Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.mft
File: khPywtBsZLiVRXq1D8SSAoOknMc.mft (raw, json)
Hash identifier: S1UiE8s7uODOVKz8d9mX27t4b7vYKS5E3k78LZJLbBc=
Subject key identifier: C7:E7:FF:99:06:C3:75:16:6B:55:E8:F3:E0:B1:8C:BE:90:4F:0E:FC
Authority key identifier: 92:13:F2:C2:D0:6C:64:B8:95:45:7A:B5:0F:C4:92:02:83:A4:9C:C7
Certificate issuer: /CN=9213f2c2d06c64b895457ab50fc4920283a49cc7
Certificate serial: 0197488C71EBBD65DA945CD301BBD8CE703D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khPywtBsZLiVRXq1D8SSAoOknMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.mft
Manifest number: 1581
Signing time: Sat 07 Jun 2025 04:00:53 +0000
Manifest this update: Sat 07 Jun 2025 04:00:53 +0000
Manifest next update: Sun 08 Jun 2025 04:00:53 +0000
Files and hashes: 1: WzcaaMQRrlChBNRzpd6ejVsnjhE.roa (hash: thxrjBXbUSSC8DCWldp79G7rZSMi1abwsQ1q60K08dg=)
2: iRKQaDksCLDeAQtwp0YKQ3SovAI.roa (hash: wixldrtyd3fdUQpeC4X4fRGfwA4fNIJXJhW2tQSWdew=)
3: khPywtBsZLiVRXq1D8SSAoOknMc.crl (hash: iAaWU9imZXIIZDE+TVlqYyJHIM8wDm9V47UYMwxV0vk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/khPywtBsZLiVRXq1D8SSAoOknMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:71:eb:bd:65:da:94:5c:d3:01:bb:d8:ce:70:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9213f2c2d06c64b895457ab50fc4920283a49cc7
Validity
Not Before: Jun 7 04:00:53 2025 GMT
Not After : Jun 8 04:00:53 2025 GMT
Subject: CN=c7e7ff9906c375166b55e8f3e0b18cbe904f0efc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:13:29:82:8a:99:d1:80:41:09:a1:3e:af:40:
60:06:d9:61:37:ca:8d:92:e6:8f:40:87:3c:6c:88:
01:ad:8e:7d:82:d9:a4:c1:04:e8:83:33:b0:62:2c:
ed:84:8a:8e:6d:b0:a7:50:a0:42:47:57:1b:60:cb:
de:22:87:a7:f2:e1:6d:ff:49:9d:bc:6d:d5:b3:27:
fa:3f:db:52:3d:bf:75:7b:8f:7b:a1:4f:68:eb:71:
de:83:fc:53:49:75:b8:b0:15:b5:06:5e:27:7f:8f:
50:e4:4f:c8:30:1b:32:7c:18:d8:59:76:40:27:c7:
2a:54:8d:97:7c:1b:7d:74:84:09:1b:ec:50:84:47:
69:dd:7d:d2:77:e5:2f:8b:7d:72:d2:c7:d5:7a:e0:
1d:37:2b:52:17:60:16:82:98:2c:59:13:ea:fa:95:
b2:51:15:b3:f0:e4:d6:21:12:37:03:d8:15:0b:f0:
8b:97:c7:73:52:f5:fc:c1:8a:0d:fe:cf:36:91:9a:
71:e8:02:48:23:b2:48:b0:cf:c5:6c:ff:37:f3:57:
43:6c:46:cd:57:9f:9b:86:66:4e:9e:44:5a:5c:a5:
bf:eb:cd:0f:a6:46:df:82:bd:02:9a:09:e8:bb:12:
b9:d4:ee:54:c4:b0:12:d3:f7:20:3e:9e:73:22:41:
e8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E7:FF:99:06:C3:75:16:6B:55:E8:F3:E0:B1:8C:BE:90:4F:0E:FC
X509v3 Authority Key Identifier:
keyid:92:13:F2:C2:D0:6C:64:B8:95:45:7A:B5:0F:C4:92:02:83:A4:9C:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khPywtBsZLiVRXq1D8SSAoOknMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:aa:4e:b1:a6:31:d0:8e:6e:6b:67:7e:e1:16:ac:03:7f:d2:
13:e9:32:8b:3e:1a:eb:cd:0b:34:2e:26:3a:d6:ce:c6:8b:80:
c6:7c:96:dc:d0:d7:09:e6:9b:31:f3:87:6a:0a:c0:88:7b:1b:
96:fc:42:c7:e6:e9:0d:83:b1:69:ce:b8:37:a9:2a:fc:4f:ac:
6c:99:5c:ae:10:cf:fb:1e:ef:2e:89:a3:95:71:cd:60:df:36:
ad:a2:27:28:b9:d2:06:a1:e1:ca:d6:21:a5:73:37:d8:21:b5:
65:94:75:59:27:ec:6a:e3:7e:05:9b:28:c7:49:d6:82:ce:3a:
a1:56:4a:c3:c6:41:06:24:4c:82:bc:e6:ff:30:ed:af:53:22:
df:04:f4:41:7a:f8:15:eb:a6:45:64:cb:23:a6:ba:6e:a6:6a:
d7:dd:26:f6:b7:aa:f7:98:7b:19:b9:95:57:4f:fc:16:52:09:
6d:dd:68:6a:af:a9:8b:dc:5e:41:3c:98:f9:41:a4:47:89:b0:
00:d1:d7:42:69:f4:73:60:c3:6d:15:7a:d8:95:98:ff:0b:10:
87:70:5f:eb:d2:8f:84:2c:a5:4e:cd:c1:33:36:5c:92:42:b7:
22:7c:01:9f:fb:a2:f9:da:b2:34:d2:fa:a1:3b:62:4c:01:3c:
e4:82:62:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:35:37 2025 by rpki-client