Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
File: KhLvrumX6adjtGCrWS3dpnoN63A.mft (raw, json)
Hash identifier: aNFW5PIf8KkuY3cGHKXeYhXZp1Uc3aojuG7zHsOBMbU=
Subject key identifier: 3A:B4:6C:19:CC:A0:B1:33:BE:04:67:BE:D1:7C:DE:10:C4:D1:60:64
Authority key identifier: 2A:12:EF:AE:E9:97:E9:A7:63:B4:60:AB:59:2D:DD:A6:7A:0D:EB:70
Certificate issuer: /CN=2a12efaee997e9a763b460ab592ddda67a0deb70
Certificate serial: 0199345B48E03C54DA87F073DB7172555FB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KhLvrumX6adjtGCrWS3dpnoN63A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
Manifest number: 025F
Signing time: Wed 10 Sep 2025 16:00:21 +0000
Manifest this update: Wed 10 Sep 2025 16:00:21 +0000
Manifest next update: Thu 11 Sep 2025 16:00:21 +0000
Files and hashes: 1: 1-EYj7rCEm13C4ia18Eyfo_8k-RU.roa (hash: +ir98X5g2btNq9n+Pt6yr5mLVRkCwQv4UOQGouQJy1M=)
2: KhLvrumX6adjtGCrWS3dpnoN63A.crl (hash: p630+bGYkr/eWgUqyAIYdDKE1gaWaLWhJXBjdAstJNE=)
3: SccPUBWuljMHYcMk3K5QOdOVb6g.roa (hash: uBtJ4Y5vGvXPCHheXT9gg13uzVBy/aYh9vF63HwlhDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
rsync://rpki.ripe.net/repository/DEFAULT/KhLvrumX6adjtGCrWS3dpnoN63A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:5b:48:e0:3c:54:da:87:f0:73:db:71:72:55:5f:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a12efaee997e9a763b460ab592ddda67a0deb70
Validity
Not Before: Sep 10 16:00:21 2025 GMT
Not After : Sep 11 16:00:21 2025 GMT
Subject: CN=3ab46c19cca0b133be0467bed17cde10c4d16064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a9:17:3a:36:87:a5:24:a2:3c:01:78:19:b0:
d1:02:65:72:df:90:3f:4d:a2:db:f8:67:44:a3:79:
63:ba:2a:8c:c9:6e:ae:9d:5f:d0:2d:46:68:9b:d0:
d9:dc:e0:94:db:79:7a:41:ea:62:64:85:62:8b:08:
03:44:b6:41:0d:01:1b:0f:d1:a8:16:54:3b:b2:7f:
21:66:83:52:8c:a7:4f:e9:6b:89:27:7e:34:e5:ab:
c3:4f:8b:4d:fd:63:c2:0c:84:09:ca:18:fd:2a:f9:
a0:b5:6a:f4:99:58:b3:e7:49:2a:ac:ff:fd:b3:2b:
e1:f4:32:43:b7:22:52:4c:8b:52:b5:4a:4b:31:cd:
34:37:14:5e:f7:7f:f3:92:37:3e:fe:d5:fc:13:5f:
1e:76:b4:40:a2:b2:91:b4:58:85:03:ff:60:15:7a:
35:02:92:5b:ce:e4:ec:da:7e:6c:bf:38:10:6d:09:
ae:88:78:91:8b:4b:fe:bb:8e:c9:cf:12:34:b2:1a:
e1:93:82:23:51:00:21:4f:70:ab:29:6e:38:52:e9:
97:73:58:f9:4b:02:33:f2:9d:b5:1f:42:25:f8:b4:
a8:08:7f:bc:d9:8a:1d:76:b9:15:8d:b5:8c:4b:52:
45:0f:f1:b4:be:e7:3f:60:bf:1a:a0:91:ba:95:7d:
e9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B4:6C:19:CC:A0:B1:33:BE:04:67:BE:D1:7C:DE:10:C4:D1:60:64
X509v3 Authority Key Identifier:
