Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
File: kIp-pxKAHkyP64Wz8HjQW6EBquE.mft (raw, json)
Hash identifier: dSM2es613GGgp2Bc2dhQ0L1m62+SWhr4toMsJkRPJs8=
Subject key identifier: 97:0D:FA:64:11:C7:D5:0C:E5:34:74:AD:32:93:08:84:85:EB:1C:FC
Authority key identifier: 90:8A:7E:A7:12:80:1E:4C:8F:EB:85:B3:F0:78:D0:5B:A1:01:AA:E1
Certificate issuer: /CN=908a7ea712801e4c8feb85b3f078d05ba101aae1
Certificate serial: 019873E2A3F1ADED10C47C3FF2D983403ED5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 07:01:29 +0000
Manifest this update: Mon 04 Aug 2025 07:01:29 +0000
Manifest next update: Tue 05 Aug 2025 07:01:29 +0000
Files and hashes: 1: 5otqJznFN06_a5lb9QnpMCQFqQI.roa (hash: NxQ406RCVAu9Gv14nckV258lPo22JEB7yBMbejU2osI=)
2: kIp-pxKAHkyP64Wz8HjQW6EBquE.crl (hash: K6PHHxt/On/fVXxYfpWrqFWRpu3nXegq+Z4cAieuRzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:a3:f1:ad:ed:10:c4:7c:3f:f2:d9:83:40:3e:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908a7ea712801e4c8feb85b3f078d05ba101aae1
Validity
Not Before: Aug 4 07:01:29 2025 GMT
Not After : Aug 5 07:01:29 2025 GMT
Subject: CN=970dfa6411c7d50ce53474ad3293088485eb1cfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5c:c0:73:25:1c:9c:10:de:02:77:a7:26:24:
cf:be:a4:99:70:48:0c:bc:b1:57:90:24:66:93:83:
e0:b4:df:ba:de:e6:b4:dd:49:f2:59:ef:c9:89:5b:
61:23:43:59:1a:1c:9f:41:d8:87:c1:a5:55:e9:e3:
82:52:cd:7c:10:45:9e:11:55:dd:5a:76:13:c9:a1:
f2:21:ed:67:74:31:1a:0e:35:a0:03:fb:5e:e7:05:
94:4c:dc:a8:39:0a:50:9f:52:4a:d2:4e:e4:6d:52:
3b:58:18:24:53:fd:9f:ff:59:f9:b0:4b:d0:81:a8:
85:ca:63:ee:65:7b:b1:41:fd:f1:ea:4f:e2:18:04:
cd:8f:0c:70:f4:0a:6b:0a:49:6d:82:24:27:2a:cf:
df:5e:87:13:6f:8c:9e:72:a0:e2:67:5f:54:b4:ad:
44:1a:e3:f9:f4:8a:f6:aa:3c:78:0a:34:ee:05:b2:
e9:76:d0:e5:a5:6f:54:59:c4:04:82:a3:a0:fc:4b:
19:c8:90:b8:e2:7e:22:e2:45:29:b7:a8:43:b6:15:
c4:8c:d9:de:07:06:6d:29:93:98:78:16:94:48:fb:
06:7b:1a:46:7e:ce:0c:ce:2f:fb:dd:3f:0b:13:05:
06:1d:c5:df:d1:65:34:12:fc:28:c0:b8:dc:44:38:
e7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:0D:FA:64:11:C7:D5:0C:E5:34:74:AD:32:93:08:84:85:EB:1C:FC
X509v3 Authority Key Identifier:
keyid:90:8A:7E:A7:12:80:1E:4C:8F:EB:85:B3:F0:78:D0:5B:A1:01:AA:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:a9:23:db:0b:15:6c:d7:82:9c:34:60:ad:0b:f3:60:b1:f5:
0c:02:67:09:4e:cf:2f:55:88:ba:36:9d:6a:05:e8:5d:e7:28:
e1:e3:49:59:34:cd:0a:3f:30:bd:9b:05:72:49:45:a1:bf:30:
d1:9d:7b:8e:65:26:36:2e:69:c8:0d:ab:8e:ec:db:e6:34:a3:
81:53:f7:ab:74:31:b0:86:72:bd:2c:bd:42:2f:63:ca:8b:c9:
e9:4b:85:fd:67:53:cf:2b:08:e6:18:96:86:64:18:39:11:dc:
75:9c:ea:d6:0b:bb:fe:d4:a9:d1:96:f3:3c:45:7c:bd:61:9f:
0a:94:4c:db:28:77:b1:33:35:34:4e:1a:87:a7:f1:c5:d9:ed:
f2:52:8b:54:cd:74:67:ff:5b:74:2f:5d:31:d0:c2:9d:11:1f:
0c:50:36:c1:b6:d9:08:e7:60:d0:57:e0:02:f5:cd:9f:15:9a:
7f:a5:5d:dc:20:b3:24:32:ac:53:79:a8:48:05:35:64:94:ea:
71:34:01:4c:26:bf:66:cf:db:c1:57:48:d1:7a:06:9d:be:c9:
61:84:f3:5e:bf:fc:4e:b9:01:19:85:2f:ce:cf:6d:23:27:59:
f0:ee:5e:1b:85:80:4f:54:b5:58:d7:b4:1f:63:ba:c7:3c:f0:
41:29:5b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:06:45 2025 by rpki-client