Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
File: Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft (raw, json)
Hash identifier: AWixcWseQVwijXZHBQTp4w3s1SDlt18hnGNrpZ3SCSA=
Subject key identifier: 30:EC:1A:CE:B2:D6:1A:17:6C:44:99:45:34:F7:DE:C8:ED:B5:C7:54
Authority key identifier: 2A:1E:65:F8:08:3C:85:9B:CD:0D:2C:52:A1:E0:61:EB:51:31:F5:F1
Certificate issuer: /CN=2a1e65f8083c859bcd0d2c52a1e061eb5131f5f1
Certificate serial: 0199304807D8070F6B1C0BEB978D91AE8E53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
Manifest number: 1678
Signing time: Tue 09 Sep 2025 21:00:50 +0000
Manifest this update: Tue 09 Sep 2025 21:00:50 +0000
Manifest next update: Wed 10 Sep 2025 21:00:50 +0000
Files and hashes: 1: 0GPPNqD70BhEEc5OGdElRSZQ_uA.roa (hash: d+8R//aHUIcUEfpxVOLBHR3p78wpduw1XLPn+Xxxlzo=)
2: Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.crl (hash: 4wOZdcHLdPkWXRUbeQnRibOslb5GtGvW27J2hSBGI0E=)
3: NA2ltT3Sfb3V_iisdx5vwEvFMeE.roa (hash: vazWrh+R+LWtlS3ZJjQYp6mVJnmrGyyhkAQ7rsXsUf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 17:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:30:48:07:d8:07:0f:6b:1c:0b:eb:97:8d:91:ae:8e:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a1e65f8083c859bcd0d2c52a1e061eb5131f5f1
Validity
Not Before: Sep 9 21:00:50 2025 GMT
Not After : Sep 10 21:00:50 2025 GMT
Subject: CN=30ec1aceb2d61a176c44994534f7dec8edb5c754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1a:34:f7:d7:cb:dd:83:07:49:c4:54:b3:1a:
3e:8b:c8:e0:16:b0:b2:0a:2e:2a:f2:e8:a9:c5:8f:
47:5f:3f:ed:f7:b2:a2:f9:14:7c:0d:38:e1:79:60:
02:cf:18:5c:c2:8e:76:19:ac:ff:85:33:6d:3e:c3:
4a:74:57:68:99:eb:88:6b:0e:2b:ff:39:7e:86:f8:
90:b0:a7:a4:ad:a1:d0:27:2c:92:84:b5:ad:b4:a2:
0e:bf:3e:e8:61:55:02:e6:74:95:6b:04:c5:a5:67:
17:1b:ca:df:09:38:f7:b6:c2:6b:1f:29:e7:49:d2:
0d:82:b4:ea:eb:31:54:da:d4:d5:92:6a:ba:17:5d:
21:46:93:ec:04:dd:49:ce:8b:33:85:06:f0:09:bf:
4b:93:99:60:97:17:ec:91:93:92:fe:fe:41:6e:7c:
15:e5:cc:94:9d:ce:7d:61:17:21:3b:23:99:37:5f:
62:b5:61:47:55:e9:cd:31:d4:82:cc:7d:a6:e5:35:
4d:34:d4:06:57:6b:ff:44:0d:78:24:15:38:26:42:
b5:d2:2b:df:5d:86:d6:2e:59:42:1b:16:45:48:9f:
ad:27:93:70:86:63:c7:fa:e3:20:89:b7:26:67:d1:
25:d6:6c:ff:c6:89:4d:5b:a6:2b:47:a3:bd:0e:fd:
c2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:EC:1A:CE:B2:D6:1A:17:6C:44:99:45:34:F7:DE:C8:ED:B5:C7:54
X509v3 Authority Key Identifier:
keyid:2A:1E:65:F8:08:3C:85:9B:CD:0D:2C:52:A1:E0:61:EB:51:31:F5:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:b2:2b:19:37:7c:98:6d:37:a2:bf:1c:ee:73:85:07:2e:6d:
b8:9e:c5:c0:42:26:d9:4b:bc:33:de:18:d3:d4:97:11:4f:07:
0a:79:ec:83:ff:16:ce:cd:30:81:82:da:ec:ce:85:d0:ea:d4:
9b:8a:93:bd:8d:f5:2e:e0:09:c4:04:b1:cd:9f:64:4a:b3:3d:
0d:0a:a0:9a:e2:e7:1d:49:44:d2:e2:d6:8f:70:a7:40:5b:54:
6c:44:d2:64:7b:ce:40:32:b3:0a:7e:36:00:8e:a5:8b:23:5b:
eb:2a:fe:5e:c0:b8:6e:40:3c:c6:99:76:d9:f7:c4:ce:c2:c9:
95:71:2c:33:37:f5:1a:bd:07:ec:37:17:e9:f9:31:1a:c2:7d:
c7:59:f3:ff:60:c5:1e:a7:f7:f2:05:f0:9c:16:dc:6d:74:1e:
f4:52:e9:fb:9f:1d:89:90:8d:d7:6e:db:2b:44:7f:03:af:91:
a5:a0:73:a5:91:3a:67:8f:7f:de:d7:e8:7b:14:c2:31:19:3d:
a0:67:09:3d:5b:96:48:84:ff:68:c6:f7:ba:4f:f7:aa:ec:65:
37:a0:e3:3b:d0:1f:3a:33:40:43:bb:c1:45:a3:81:90:b4:e4:
6f:e9:fc:c4:3e:6f:f7:58:32:eb:5e:08:33:17:2e:f8:3e:ec:
94:68:61:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 01:19:02 2025 by rpki-client