Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.mft
File: klPiFMjlpvQTRb5oL2gmVbGr6ls.mft (raw, json)
Hash identifier: yM9e+sjRaju5hPwLgVjJv9FNkQG9pqzvNzAm1+niLI0=
Subject key identifier: 7D:D4:19:1C:DA:04:31:33:04:4B:3D:FE:65:DD:6E:72:D7:A9:3C:78
Authority key identifier: 92:53:E2:14:C8:E5:A6:F4:13:45:BE:68:2F:68:26:55:B1:AB:EA:5B
Certificate issuer: /CN=9253e214c8e5a6f41345be682f682655b1abea5b
Certificate serial: 0198D583DF8030A0BEABA7069127E7712984
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klPiFMjlpvQTRb5oL2gmVbGr6ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.mft
Manifest number: 0605
Signing time: Sat 23 Aug 2025 06:00:46 +0000
Manifest this update: Sat 23 Aug 2025 06:00:46 +0000
Manifest next update: Sun 24 Aug 2025 06:00:46 +0000
Files and hashes: 1: g9a2AgSYQsELLiSB_-OegEcbQ9I.roa (hash: ImJVXRp/ldmW9cQsi6+awLuGwVI0Qm+zTXoZ5uHaLy0=)
2: klPiFMjlpvQTRb5oL2gmVbGr6ls.crl (hash: bgk9zpsS1U1uw/15YNWo4e3doCddHJWp3urk2DB2uAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/klPiFMjlpvQTRb5oL2gmVbGr6ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:df:80:30:a0:be:ab:a7:06:91:27:e7:71:29:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9253e214c8e5a6f41345be682f682655b1abea5b
Validity
Not Before: Aug 23 06:00:46 2025 GMT
Not After : Aug 24 06:00:46 2025 GMT
Subject: CN=7dd4191cda043133044b3dfe65dd6e72d7a93c78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4d:45:04:40:46:a1:26:70:b3:6f:23:da:dd:
4e:65:11:1d:0b:b5:de:60:be:4c:39:c8:6a:79:dc:
ab:0e:1f:41:86:06:04:b4:2e:09:a4:78:7c:dc:3c:
98:43:56:f9:a9:36:3e:8d:61:64:d7:e0:d6:8f:98:
3f:00:36:61:fc:95:95:a3:4c:74:08:12:45:bb:4d:
d3:f2:d5:fd:9b:fd:6a:b4:d7:2a:01:0d:48:6e:30:
1d:5c:0d:48:e1:87:04:63:2d:c8:a1:c8:30:73:b3:
63:40:bc:53:bf:1d:ca:5f:d5:00:d6:27:64:e0:db:
4c:28:c9:2e:92:46:2f:6c:19:03:a4:e4:e2:f7:58:
ad:83:8f:88:51:82:0a:9c:cb:f2:13:25:f0:3a:42:
e3:99:3d:5b:b7:bb:c1:c3:e9:a7:a0:9c:2c:32:00:
56:47:9a:cc:6b:9d:cb:96:3f:cf:d6:f8:70:be:d3:
89:37:19:bd:28:88:ea:a2:de:2b:0d:45:01:37:f4:
03:a4:3a:ed:d8:2c:8f:88:0a:5f:05:3b:80:39:57:
3f:4f:96:50:69:0d:1f:07:31:8b:17:5c:93:77:a6:
d4:c5:b0:54:b9:49:5f:50:f1:40:e1:87:1a:07:eb:
a8:cc:0c:29:cc:e7:78:4b:74:5d:1b:dd:0d:97:71:
49:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:D4:19:1C:DA:04:31:33:04:4B:3D:FE:65:DD:6E:72:D7:A9:3C:78
X509v3 Authority Key Identifier:
keyid:92:53:E2:14:C8:E5:A6:F4:13:45:BE:68:2F:68:26:55:B1:AB:EA:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klPiFMjlpvQTRb5oL2gmVbGr6ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:8d:81:64:a0:63:53:9e:96:da:3a:30:77:b6:90:d5:62:f7:
8c:d7:af:ba:27:71:28:8e:90:b2:ad:fd:61:ed:97:26:5b:b1:
4a:ef:46:fc:64:ef:6c:75:ee:6b:aa:19:a9:bb:33:cf:87:df:
7a:6b:e1:01:e9:13:39:45:99:be:d2:3e:c2:1d:35:9f:bf:d4:
17:d4:f8:0f:ff:ff:e6:8b:99:ed:cf:f7:ea:26:0d:64:8e:ba:
d0:1e:10:48:3c:ed:c0:8d:39:b9:ae:6f:86:c7:d6:ef:7b:25:
33:2e:d8:43:09:56:06:9c:c8:12:96:84:b5:a2:2d:d6:e7:e4:
47:98:eb:80:90:d9:5e:5c:cd:7d:78:9b:1c:e0:9e:89:88:1c:
75:56:88:09:b6:79:7b:a6:b0:fd:56:06:00:ca:69:1a:d0:40:
f9:68:c5:27:df:8f:21:1a:05:b6:bb:a8:0f:9e:7a:0e:70:c7:
0d:05:99:6c:ca:55:24:8e:c9:0f:c2:c9:b8:79:f4:07:91:0c:
8e:f3:9c:35:25:ec:aa:55:35:eb:09:8a:b4:b2:1e:47:e3:87:
ef:e4:85:8e:09:d5:27:3b:6f:b4:31:a5:9b:14:ac:02:74:37:
a9:80:5e:fb:db:c4:f4:9e:e2:f4:31:a9:f0:d1:9b:03:6a:b9:
80:0c:49:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:26 2025 by rpki-client