keyid:2A:12:EF:AE:E9:97:E9:A7:63:B4:60:AB:59:2D:DD:A6:7A:0D:EB:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KhLvrumX6adjtGCrWS3dpnoN63A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:46:3a:20:2d:be:68:9c:f2:14:57:4c:3f:26:b2:a9:e9:92:
8b:7c:55:3d:c7:4f:02:fb:6e:15:73:97:0f:6a:45:e7:d9:77:
98:44:5f:09:b1:70:29:2e:f4:2d:53:39:6b:96:8c:63:0f:8a:
99:e8:a4:43:90:8b:12:ed:2c:d8:e9:0a:28:6f:25:8c:23:11:
5d:1c:f3:c7:57:80:2d:73:2b:89:8c:9d:24:3d:b9:f1:37:8d:
11:f7:5d:5e:df:ae:5d:4c:cc:27:9b:75:55:6c:ce:e3:cc:b3:
a7:ba:a4:d7:98:fa:f9:eb:e7:d4:0a:16:d0:47:aa:01:47:3f:
72:35:e1:fa:c0:01:01:ef:f1:4d:8c:d0:71:ac:17:c5:6b:31:
60:1f:5b:3c:e3:ae:78:96:ae:12:d9:3c:af:bf:92:81:86:9d:
b9:8f:2c:68:43:ee:bb:3f:ef:68:e5:f9:6e:5d:14:d1:ae:74:
d6:38:3a:d5:19:54:12:f8:01:66:82:05:24:d3:16:54:fe:34:
08:80:54:3b:54:90:3a:38:7b:0a:5b:c9:82:53:48:b1:dd:1d:
07:be:01:ba:e3:ff:4e:b9:28:83:ee:71:52:bf:bd:26:ff:c5:
3c:e6:9f:6b:63:a7:95:89:75:84:57:51:7e:85:fb:d7:6d:ee:
13:71:6a:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk0W0jgPFTah/Bz23FyVV+0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhMTJlZmFlZTk5N2U5YTc2M2I0NjBhYjU5MmRkZGE2N2Ew
ZGViNzAwHhcNMjUwOTEwMTYwMDIxWhcNMjUwOTExMTYwMDIxWjAzMTEwLwYDVQQD
EygzYWI0NmMxOWNjYTBiMTMzYmUwNDY3YmVkMTdjZGUxMGM0ZDE2MDY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqkXOjaHpSSiPAF4GbDRAmVy35A/
TaLb+GdEo3ljuiqMyW6unV/QLUZom9DZ3OCU23l6QepiZIViiwgDRLZBDQEbD9Go
FlQ7sn8hZoNSjKdP6WuJJ3405avDT4tN/WPCDIQJyhj9KvmgtWr0mViz50kqrP/9
syvh9DJDtyJSTItStUpLMc00NxRe93/zkjc+/tX8E18edrRAorKRtFiFA/9gFXo1
ApJbzuTs2n5svzgQbQmuiHiRi0v+u47JzxI0shrhk4IjUQAhT3CrKW44UumXc1j5
SwIz8p21H0Il+LSoCH+82YoddrkVjbWMS1JFD/G0vuc/YL8aoJG6lX3pcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDq0bBnMoLEzvgRnvtF83hDE0WBkMB8GA1UdIwQY
MBaAFCoS767pl+mnY7Rgq1kt3aZ6DetwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2hMdnJ1bVg2YWRqdEdDcldTM2Rwbm9ONjNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny82ZmY0M2ItMjdhYi00MDY0LWFmMWQt
MDllZDc4MDBmZGZiLzEvS2hMdnJ1bVg2YWRqdEdDcldTM2Rwbm9ONjNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny82ZmY0M2ItMjdhYi00MDY0LWFmMWQtMDllZDc4MDBmZGZi
LzEvS2hMdnJ1bVg2YWRqdEdDcldTM2Rwbm9ONjNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGUY6IC2+
aJzyFFdMPyayqemSi3xVPcdPAvtuFXOXD2pF59l3mERfCbFwKS70LVM5a5aMYw+K
meikQ5CLEu0s2OkKKG8ljCMRXRzzx1eALXMriYydJD258TeNEfddXt+uXUzMJ5t1
VWzO48yzp7qk15j6+evn1AoW0EeqAUc/cjXh+sABAe/xTYzQcawXxWsxYB9bPOOu
eJauEtk8r7+SgYaduY8saEPuuz/vaOX5bl0U0a501jg61RlUEvgBZoIFJNMWVP40
CIBUO1SQOjh7ClvJglNIsd0dB74BuuP/Trkog+5xUr+9Jv/FPOafa2OnlYl1hFdR
foX7123uE3FqKQ==
-----END CERTIFICATE-----
Generated at Wed Sep 10 19:39:06 2025 by rpki-client