Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.mft
File: khPywtBsZLiVRXq1D8SSAoOknMc.mft (raw, json)
Hash identifier: AL8+8Ku3mLkcRxkx7X4I8pCoZcJ81GJxJvah5cx5mWk=
Subject key identifier: 56:C6:3C:14:F5:69:E0:AB:C9:BE:C7:0E:ED:72:96:A5:93:AD:EE:D7
Authority key identifier: 92:13:F2:C2:D0:6C:64:B8:95:45:7A:B5:0F:C4:92:02:83:A4:9C:C7
Certificate issuer: /CN=9213f2c2d06c64b895457ab50fc4920283a49cc7
Certificate serial: 01992D46994635FBA02563404BF09845B84F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khPywtBsZLiVRXq1D8SSAoOknMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.mft
Manifest number: 167C
Signing time: Tue 09 Sep 2025 07:00:25 +0000
Manifest this update: Tue 09 Sep 2025 07:00:25 +0000
Manifest next update: Wed 10 Sep 2025 07:00:25 +0000
Files and hashes: 1: WzcaaMQRrlChBNRzpd6ejVsnjhE.roa (hash: thxrjBXbUSSC8DCWldp79G7rZSMi1abwsQ1q60K08dg=)
2: iRKQaDksCLDeAQtwp0YKQ3SovAI.roa (hash: wixldrtyd3fdUQpeC4X4fRGfwA4fNIJXJhW2tQSWdew=)
3: khPywtBsZLiVRXq1D8SSAoOknMc.crl (hash: ntSqva7gN2GKKdVwSoes5TzWAbQIanIol/eYH/THeZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/khPywtBsZLiVRXq1D8SSAoOknMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:46:99:46:35:fb:a0:25:63:40:4b:f0:98:45:b8:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9213f2c2d06c64b895457ab50fc4920283a49cc7
Validity
Not Before: Sep 9 07:00:25 2025 GMT
Not After : Sep 10 07:00:25 2025 GMT
Subject: CN=56c63c14f569e0abc9bec70eed7296a593adeed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:16:f5:a5:e6:14:9d:cc:9d:f8:a4:1f:de:96:
b7:4d:7d:01:f3:a6:24:54:77:89:55:a4:cd:0f:2b:
7d:cc:e4:7d:0d:21:bb:b6:0f:e1:44:08:ec:7f:34:
32:19:b8:b4:61:39:c3:b2:35:4e:e9:e1:a9:4a:23:
2f:e1:1a:07:21:30:72:60:ca:22:fc:71:ac:03:af:
b9:a6:57:28:e9:0f:a7:23:f2:c1:d8:14:ad:98:38:
cf:de:f7:22:ec:2b:39:fa:52:12:4a:c9:47:31:66:
6a:6c:be:d8:95:2d:59:12:06:22:97:4f:47:dc:72:
15:89:2a:18:1c:45:23:63:93:69:45:c3:c6:2b:24:
ea:78:7b:f9:d4:45:e6:36:cd:0a:02:1f:4a:cc:fd:
c9:34:b1:1d:64:03:36:33:b5:07:8d:b4:9c:17:d9:
9f:7d:59:16:fd:6c:6f:64:e4:eb:a1:86:e5:af:2b:
90:34:bf:4f:a7:18:be:46:93:43:09:07:e5:d7:7b:
ea:a3:22:81:55:6d:52:ed:32:40:33:8a:29:01:3c:
2a:ed:0b:ba:1a:e4:3b:95:b4:17:4d:2d:d6:98:8e:
80:3f:df:ad:db:7c:6c:b2:e4:cd:19:95:44:7d:76:
9c:44:f5:0b:ed:c2:76:4d:e2:fd:df:10:25:8e:7a:
9e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:C6:3C:14:F5:69:E0:AB:C9:BE:C7:0E:ED:72:96:A5:93:AD:EE:D7
X509v3 Authority Key Identifier:
