Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
File: kIp-pxKAHkyP64Wz8HjQW6EBquE.mft (raw, json)
Hash identifier: W+JIX3qA2yEx/m1bfuUzjUO53gQuZQH91tNpYEacEQc=
Subject key identifier: 7B:D1:B2:28:06:0D:1A:72:0C:0A:3F:28:B3:38:01:D3:F7:78:73:25
Authority key identifier: 90:8A:7E:A7:12:80:1E:4C:8F:EB:85:B3:F0:78:D0:5B:A1:01:AA:E1
Certificate issuer: /CN=908a7ea712801e4c8feb85b3f078d05ba101aae1
Certificate serial: 019A4EF40A0355EC1FB7D55DB4F934340699
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 13:00:07 +0000
Manifest this update: Tue 04 Nov 2025 13:00:07 +0000
Manifest next update: Wed 05 Nov 2025 13:00:07 +0000
Files and hashes: 1: 5otqJznFN06_a5lb9QnpMCQFqQI.roa (hash: NxQ406RCVAu9Gv14nckV258lPo22JEB7yBMbejU2osI=)
2: kIp-pxKAHkyP64Wz8HjQW6EBquE.crl (hash: kxcbdF8WaAshNxBWv954AAcgIvF1UrTxpEmRc8BzSc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:0a:03:55:ec:1f:b7:d5:5d:b4:f9:34:34:06:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908a7ea712801e4c8feb85b3f078d05ba101aae1
Validity
Not Before: Nov 4 13:00:07 2025 GMT
Not After : Nov 5 13:00:07 2025 GMT
Subject: CN=7bd1b228060d1a720c0a3f28b33801d3f7787325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e1:df:b9:c4:ca:c4:c0:cf:30:26:89:34:0d:
91:ae:4f:c3:ff:19:5d:cf:38:84:a0:9d:7c:9a:8a:
24:cb:73:ee:82:63:40:75:ea:5e:6a:81:14:c1:8c:
f8:a5:13:20:7b:4b:08:ac:d4:5c:25:fa:64:08:cf:
8e:8b:e3:d6:1c:ca:28:8c:dd:f3:f1:81:0c:9e:85:
e5:6c:d9:7f:59:28:ff:0a:eb:b9:bb:17:77:64:ec:
b9:2e:7c:85:e6:73:2f:90:a4:82:e6:3a:78:11:c1:
de:d9:87:17:a3:90:23:8e:bf:fb:b0:81:d7:f6:74:
0d:77:bf:39:5a:1b:aa:db:dd:03:ec:71:89:48:81:
b5:0e:96:31:21:b1:e3:9b:3c:03:13:09:48:ed:f8:
ca:6a:f1:d2:7a:9a:95:0a:48:fe:5d:24:9f:59:ce:
f4:e0:37:5d:59:16:c3:b5:4d:a8:ae:5b:b5:9b:bf:
77:0b:e6:a5:58:0f:87:6a:19:e0:0a:d6:61:cc:d0:
a3:f7:a8:18:fd:10:c4:0e:5e:fd:97:a7:5d:d6:3f:
66:4f:d7:ed:6e:89:90:14:10:9f:1e:55:b1:a3:62:
74:e2:10:4e:84:9c:93:c5:b8:57:03:73:c6:30:8a:
81:c1:bb:34:98:1c:8f:7b:57:18:e4:88:37:70:84:
53:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D1:B2:28:06:0D:1A:72:0C:0A:3F:28:B3:38:01:D3:F7:78:73:25
X509v3 Authority Key Identifier:
keyid:90:8A:7E:A7:12:80:1E:4C:8F:EB:85:B3:F0:78:D0:5B:A1:01:AA:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:e9:16:e5:4f:79:25:3d:26:40:01:7c:7e:f1:0a:9c:62:9a:
04:95:bb:2e:ab:09:46:c8:d6:6b:bc:46:a4:26:a7:38:f8:3e:
58:72:b6:d9:53:0d:27:72:a9:79:dd:65:8f:1a:34:c3:05:2f:
5c:c7:3c:25:04:bb:31:64:68:24:c3:52:e1:82:e5:04:1d:7c:
c5:5e:d9:fc:d6:76:f7:ee:c9:c5:f0:a0:77:ff:94:99:40:bf:
21:1a:07:42:c8:fb:8e:f2:17:70:0c:fd:63:b5:3c:0e:bc:2b:
10:d0:a4:15:fc:d5:a6:c4:1b:c9:e5:ed:51:c9:39:3e:fb:c9:
aa:7c:1b:48:76:73:92:95:b2:f1:41:86:97:db:12:7a:9a:b4:
2f:43:4c:9a:b5:45:2b:92:e5:ee:cc:b7:2e:aa:bf:f5:ad:8c:
5c:08:1a:27:03:b1:c6:02:63:9a:74:60:ad:04:9a:db:ae:c9:
ad:e7:b0:31:4b:34:91:bd:ad:55:77:0e:df:73:ca:82:0b:fa:
fa:59:3c:97:36:53:20:31:9c:66:fa:44:02:13:f1:0e:34:5d:
e6:96:10:06:a4:4f:64:81:6b:d5:ca:8e:a8:70:3f:00:ab:a6:
40:3b:08:9f:fc:35:30:39:5e:ed:35:1e:5a:c2:c8:c3:f8:93:
2a:b4:c9:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:52:11 2025 by rpki-client