Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.mft
File: KHXxhYI9vGqC0QWzyhYHfbVyk3c.mft (raw, json)
Hash identifier: 0YUD+kzGvTo72BN7r6FsBc8+SGEsC4K385lc1rN+XxQ=
Subject key identifier: 82:98:28:2C:19:91:B9:1C:ED:AF:71:F9:13:32:B2:29:63:03:38:81
Authority key identifier: 28:75:F1:85:82:3D:BC:6A:82:D1:05:B3:CA:16:07:7D:B5:72:93:77
Certificate issuer: /CN=2875f185823dbc6a82d105b3ca16077db5729377
Certificate serial: 0197477A0C6B7F0588F362E78CF074E21F67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KHXxhYI9vGqC0QWzyhYHfbVyk3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.mft
Manifest number: 157E
Signing time: Fri 06 Jun 2025 23:01:10 +0000
Manifest this update: Fri 06 Jun 2025 23:01:10 +0000
Manifest next update: Sat 07 Jun 2025 23:01:10 +0000
Files and hashes: 1: DUHPPbMiJZ5g5-MVvzd1BoFThPs.roa (hash: jYJfj32NL3hL8Amv7vFPn8VdtIOctCQTglUuBNZ6asM=)
2: KHXxhYI9vGqC0QWzyhYHfbVyk3c.crl (hash: e6oqAkyTKgDKwDdvsau5ia3PFmfFgPjoLZN5JiBoFfg=)
3: v7cahpSyhHNf-9u3vX0WVgp6xg4.roa (hash: An2ilVmevKfJ9Krr3t4y0gOa1n+BDhvcN3VZHuTlMls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/KHXxhYI9vGqC0QWzyhYHfbVyk3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 23:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:7a:0c:6b:7f:05:88:f3:62:e7:8c:f0:74:e2:1f:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2875f185823dbc6a82d105b3ca16077db5729377
Validity
Not Before: Jun 6 23:01:10 2025 GMT
Not After : Jun 7 23:01:10 2025 GMT
Subject: CN=8298282c1991b91cedaf71f91332b22963033881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:fd:fd:de:13:03:2d:0f:6f:16:44:05:52:b7:
81:f8:28:89:af:6e:8e:12:d3:fc:c7:96:8a:12:71:
93:75:76:9a:97:10:c5:3d:fb:1b:c2:ae:05:08:28:
cf:b6:68:23:89:fa:e1:c1:1d:71:ae:21:a0:db:d9:
df:78:78:36:bc:1d:38:5a:5c:af:ef:e9:e2:7c:a3:
53:11:de:af:5b:28:de:8c:e6:74:85:b9:5d:1d:99:
c7:66:75:74:2b:55:94:e9:d4:5e:a4:99:19:cd:43:
f9:37:d9:7c:57:5d:6f:a7:5c:ea:8e:3c:3f:35:15:
39:29:30:1d:ea:3e:a0:37:7f:83:91:d0:ae:4f:26:
fe:e8:c9:9c:e3:80:5b:d4:21:a2:99:a8:73:d6:7b:
f6:09:de:1b:bd:e2:a7:11:e9:a7:4f:bc:e7:fe:60:
1e:4b:48:87:c7:b8:92:d5:7b:40:41:8b:70:bd:20:
94:41:62:de:7b:1f:55:20:07:8f:8c:52:8a:95:95:
f2:23:27:3f:a6:e1:0f:b1:3d:a9:48:47:06:97:70:
46:c4:f0:22:77:ca:3a:a1:03:0f:dd:61:3c:10:ae:
28:55:9b:d9:20:3e:0d:c9:00:dc:08:49:4b:c8:59:
02:ee:9d:91:bc:d3:8d:76:37:1c:ce:6f:4a:61:f8:
26:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:98:28:2C:19:91:B9:1C:ED:AF:71:F9:13:32:B2:29:63:03:38:81
X509v3 Authority Key Identifier:
keyid:28:75:F1:85:82:3D:BC:6A:82:D1:05:B3:CA:16:07:7D:B5:72:93:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KHXxhYI9vGqC0QWzyhYHfbVyk3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:3e:e4:1d:36:81:e6:98:fc:bb:18:2c:ee:26:75:fb:83:a7:
64:f4:21:1a:bb:b3:82:ea:46:f5:cd:28:ac:c5:2b:5a:ae:78:
da:e3:9a:79:b5:68:03:c8:3c:37:4a:f9:8d:4e:54:a2:cd:7c:
12:cc:78:4f:3b:8a:04:77:37:a4:18:ae:31:b2:7b:69:8a:bd:
92:f1:f0:7d:0a:d5:a7:79:4a:9b:8f:b6:06:e2:e2:2d:d3:b9:
1e:cd:88:c7:41:12:0c:24:d9:2e:e2:89:af:1a:41:8d:99:c2:
d3:37:e7:b9:69:9f:f2:80:dc:58:c9:ca:32:7b:4d:1a:31:16:
d7:99:c8:20:c5:07:ca:37:b6:5f:d7:10:11:f3:36:b2:13:f8:
f6:a5:7f:38:19:3f:d7:37:c8:e1:a3:09:c8:0e:da:05:1a:41:
cb:9f:58:5e:f1:e2:d9:77:3b:8d:50:e1:59:b1:41:36:89:21:
5e:7a:14:10:57:b8:2e:a3:8d:a1:1f:33:97:59:70:bd:eb:73:
46:78:02:4f:0d:46:a5:fc:e0:5a:27:f2:e3:ad:7d:b9:65:bd:
97:12:bd:f9:88:94:3a:8a:65:4a:fd:8a:9c:c1:d6:3c:bc:81:
00:ab:4d:21:cd:43:ff:46:5f:10:18:ff:5e:33:b7:e6:df:c6:
09:6d:87:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:03:04 2025 by rpki-client