Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
File: kIp-pxKAHkyP64Wz8HjQW6EBquE.mft (raw, json)
Hash identifier: FB9aoeCTvInCpatQWrJn8c0+7+3yH5MM6Z20VflcT1U=
Subject key identifier: 71:C3:D8:B3:9E:1A:EC:D0:E5:75:43:FF:0C:94:4E:C8:18:26:F8:0E
Authority key identifier: 90:8A:7E:A7:12:80:1E:4C:8F:EB:85:B3:F0:78:D0:5B:A1:01:AA:E1
Certificate issuer: /CN=908a7ea712801e4c8feb85b3f078d05ba101aae1
Certificate serial: 0198D65F3ED802830A5F8560CA78445BFE20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 10:00:22 +0000
Manifest this update: Sat 23 Aug 2025 10:00:22 +0000
Manifest next update: Sun 24 Aug 2025 10:00:22 +0000
Files and hashes: 1: 5otqJznFN06_a5lb9QnpMCQFqQI.roa (hash: NxQ406RCVAu9Gv14nckV258lPo22JEB7yBMbejU2osI=)
2: kIp-pxKAHkyP64Wz8HjQW6EBquE.crl (hash: Q2WV35tcSi0Ni0ueYcV8LLtnuxfPXK0MUhZlDPaScm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:3e:d8:02:83:0a:5f:85:60:ca:78:44:5b:fe:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908a7ea712801e4c8feb85b3f078d05ba101aae1
Validity
Not Before: Aug 23 10:00:22 2025 GMT
Not After : Aug 24 10:00:22 2025 GMT
Subject: CN=71c3d8b39e1aecd0e57543ff0c944ec81826f80e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:13:37:91:0b:0f:d6:c1:b9:bd:4a:38:10:a1:
63:22:d7:55:02:a2:68:15:c3:83:9e:50:c9:e3:e3:
fe:db:7e:39:1f:86:a9:c2:99:98:10:e5:0f:67:96:
88:6d:94:fd:c1:8c:6f:df:04:29:f5:78:ac:1f:3a:
d0:22:ca:41:9e:29:2e:a8:3c:0b:51:8c:f1:1f:e2:
c3:8c:c4:a3:71:b9:3f:14:6c:0d:b9:e2:4a:7b:23:
a6:13:73:7d:29:d7:d5:60:99:12:86:52:ae:96:77:
41:8f:0c:be:f7:ea:17:c4:72:bc:66:85:88:ce:8e:
0d:57:76:4d:00:f2:f8:82:e7:16:23:f6:28:69:22:
16:66:c9:ea:51:e8:52:2e:a8:ea:b2:6e:b2:d7:4e:
89:3a:cf:8e:43:cd:fd:52:fa:e0:59:53:58:a0:be:
20:e9:a3:78:7b:72:cd:f2:78:48:c8:5a:90:fc:50:
e7:1a:15:3e:32:6a:c2:52:e1:c4:f3:2e:45:76:48:
3d:bc:30:45:a5:44:16:3e:b6:a7:4d:05:0c:c4:87:
e2:61:64:c7:3c:91:f7:72:dc:73:5b:3f:fb:06:6c:
55:11:d7:f0:b1:9e:af:0e:ac:14:a7:88:9c:49:44:
fe:1f:d5:d3:f1:54:3e:b0:ff:19:26:49:ea:5b:84:
08:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C3:D8:B3:9E:1A:EC:D0:E5:75:43:FF:0C:94:4E:C8:18:26:F8:0E
X509v3 Authority Key Identifier:
keyid:90:8A:7E:A7:12:80:1E:4C:8F:EB:85:B3:F0:78:D0:5B:A1:01:AA:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:48:45:f5:aa:93:61:04:42:88:d1:5c:36:20:83:b8:99:f5:
e9:2d:89:81:de:e0:b3:cc:21:ba:95:41:bd:58:d1:dd:4f:dd:
03:c2:c8:07:4b:02:36:a8:b2:af:d2:a4:1e:f6:6d:19:9e:0c:
40:e1:b0:a7:c4:d0:49:9a:74:4f:c8:40:64:50:7c:58:51:67:
54:e0:1d:06:0e:8f:ff:20:c4:43:6f:48:18:15:79:3d:cb:8e:
d3:79:5d:2d:a0:49:75:9a:9f:63:7f:06:94:f4:df:5f:85:5d:
ab:f3:50:8d:5d:17:b2:3a:47:3c:51:55:90:e2:f7:52:74:d4:
82:78:13:b5:92:52:0e:d3:70:55:e3:48:71:8a:0c:55:53:08:
1d:b5:e3:33:75:f5:87:59:79:49:fe:63:8a:60:49:b9:37:49:
57:1f:57:51:68:60:76:a7:12:39:2a:54:ff:cf:0e:33:5a:2a:
f6:bb:ca:84:65:08:a9:8e:c6:57:2b:4e:ee:12:24:5d:ff:8a:
d1:f5:28:10:54:27:d5:c6:8c:81:6c:11:a8:6c:3e:cc:eb:a3:
ab:72:c2:77:91:f6:65:35:55:8b:4e:43:9a:6d:93:80:38:3d:
80:c0:01:75:46:d1:ac:44:90:ae:5b:ad:f6:9b:9f:ed:57:c6:
4b:4d:f3:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:05:59 2025 by rpki-client