keyid:92:13:F2:C2:D0:6C:64:B8:95:45:7A:B5:0F:C4:92:02:83:A4:9C:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khPywtBsZLiVRXq1D8SSAoOknMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:7b:99:62:dc:6a:cb:b6:b7:01:e0:31:db:45:57:02:34:80:
7e:60:f1:c1:43:45:a4:58:2b:96:cc:61:28:88:62:e0:aa:00:
fd:b1:62:a9:c4:51:ea:41:7d:1c:69:a6:09:9e:11:b6:25:f8:
13:f9:78:62:4f:4c:ac:f5:89:d7:5a:d8:09:07:4e:e3:a0:30:
fb:b7:ce:bc:c0:d2:05:57:f7:93:b1:4d:d9:b0:1f:ad:f0:37:
1d:d3:3b:fa:0d:67:96:5f:66:1b:77:1b:f8:19:c3:55:d0:45:
a5:48:09:ac:7d:04:7a:6a:95:38:9b:d0:a0:c2:6b:3f:2d:b3:
0f:e8:71:ac:33:f6:1b:76:ea:0c:6b:ba:06:80:fe:5f:10:a5:
af:4a:6a:30:10:62:6e:d2:6d:11:96:eb:6b:ca:c7:be:35:a3:
ca:43:0b:f8:e8:35:3f:36:52:2b:1a:9d:0d:99:c1:22:70:02:
3e:67:49:e6:5a:94:16:9e:c9:18:a1:56:f9:4f:b8:ef:e6:63:
47:c8:b2:ed:6c:ba:cd:ff:ab:02:5c:55:5d:3a:f1:ed:20:9c:
65:da:9e:4e:07:be:f3:42:c4:3f:2e:dd:5b:ed:b2:62:50:3f:
96:f1:05:ac:23:81:c6:d9:40:fa:34:4a:65:45:a4:97:26:81:
78:58:52:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZktRplGNfugJWNAS/CYRbhPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyMTNmMmMyZDA2YzY0Yjg5NTQ1N2FiNTBmYzQ5MjAyODNh
NDljYzcwHhcNMjUwOTA5MDcwMDI1WhcNMjUwOTEwMDcwMDI1WjAzMTEwLwYDVQQD
Eyg1NmM2M2MxNGY1NjllMGFiYzliZWM3MGVlZDcyOTZhNTkzYWRlZWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxb1peYUncyd+KQf3pa3TX0B86Yk
VHeJVaTNDyt9zOR9DSG7tg/hRAjsfzQyGbi0YTnDsjVO6eGpSiMv4RoHITByYMoi
/HGsA6+5plco6Q+nI/LB2BStmDjP3vci7Cs5+lISSslHMWZqbL7YlS1ZEgYil09H
3HIViSoYHEUjY5NpRcPGKyTqeHv51EXmNs0KAh9KzP3JNLEdZAM2M7UHjbScF9mf
fVkW/WxvZOTroYblryuQNL9Ppxi+RpNDCQfl13vqoyKBVW1S7TJAM4opATwq7Qu6
GuQ7lbQXTS3WmI6AP9+t23xssuTNGZVEfXacRPUL7cJ2TeL93xAljnqerwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFbGPBT1aeCryb7HDu1ylqWTre7XMB8GA1UdIwQY
MBaAFJIT8sLQbGS4lUV6tQ/EkgKDpJzHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2hQeXd0QnNaTGlWUlhxMUQ4U1NBb09rbk1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8zMWE2YTQtOGE5ZC00N2EyLThmYmIt
YjlkZmYzZTdhMzJlLzEva2hQeXd0QnNaTGlWUlhxMUQ4U1NBb09rbk1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi8zMWE2YTQtOGE5ZC00N2EyLThmYmItYjlkZmYzZTdhMzJl
LzEva2hQeXd0QnNaTGlWUlhxMUQ4U1NBb09rbk1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjnuZYtxq
y7a3AeAx20VXAjSAfmDxwUNFpFgrlsxhKIhi4KoA/bFiqcRR6kF9HGmmCZ4RtiX4
E/l4Yk9MrPWJ11rYCQdO46Aw+7fOvMDSBVf3k7FN2bAfrfA3HdM7+g1nll9mG3cb
+BnDVdBFpUgJrH0EemqVOJvQoMJrPy2zD+hxrDP2G3bqDGu6BoD+XxClr0pqMBBi
btJtEZbra8rHvjWjykML+Og1PzZSKxqdDZnBInACPmdJ5lqUFp7JGKFW+U+47+Zj
R8iy7Wy6zf+rAlxVXTrx7SCcZdqeTge+80LEPy7dW+2yYlA/lvEFrCOBxtlA+jRK
ZUWklyaBeFhSIw==
-----END CERTIFICATE-----
Generated at Tue Sep 9 13:16:27 2025 by rpki-client