Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/66a439-cf33-47c5-92ab-80b5118abaf6/1/KhfSVHdMl6nGhansXSTy_GlomQg.mft
File: KhfSVHdMl6nGhansXSTy_GlomQg.mft (raw, json)
Hash identifier: aJkM2AxRcjZ+nnE5MbiQ09YZgM5pG7mkNR0n6mYazmM=
Subject key identifier: C8:1F:54:AA:5C:55:D8:0B:E0:34:F3:C4:51:AF:29:42:D9:5F:16:51
Authority key identifier: 2A:17:D2:54:77:4C:97:A9:C6:85:A9:EC:5D:24:F2:FC:69:68:99:08
Certificate issuer: /CN=2a17d254774c97a9c685a9ec5d24f2fc69689908
Certificate serial: 01974BC49863D1BD98AA66E3FE2F150B5270
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KhfSVHdMl6nGhansXSTy_GlomQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/66a439-cf33-47c5-92ab-80b5118abaf6/1/KhfSVHdMl6nGhansXSTy_GlomQg.mft
Manifest number: 12B9
Signing time: Sat 07 Jun 2025 19:01:04 +0000
Manifest this update: Sat 07 Jun 2025 19:01:04 +0000
Manifest next update: Sun 08 Jun 2025 19:01:04 +0000
Files and hashes: 1: 1ibpJfSu5zvmElDRsm3yBPA2Psc.roa (hash: fl2TXrWlprslHDoqKeFpyUnoLUsON1oTzkxdU0IwAjQ=)
2: KhfSVHdMl6nGhansXSTy_GlomQg.crl (hash: PBpe63cpYh5NJ09bUmEcTqbjeW4Fm7nbBMYEBelsBj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/66a439-cf33-47c5-92ab-80b5118abaf6/1/KhfSVHdMl6nGhansXSTy_GlomQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/66a439-cf33-47c5-92ab-80b5118abaf6/1/KhfSVHdMl6nGhansXSTy_GlomQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KhfSVHdMl6nGhansXSTy_GlomQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:c4:98:63:d1:bd:98:aa:66:e3:fe:2f:15:0b:52:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a17d254774c97a9c685a9ec5d24f2fc69689908
Validity
Not Before: Jun 7 19:01:04 2025 GMT
Not After : Jun 8 19:01:04 2025 GMT
Subject: CN=c81f54aa5c55d80be034f3c451af2942d95f1651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:08:2e:1d:7f:75:45:e2:77:90:00:61:4f:0c:
a4:45:ac:75:e9:39:d9:75:f1:71:ee:9f:07:8d:df:
1a:d6:44:9f:0b:1e:4b:b2:09:79:5a:8b:54:62:60:
a1:38:25:ff:38:d8:8f:33:51:3f:76:d1:39:46:5d:
37:de:6a:e4:cf:d2:1a:85:96:da:57:6b:c9:b6:07:
b3:f5:f6:22:91:20:f7:79:b6:f2:69:09:0f:35:79:
d3:5d:bd:cc:e3:f5:f8:ec:3e:5a:9a:06:c0:3f:0e:
98:bb:30:fc:aa:02:4b:f1:b1:83:fc:c1:7c:6f:cc:
20:e2:bf:3b:65:9c:f6:5c:00:e5:3d:a3:4c:e9:33:
03:f9:68:fb:3a:2d:e4:b7:d4:3e:83:fa:ff:4b:21:
b0:b8:1b:53:3e:88:f8:7b:85:1b:82:7b:a8:78:54:
d3:6b:d5:ce:3d:46:c4:7a:50:8d:b1:fd:56:85:18:
fa:12:8c:ee:97:76:66:c1:e7:24:a2:81:09:1d:6b:
29:0c:23:ce:77:0a:c2:01:6b:41:c7:13:7e:2f:97:
83:c7:08:07:68:79:c2:9a:eb:a6:ae:3e:0b:6e:27:
c5:3f:a5:fb:c5:e8:89:d7:a4:c7:e6:9e:68:60:d0:
88:44:b7:69:d5:a0:3c:b5:0a:7b:f1:f8:b3:7e:b4:
b1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:1F:54:AA:5C:55:D8:0B:E0:34:F3:C4:51:AF:29:42:D9:5F:16:51
X509v3 Authority Key Identifier:
