Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
File: kIp-pxKAHkyP64Wz8HjQW6EBquE.mft (raw, json)
Hash identifier: KrmxubsEvFXWfe+4mww15ta1wB+q2b2A4nganSr3Dss=
Subject key identifier: A3:8D:AD:B4:B6:E4:05:A4:2E:C5:3B:21:62:B6:78:68:1F:68:36:9F
Authority key identifier: 90:8A:7E:A7:12:80:1E:4C:8F:EB:85:B3:F0:78:D0:5B:A1:01:AA:E1
Certificate issuer: /CN=908a7ea712801e4c8feb85b3f078d05ba101aae1
Certificate serial: 019772D184C8FA718683D910306672DF41EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
Manifest number: 1592
Signing time: Sun 15 Jun 2025 09:00:22 +0000
Manifest this update: Sun 15 Jun 2025 09:00:22 +0000
Manifest next update: Mon 16 Jun 2025 09:00:22 +0000
Files and hashes: 1: 5otqJznFN06_a5lb9QnpMCQFqQI.roa (hash: NxQ406RCVAu9Gv14nckV258lPo22JEB7yBMbejU2osI=)
2: kIp-pxKAHkyP64Wz8HjQW6EBquE.crl (hash: NIJAXIliX0AYSQH7ksbxV/rNprr1Im7ukn6fam/NWsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 09:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:d1:84:c8:fa:71:86:83:d9:10:30:66:72:df:41:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908a7ea712801e4c8feb85b3f078d05ba101aae1
Validity
Not Before: Jun 15 09:00:22 2025 GMT
Not After : Jun 16 09:00:22 2025 GMT
Subject: CN=a38dadb4b6e405a42ec53b2162b678681f68369f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b1:05:4e:5d:a8:d4:7f:9a:d8:cd:48:34:dc:
c9:39:6b:df:5f:e1:32:04:42:2a:79:ba:af:11:a8:
9a:ef:a3:93:0d:f7:2f:29:c3:f9:74:4d:ce:72:43:
aa:c0:d8:23:ac:0c:10:52:e2:09:46:c3:4a:e0:8b:
ce:ca:f5:ed:ca:ab:e6:1d:76:a8:88:f3:96:e2:8b:
98:e7:df:91:ea:65:b1:6a:96:44:aa:59:42:7d:ab:
b4:81:33:0b:6f:a5:af:2d:92:bc:0e:c3:b2:71:f6:
fc:04:8f:32:7b:f6:ea:41:88:fb:ee:1c:14:1c:3f:
c4:8b:d1:70:cb:80:1b:32:c2:ad:a8:bb:62:2b:52:
83:9b:98:e9:d2:a1:9e:5d:8b:e8:bf:fd:00:93:12:
fe:ce:08:08:b5:38:b2:8b:9e:36:30:d8:ad:ee:d2:
44:46:26:b4:88:47:f2:8c:07:fb:8c:73:be:45:9d:
76:2a:e3:5c:d8:91:da:88:58:d1:10:0d:e0:36:05:
ca:81:ea:4c:7a:70:04:b9:c5:d2:65:e6:80:50:1c:
5a:9b:cf:45:5b:29:da:f8:42:61:d9:b2:78:53:75:
3e:cc:40:c1:40:cd:34:44:26:94:61:b7:48:8b:52:
a0:ef:b0:ba:45:e1:8f:a9:75:95:63:56:3b:73:79:
e0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:8D:AD:B4:B6:E4:05:A4:2E:C5:3B:21:62:B6:78:68:1F:68:36:9F
X509v3 Authority Key Identifier:
keyid:90:8A:7E:A7:12:80:1E:4C:8F:EB:85:B3:F0:78:D0:5B:A1:01:AA:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:bb:af:5f:50:8c:9e:fc:3c:a5:a3:91:b7:14:c5:58:6e:34:
73:5d:75:5d:a0:27:29:61:be:c8:51:7b:f0:19:29:93:7b:02:
87:b2:02:cb:57:be:59:97:4e:7d:0b:32:81:ef:72:c4:b7:1d:
4c:11:90:c2:66:d5:f0:0d:b4:f3:3b:f0:47:2d:7f:39:c7:5d:
e5:9c:bc:3d:c9:58:5a:5c:0a:02:b7:88:f2:c0:9f:ab:f9:da:
62:b3:77:1e:e6:76:aa:0e:04:e4:7d:ca:f3:18:aa:3c:b5:10:
4b:16:df:21:5b:3a:6d:44:11:9e:96:64:72:23:77:81:39:c5:
b5:3a:fa:06:ad:77:17:f5:1e:d0:ed:d6:a9:8a:f8:74:69:32:
0c:c6:01:20:9b:01:df:a7:12:97:5b:81:d7:26:11:c6:0b:fd:
18:38:45:9c:84:d6:69:d2:ba:81:cb:ec:64:06:57:9a:0d:08:
ca:35:73:ac:39:04:eb:79:be:10:f0:77:76:f7:87:85:e7:0b:
a5:a3:d2:b6:de:e8:f2:d9:8d:cc:1a:96:f1:0a:90:f7:94:3f:
30:a8:ba:4f:ad:a0:a0:21:98:42:a4:75:07:32:59:ef:93:6c:
de:d2:6d:56:eb:7b:ef:41:4c:c9:22:b6:02:78:e2:05:f9:41:
11:62:fd:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:56:29 2025 by rpki-client