84:FA
X509v3 Authority Key Identifier:
keyid:2A:1E:65:F8:08:3C:85:9B:CD:0D:2C:52:A1:E0:61:EB:51:31:F5:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:5c:7c:39:f0:53:93:1f:42:e6:91:ae:aa:65:32:b5:05:a3:
d6:84:4f:6d:e2:07:fe:48:0d:b3:c7:df:b1:3d:ef:22:50:77:
3c:2a:9e:5e:67:b7:03:33:e6:a1:5e:d9:ae:86:5d:dd:d6:09:
cf:b1:64:c6:e8:87:75:02:9a:e7:a8:0b:a6:63:8d:f2:bf:1e:
3a:16:dd:d4:2f:d8:b7:c8:9c:4e:10:cc:43:29:f8:c3:ad:36:
c4:a0:a2:8a:ed:6a:12:d8:14:a3:68:9d:10:a4:04:15:06:a4:
83:ae:4e:93:0b:b6:fb:e9:06:d4:ce:d7:c8:03:73:df:f0:5a:
e8:09:89:9e:3d:11:de:ab:a6:09:dd:0f:23:51:89:c2:f0:c3:
4d:dc:54:95:df:bd:e6:78:8e:bc:0e:a9:a8:bf:86:ad:e1:09:
cd:d2:a5:72:d5:af:6d:66:7d:ed:c1:d8:99:10:f9:85:93:6a:
b1:3a:0d:63:93:8a:2f:48:81:ed:fc:19:31:4b:63:1c:cb:f0:
4f:5c:e6:10:b8:53:db:a3:00:b9:b2:88:c6:2e:72:4a:0b:82:
a5:e3:11:c4:84:f0:51:82:38:02:72:af:54:50:5e:35:e0:cb:
c0:66:15:24:62:bd:36:af:cd:10:9d:8c:bc:f1:f6:5c:77:75:
9c:83:78:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 11:56:21 2025 by rpki-client