Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
File: KhLvrumX6adjtGCrWS3dpnoN63A.mft (raw, json)
Hash identifier: UwlyrVUsbipo2gKGqm4y4Mmjqbo5psdj9EMMVk0DY6g=
Subject key identifier: EB:D3:3E:2B:E7:12:36:D1:B2:8F:7C:B7:C6:78:6D:D8:15:D7:B4:D8
Authority key identifier: 2A:12:EF:AE:E9:97:E9:A7:63:B4:60:AB:59:2D:DD:A6:7A:0D:EB:70
Certificate issuer: /CN=2a12efaee997e9a763b460ab592ddda67a0deb70
Certificate serial: 01974EC5816AEA6D1D9FC501C99440FEDBB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KhLvrumX6adjtGCrWS3dpnoN63A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
Manifest number: 0163
Signing time: Sun 08 Jun 2025 09:00:55 +0000
Manifest this update: Sun 08 Jun 2025 09:00:55 +0000
Manifest next update: Mon 09 Jun 2025 09:00:55 +0000
Files and hashes: 1: 8u9hb0S_4Uuo5fYUwLVSXZK5rxM.roa (hash: 6iQilpXzVprtaKFu2A9AhzRE5Pgx6o9DaMAB494sBrc=)
2: KhLvrumX6adjtGCrWS3dpnoN63A.crl (hash: ppGz0rFtSI3ZObsIbitRvkGhgvCEjjppcaIGl192p3A=)
3: SccPUBWuljMHYcMk3K5QOdOVb6g.roa (hash: uBtJ4Y5vGvXPCHheXT9gg13uzVBy/aYh9vF63HwlhDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
rsync://rpki.ripe.net/repository/DEFAULT/KhLvrumX6adjtGCrWS3dpnoN63A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 09:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c5:81:6a:ea:6d:1d:9f:c5:01:c9:94:40:fe:db:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a12efaee997e9a763b460ab592ddda67a0deb70
Validity
Not Before: Jun 8 09:00:55 2025 GMT
Not After : Jun 9 09:00:55 2025 GMT
Subject: CN=ebd33e2be71236d1b28f7cb7c6786dd815d7b4d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fb:fe:0b:5e:9f:58:69:21:f0:d0:e5:6b:e7:
42:8c:69:f0:c5:f2:b0:9c:95:66:20:45:7e:9b:9c:
96:8a:59:27:d5:cd:70:05:50:36:a3:10:be:59:1d:
49:86:65:9f:f7:97:9b:c6:8e:a9:5f:ff:ca:d0:63:
78:dc:57:74:6d:e1:98:8a:61:3d:ed:7d:80:50:53:
35:17:21:b0:e4:ae:06:08:83:60:36:17:20:16:3f:
59:ad:8b:4c:8c:87:6f:e1:2a:ac:30:fb:8e:a7:1b:
e6:27:f7:33:24:e4:38:a3:80:fd:c4:58:83:94:a6:
ab:36:37:38:6a:3e:27:f5:2f:70:10:13:69:82:76:
27:35:1a:0e:6c:fc:30:3b:ef:ab:8b:b4:a8:55:af:
d6:9d:40:2b:3b:74:20:7c:99:b9:1f:3d:53:b6:f5:
23:7d:32:05:bb:43:6a:b0:bb:84:a9:dc:c7:36:66:
24:78:12:92:74:77:13:14:02:dc:e6:b7:03:0f:5a:
11:44:31:8b:8f:ae:6b:02:42:db:52:8c:3b:33:dc:
2c:86:eb:94:77:4c:09:ff:17:62:7b:6f:b9:81:e6:
d2:0e:67:0f:ba:61:93:da:62:5d:7f:24:74:4b:a1:
d6:d1:fa:0b:30:84:27:5c:1c:85:1a:95:90:07:1d:
a8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:D3:3E:2B:E7:12:36:D1:B2:8F:7C:B7:C6:78:6D:D8:15:D7:B4:D8
X509v3 Authority Key Identifier:
keyid:2A:12:EF:AE:E9:97:E9:A7:63:B4:60:AB:59:2D:DD:A6:7A:0D:EB:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KhLvrumX6adjtGCrWS3dpnoN63A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:96:72:a3:ae:92:f4:1f:f5:9b:53:8e:3b:b8:6a:de:2c:9d:
e3:63:8d:9f:aa:dc:a7:33:62:3a:40:01:25:ba:2c:64:cd:07:
db:64:12:56:f6:12:a2:ae:a6:e1:52:92:a9:f7:ea:73:b7:a4:
20:a2:3d:5c:d4:50:4c:4b:8b:0a:38:8b:6d:b8:d1:06:6b:4c:
d6:6f:7f:60:3f:f1:ae:96:58:2f:50:4b:6a:77:e8:81:65:17:
40:31:93:7a:17:ba:fc:91:4f:95:21:ea:20:b8:57:d1:2d:82:
9e:6d:b1:87:b1:b7:82:f5:9f:ad:a1:10:af:ea:68:6e:1d:6e:
99:10:d3:83:c6:91:15:43:1b:23:48:69:22:e6:f6:f8:dc:a4:
8c:72:d5:0b:cc:98:60:ad:92:12:2a:b3:84:b7:68:73:cd:ce:
c1:97:fb:d1:b4:48:a7:4a:e4:f9:f6:1b:7e:b6:a7:e6:62:24:
fa:01:c3:e7:db:e0:74:2d:df:ce:95:8e:0d:80:e8:1b:65:4d:
7e:ba:89:71:38:83:5d:68:72:3d:73:67:29:9c:ef:70:46:20:
d2:e5:ae:47:70:42:78:27:ae:e7:e7:70:ec:8a:54:27:1d:c5:
a9:d2:46:84:e7:1f:f5:9b:30:52:cf:9c:bc:e1:83:4b:88:32:
01:2e:58:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 17:35:31 2025 by rpki-client