keyid:2A:17:D2:54:77:4C:97:A9:C6:85:A9:EC:5D:24:F2:FC:69:68:99:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KhfSVHdMl6nGhansXSTy_GlomQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/66a439-cf33-47c5-92ab-80b5118abaf6/1/KhfSVHdMl6nGhansXSTy_GlomQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/66a439-cf33-47c5-92ab-80b5118abaf6/1/KhfSVHdMl6nGhansXSTy_GlomQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:5c:bd:e8:2a:46:a4:b3:01:6e:2e:3d:a5:a1:79:b4:54:da:
d0:8c:14:a4:98:11:f2:82:8e:82:ca:08:6c:83:35:90:bb:7b:
1b:44:fc:16:b1:36:c8:c5:d9:6a:c1:ad:e9:29:2a:d7:9e:89:
ec:7e:81:a8:d6:95:df:46:80:e8:e1:e2:ad:98:3b:59:ef:55:
61:30:46:ef:8b:07:7b:1d:b0:40:7d:ab:19:2e:07:40:d9:7e:
ff:6e:60:d7:f5:08:4a:e1:3c:52:de:3a:e2:ac:c0:ba:e5:d6:
93:d7:2a:58:db:ff:28:da:03:d4:80:28:b4:e2:54:bc:ed:72:
ad:51:57:63:b8:65:2d:2e:2a:0d:ec:bc:09:20:fc:a5:23:0a:
bb:a8:c1:96:52:d5:3d:e8:3f:90:ae:e2:3a:ef:65:d8:38:06:
36:fa:10:b3:4a:78:ec:72:b2:e6:fb:0d:25:b0:c6:e4:51:c3:
93:8b:c9:65:83:f4:d1:3f:6c:06:e9:5d:15:a8:69:66:fd:f4:
98:49:9f:03:20:4c:bd:42:6c:70:be:b7:4f:70:d0:09:6e:85:
72:98:f3:98:c3:30:b6:5a:80:1c:c8:5d:72:0c:7d:7e:4a:45:
2d:14:f2:9c:14:1f:07:f2:3a:0e:80:07:bd:6c:3d:6e:f7:ae:
93:f6:e2:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLxJhj0b2Yqmbj/i8VC1JwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhMTdkMjU0Nzc0Yzk3YTljNjg1YTllYzVkMjRmMmZjNjk2
ODk5MDgwHhcNMjUwNjA3MTkwMTA0WhcNMjUwNjA4MTkwMTA0WjAzMTEwLwYDVQQD
EyhjODFmNTRhYTVjNTVkODBiZTAzNGYzYzQ1MWFmMjk0MmQ5NWYxNjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAguHX91ReJ3kABhTwykRax16TnZ
dfFx7p8Hjd8a1kSfCx5Lsgl5WotUYmChOCX/ONiPM1E/dtE5Rl033mrkz9IahZba
V2vJtgez9fYikSD3ebbyaQkPNXnTXb3M4/X47D5amgbAPw6YuzD8qgJL8bGD/MF8
b8wg4r87ZZz2XADlPaNM6TMD+Wj7Oi3kt9Q+g/r/SyGwuBtTPoj4e4UbgnuoeFTT
a9XOPUbEelCNsf1WhRj6Eozul3ZmweckooEJHWspDCPOdwrCAWtBxxN+L5eDxwgH
aHnCmuumrj4LbifFP6X7xeiJ16TH5p5oYNCIRLdp1aA8tQp78fizfrSxsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMgfVKpcVdgL4DTzxFGvKULZXxZRMB8GA1UdIwQY
MBaAFCoX0lR3TJepxoWp7F0k8vxpaJkIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2hmU1ZIZE1sNm5HaGFuc1hTVHlfR2xvbVFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82NmE0MzktY2YzMy00N2M1LTkyYWIt
ODBiNTExOGFiYWY2LzEvS2hmU1ZIZE1sNm5HaGFuc1hTVHlfR2xvbVFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi82NmE0MzktY2YzMy00N2M1LTkyYWItODBiNTExOGFiYWY2
LzEvS2hmU1ZIZE1sNm5HaGFuc1hTVHlfR2xvbVFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASVy96CpG
pLMBbi49paF5tFTa0IwUpJgR8oKOgsoIbIM1kLt7G0T8FrE2yMXZasGt6Skq156J
7H6BqNaV30aA6OHirZg7We9VYTBG74sHex2wQH2rGS4HQNl+/25g1/UISuE8Ut46
4qzAuuXWk9cqWNv/KNoD1IAotOJUvO1yrVFXY7hlLS4qDey8CSD8pSMKu6jBllLV
Peg/kK7iOu9l2DgGNvoQs0p47HKy5vsNJbDG5FHDk4vJZYP00T9sBuldFahpZv30
mEmfAyBMvUJscL63T3DQCW6FcpjzmMMwtlqAHMhdcgx9fkpFLRTynBQfB/I6DoAH
vWw9bveuk/biAg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 00:32:12 2025 by rpki-client