Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
File: kIp-pxKAHkyP64Wz8HjQW6EBquE.mft (raw, json)
Hash identifier: cxu0mliKSYBDTULv78Apt278Tt/uzpjcW0E3/a4hvCM=
Subject key identifier: 5C:36:DA:B6:E1:03:6B:44:4F:52:1D:C5:B0:37:80:71:5B:C0:36:3C
Authority key identifier: 90:8A:7E:A7:12:80:1E:4C:8F:EB:85:B3:F0:78:D0:5B:A1:01:AA:E1
Certificate issuer: /CN=908a7ea712801e4c8feb85b3f078d05ba101aae1
Certificate serial: 0197B6A116235148B90884D0075D6A7D67CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 13:01:39 +0000
Manifest this update: Sat 28 Jun 2025 13:01:39 +0000
Manifest next update: Sun 29 Jun 2025 13:01:39 +0000
Files and hashes: 1: 5otqJznFN06_a5lb9QnpMCQFqQI.roa (hash: NxQ406RCVAu9Gv14nckV258lPo22JEB7yBMbejU2osI=)
2: kIp-pxKAHkyP64Wz8HjQW6EBquE.crl (hash: 8BlPfC5jle/9quyoqzZHM7x1QFHJ9tUMTgMFImw7sjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:16:23:51:48:b9:08:84:d0:07:5d:6a:7d:67:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908a7ea712801e4c8feb85b3f078d05ba101aae1
Validity
Not Before: Jun 28 13:01:39 2025 GMT
Not After : Jun 29 13:01:39 2025 GMT
Subject: CN=5c36dab6e1036b444f521dc5b03780715bc0363c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ba:e0:c8:c8:25:32:c8:e3:d6:4a:a1:1d:b1:
56:e9:f2:f9:5e:92:89:60:e5:ac:48:d8:36:6a:97:
d8:c4:81:83:ab:27:a8:a8:e3:35:3c:b6:c9:b3:07:
43:ea:40:df:99:32:21:a2:9a:87:27:ff:93:4b:92:
9f:54:e7:24:23:20:ff:8e:3c:97:65:9f:03:61:38:
a9:ac:13:fe:e4:78:bf:2d:4b:bf:86:08:f5:19:97:
13:5c:18:93:74:6b:4e:a3:fe:88:e8:76:2e:f6:5c:
7d:6a:ab:ce:c5:77:4e:6a:c1:29:00:7c:c7:2a:9c:
36:66:09:86:e9:c2:54:d3:11:38:8a:15:62:6e:7e:
36:b8:ce:fa:32:58:b4:b3:ff:68:8d:48:6e:af:35:
1d:2d:ef:d2:f3:89:8d:c4:5e:d9:2d:91:40:7e:fb:
1f:9c:5d:36:81:59:26:7e:7c:95:3d:9d:fe:4a:62:
c8:dc:30:31:dc:90:ca:be:b5:b0:c2:76:1c:d5:0d:
b3:c8:3c:39:00:db:37:1c:e0:ff:49:4b:9a:51:9f:
a2:77:e5:a2:f5:16:88:20:90:fb:ee:bc:55:6e:94:
c2:34:0c:4c:f1:32:44:57:a9:83:10:3c:37:a7:de:
2a:16:f6:ab:37:bf:1d:57:2b:d0:21:80:a2:29:c0:
08:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:36:DA:B6:E1:03:6B:44:4F:52:1D:C5:B0:37:80:71:5B:C0:36:3C
X509v3 Authority Key Identifier:
keyid:90:8A:7E:A7:12:80:1E:4C:8F:EB:85:B3:F0:78:D0:5B:A1:01:AA:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:27:2a:5e:8d:01:77:85:8a:c5:20:43:f9:94:f3:9c:8d:91:
4e:bd:c6:52:f1:63:51:eb:a0:0d:e0:ce:82:b5:5d:5a:99:66:
40:be:26:c8:ed:3b:4a:a6:8a:08:ad:4c:c8:20:f0:0c:18:83:
dc:c0:7b:cd:ae:0a:78:29:38:3a:f9:04:24:88:37:b3:e7:32:
e6:4b:ec:2e:88:ca:9b:33:3e:43:b1:b9:76:44:97:e5:a0:55:
dc:5e:f5:ea:a2:ba:ad:ef:40:b5:f2:7b:9c:ee:f9:1d:09:f5:
cf:df:ac:b7:d0:20:eb:6f:8b:bb:48:db:b4:89:8e:c1:47:dc:
cc:3d:ab:53:e3:ac:30:a0:30:4d:61:bc:9a:ee:34:8d:6b:41:
44:ac:52:0f:06:a3:c3:c7:d5:52:73:71:50:60:26:e9:82:22:
af:db:94:be:6a:ef:74:fe:23:98:8b:1a:2b:5b:4a:21:f0:bf:
ff:8e:e3:34:76:44:88:83:bf:9b:6b:05:70:4b:f3:ed:e3:ef:
bc:54:a3:7a:5e:d4:8b:83:f4:9d:b3:c8:be:06:a1:54:08:2b:
db:b4:61:c0:55:53:4b:ac:d9:fe:06:19:4a:9d:c7:ba:74:f9:
9d:a4:77:eb:60:fd:53:f8:eb:7d:21:e7:f9:b9:d7:31:27:b8:
e1:d0:81:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:48:51 2025 by rpki-client