Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.mft
File: khPywtBsZLiVRXq1D8SSAoOknMc.mft (raw, json)
Hash identifier: GQfHSV4d5u0n75Or2SDa9brRuwMlsU/TvBppQhR/XV4=
Subject key identifier: 74:A5:C1:7B:32:36:A6:7D:29:83:58:01:63:6D:F1:D3:93:08:F0:97
Authority key identifier: 92:13:F2:C2:D0:6C:64:B8:95:45:7A:B5:0F:C4:92:02:83:A4:9C:C7
Certificate issuer: /CN=9213f2c2d06c64b895457ab50fc4920283a49cc7
Certificate serial: 019A1CBF02FE1AB8D7BAFA95EB4D65915FC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khPywtBsZLiVRXq1D8SSAoOknMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.mft
Manifest number: 16F8
Signing time: Sat 25 Oct 2025 19:01:11 +0000
Manifest this update: Sat 25 Oct 2025 19:01:11 +0000
Manifest next update: Sun 26 Oct 2025 19:01:11 +0000
Files and hashes: 1: WzcaaMQRrlChBNRzpd6ejVsnjhE.roa (hash: thxrjBXbUSSC8DCWldp79G7rZSMi1abwsQ1q60K08dg=)
2: iRKQaDksCLDeAQtwp0YKQ3SovAI.roa (hash: wixldrtyd3fdUQpeC4X4fRGfwA4fNIJXJhW2tQSWdew=)
3: khPywtBsZLiVRXq1D8SSAoOknMc.crl (hash: yFOs/dG9w9MyhkgPwRjTrGnZKlJcDfHDb6sUH4x1rpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/khPywtBsZLiVRXq1D8SSAoOknMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:bf:02:fe:1a:b8:d7:ba:fa:95:eb:4d:65:91:5f:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9213f2c2d06c64b895457ab50fc4920283a49cc7
Validity
Not Before: Oct 25 19:01:11 2025 GMT
Not After : Oct 26 19:01:11 2025 GMT
Subject: CN=74a5c17b3236a67d29835801636df1d39308f097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:62:dc:d6:79:28:5a:59:3e:e3:11:ea:a9:02:
91:e1:fb:5b:1d:e9:31:40:f3:13:8b:6a:30:af:07:
17:17:f0:58:24:d3:cd:f6:43:55:6b:aa:c9:69:40:
c3:5d:3e:21:01:a7:46:a5:aa:b4:8f:8a:7a:df:4f:
0b:56:5e:d7:ce:15:6c:3c:28:b5:e1:c6:4c:39:f6:
f7:92:e8:69:79:e2:2e:97:f9:9f:c4:b1:44:de:16:
d0:b5:a9:ea:a2:c9:29:8d:47:91:8d:e0:83:ec:de:
73:3c:bd:ca:37:e5:8b:af:37:73:af:59:dc:55:42:
ac:84:ae:7c:0d:ec:c7:9c:75:3c:93:5b:6d:46:83:
66:81:5b:bf:64:2d:94:99:a6:04:c3:4e:c6:9a:92:
54:08:81:96:ee:61:db:81:e6:6e:0b:a4:c7:2f:9f:
83:a5:9f:62:9d:0e:86:72:d5:29:9b:16:6c:49:d2:
e5:58:75:d9:40:7f:bd:d4:ea:f9:6c:51:96:e5:8e:
b1:c8:90:2b:cb:22:9d:72:c6:af:2e:1f:18:ea:f3:
09:1d:f0:8f:b6:8b:8e:a3:0b:c0:bb:7a:3a:d4:9b:
84:30:96:6b:c3:b3:8f:82:71:41:d7:c1:c7:f6:c3:
8f:58:4b:ea:8b:72:30:96:83:91:52:5b:1a:cb:7b:
e6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A5:C1:7B:32:36:A6:7D:29:83:58:01:63:6D:F1:D3:93:08:F0:97
X509v3 Authority Key Identifier:
keyid:92:13:F2:C2:D0:6C:64:B8:95:45:7A:B5:0F:C4:92:02:83:A4:9C:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khPywtBsZLiVRXq1D8SSAoOknMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/31a6a4-8a9d-47a2-8fbb-b9dff3e7a32e/1/khPywtBsZLiVRXq1D8SSAoOknMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:ed:f0:e0:a3:03:33:f9:09:87:0a:1b:be:6d:3d:a4:e0:82:
c0:a9:9e:87:ac:8a:b0:e9:03:ec:fc:2d:a9:c5:f7:2a:0f:5d:
25:1c:b9:e1:14:36:3e:0f:27:02:0e:a5:46:99:c9:76:83:77:
16:ed:75:4b:81:67:dd:d3:ea:f6:f9:c2:9d:3d:78:c2:d0:38:
2b:c4:10:66:73:9f:af:11:a2:1a:df:e3:13:aa:4e:58:5b:1b:
28:f5:05:8e:5c:1c:b1:15:21:c6:ab:01:c6:31:cd:60:9c:cc:
50:a5:69:2e:c7:9a:b4:0c:d9:95:ef:37:5e:d0:69:3b:42:15:
c5:50:34:2d:3b:fc:14:61:b4:04:7e:3b:9d:8f:24:ff:cc:4e:
28:d4:55:a5:93:84:12:d8:2c:13:0a:14:4b:ad:2f:06:48:8b:
1b:bb:9d:72:09:56:a3:20:4d:de:4d:88:3d:cc:6b:5c:52:ea:
91:5c:da:d2:7c:87:db:0a:06:c4:df:76:3d:3f:bc:e6:de:f4:
fb:6b:14:ac:e2:ef:32:52:d2:56:ed:70:17:55:37:c0:de:5e:
60:ac:c4:bf:8b:0c:2c:03:bf:0a:7d:01:fe:38:0a:5f:ed:57:
28:8c:ae:b0:65:81:23:33:a9:ae:89:d7:c6:04:bb:08:c6:63:
0f:96:04:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 02:33:21 2025 by rpki-client