Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
File: kIp-pxKAHkyP64Wz8HjQW6EBquE.mft (raw, json)
Hash identifier: Hyjmn+Rr6uA8vfXAmdm45/thAxPzDvulDgR3hWVLktk=
Subject key identifier: 32:0C:F6:C3:41:0B:82:BD:0F:2A:F2:6A:D9:8C:1C:C4:3C:62:32:13
Authority key identifier: 90:8A:7E:A7:12:80:1E:4C:8F:EB:85:B3:F0:78:D0:5B:A1:01:AA:E1
Certificate issuer: /CN=908a7ea712801e4c8feb85b3f078d05ba101aae1
Certificate serial: 0199FDD95A74997119126DE9A71C62C79CDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 19:01:44 +0000
Manifest this update: Sun 19 Oct 2025 19:01:44 +0000
Manifest next update: Mon 20 Oct 2025 19:01:44 +0000
Files and hashes: 1: 5otqJznFN06_a5lb9QnpMCQFqQI.roa (hash: NxQ406RCVAu9Gv14nckV258lPo22JEB7yBMbejU2osI=)
2: kIp-pxKAHkyP64Wz8HjQW6EBquE.crl (hash: 4lwMs6/Ss58FLopHXJ+2yX7IGgDOCfm/fJXh5M8hQG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:5a:74:99:71:19:12:6d:e9:a7:1c:62:c7:9c:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908a7ea712801e4c8feb85b3f078d05ba101aae1
Validity
Not Before: Oct 19 19:01:44 2025 GMT
Not After : Oct 20 19:01:44 2025 GMT
Subject: CN=320cf6c3410b82bd0f2af26ad98c1cc43c623213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:06:f1:87:32:2f:ea:35:bb:54:8e:58:1d:d7:
83:29:81:ba:79:ad:4c:9d:f3:14:96:3d:42:c0:2e:
e2:06:fd:e9:05:f5:fe:b3:67:c5:2b:85:ac:3f:00:
eb:50:29:38:e3:28:16:28:a0:69:54:63:12:57:7c:
69:f0:13:1d:5e:22:a8:d4:86:35:0e:77:34:30:b8:
2b:48:29:d9:ed:f1:dd:23:46:30:a9:3b:c6:2f:7b:
4b:92:8e:25:e7:2b:f8:83:a9:46:48:d0:c2:d8:d3:
d4:37:5d:35:78:ff:9b:71:ef:3c:87:f1:05:0a:c0:
d1:1e:dc:f0:48:8e:5e:03:f6:9e:e8:19:f6:19:7d:
2f:7e:d4:52:b2:91:0a:4b:f8:e3:fb:8c:3c:13:89:
7d:41:93:04:61:f1:f2:b0:2a:cd:9e:0f:7b:7f:cc:
db:d3:d4:dc:36:fe:ba:80:3b:21:ad:fe:b0:3a:35:
41:5f:17:e2:94:87:73:2a:6e:77:76:31:e3:26:25:
44:81:df:0e:9c:38:62:90:b4:d8:7a:f7:ed:31:2e:
92:e2:06:b0:c2:58:95:d8:ab:78:8f:35:e1:ec:d7:
33:26:e8:3c:2e:33:d7:8c:26:02:5d:cf:14:66:89:
9b:44:7b:d5:23:63:45:a8:6c:94:01:08:ea:63:ac:
97:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:0C:F6:C3:41:0B:82:BD:0F:2A:F2:6A:D9:8C:1C:C4:3C:62:32:13
X509v3 Authority Key Identifier:
keyid:90:8A:7E:A7:12:80:1E:4C:8F:EB:85:B3:F0:78:D0:5B:A1:01:AA:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:b4:ef:1a:08:57:d7:8a:4b:a6:f1:b1:63:cb:20:1c:03:e1:
f5:63:70:23:de:c5:c1:f6:f0:aa:8e:37:1a:53:73:50:9b:e0:
81:a8:81:64:d0:97:45:00:10:96:72:7a:04:7a:bc:5e:3e:83:
4e:07:25:75:63:ca:6d:4e:1d:b2:15:9c:ae:da:ab:f5:0c:ba:
65:cf:62:31:d1:d4:68:ad:77:23:e7:80:e3:38:fd:19:86:1c:
50:28:c9:44:c3:9e:b9:28:16:08:70:a9:46:9a:22:ba:8f:7b:
35:ec:58:22:3f:a5:9c:eb:38:d9:dd:15:3a:d0:9d:f8:00:cb:
ab:96:1d:86:a5:b8:c1:ee:67:08:b1:d5:1f:be:c8:14:59:5e:
c6:3a:b0:07:a5:2f:5b:8e:59:e8:d4:94:a5:0d:97:81:52:67:
9e:48:c9:39:44:39:5a:a0:bc:a5:f7:cc:46:e7:00:40:b4:3d:
e5:aa:74:c7:b3:ee:f9:c7:42:bf:59:06:33:10:59:3d:b8:03:
df:51:e9:1b:d4:ba:98:77:6f:0b:f0:12:ea:34:05:cf:6b:d6:
83:5e:bc:92:dd:b7:5b:90:2e:d9:f7:17:02:8e:6f:aa:51:45:
13:50:d2:eb:bc:89:d0:86:49:6a:8e:1c:21:cf:6d:d0:00:a3:
00:82:28:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:36:55 2025 by rpki-client