Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.mft
File: klPiFMjlpvQTRb5oL2gmVbGr6ls.mft (raw, json)
Hash identifier: r4rSd3YkHUz19fYpE1P9PX7LAekXq0B+SzMQCDXFieA=
Subject key identifier: C9:BC:46:72:90:7C:37:F4:3B:10:85:57:FE:61:D4:AF:F8:F6:07:83
Authority key identifier: 92:53:E2:14:C8:E5:A6:F4:13:45:BE:68:2F:68:26:55:B1:AB:EA:5B
Certificate issuer: /CN=9253e214c8e5a6f41345be682f682655b1abea5b
Certificate serial: 01984889B48F715601ECB475DA0E2AD43FDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klPiFMjlpvQTRb5oL2gmVbGr6ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.mft
Manifest number: 05BC
Signing time: Sat 26 Jul 2025 21:00:40 +0000
Manifest this update: Sat 26 Jul 2025 21:00:40 +0000
Manifest next update: Sun 27 Jul 2025 21:00:40 +0000
Files and hashes: 1: g9a2AgSYQsELLiSB_-OegEcbQ9I.roa (hash: ImJVXRp/ldmW9cQsi6+awLuGwVI0Qm+zTXoZ5uHaLy0=)
2: klPiFMjlpvQTRb5oL2gmVbGr6ls.crl (hash: GkgxBtFX3Q7gsHnarANa1xbj49BVuKK8tFjmlN1Ju4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/klPiFMjlpvQTRb5oL2gmVbGr6ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:89:b4:8f:71:56:01:ec:b4:75:da:0e:2a:d4:3f:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9253e214c8e5a6f41345be682f682655b1abea5b
Validity
Not Before: Jul 26 21:00:40 2025 GMT
Not After : Jul 27 21:00:40 2025 GMT
Subject: CN=c9bc4672907c37f43b108557fe61d4aff8f60783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:93:cf:ca:20:37:2a:90:cf:52:a3:2e:f6:20:
a5:6c:6f:7e:39:7b:5e:fd:72:a5:cd:4d:56:38:10:
e2:a5:dc:1b:26:b1:f6:6d:31:82:88:d5:ce:97:a1:
2e:71:ee:7a:55:41:ce:35:f1:77:85:e7:b3:5f:89:
9a:f6:80:d6:0a:33:a1:b4:cd:db:92:fa:38:f6:87:
b2:14:38:23:0b:28:a7:ff:e8:d6:e4:7b:85:15:9c:
40:0b:9d:73:4d:26:6b:f9:35:0d:f6:91:ce:5a:60:
af:55:8f:f1:85:02:44:c2:85:08:f9:f9:81:3c:d3:
99:f2:59:dc:f1:28:22:57:50:b2:23:6e:49:f0:0b:
44:b4:4e:e3:36:fe:50:1a:9a:a5:68:d5:6f:d1:ab:
aa:38:33:de:58:5a:a2:7f:77:cf:c7:d6:11:ed:a5:
d6:61:b1:b9:27:1d:3e:af:38:ac:47:bd:98:06:24:
4b:69:90:93:ea:cb:d0:3f:3c:3e:39:63:f0:b3:f1:
e8:e1:0d:3c:31:3a:50:86:d4:a0:a1:ca:67:97:3f:
b3:93:e8:69:2e:af:8b:7a:87:05:cc:49:01:3d:ba:
2f:ea:44:e3:e0:aa:d1:e6:94:e6:64:eb:7d:28:90:
b9:3c:c6:cc:a2:55:42:ea:02:a9:0f:a2:ff:7a:d7:
a5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:BC:46:72:90:7C:37:F4:3B:10:85:57:FE:61:D4:AF:F8:F6:07:83
X509v3 Authority Key Identifier:
keyid:92:53:E2:14:C8:E5:A6:F4:13:45:BE:68:2F:68:26:55:B1:AB:EA:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klPiFMjlpvQTRb5oL2gmVbGr6ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:89:8c:58:42:c2:b5:30:f7:43:8d:01:85:02:ec:57:48:bd:
dc:3f:3a:21:38:f3:1e:0a:b3:14:f6:a0:50:46:28:bd:c3:7d:
39:20:30:0f:83:f9:aa:6a:c1:e7:16:ac:1c:5f:4a:7a:44:fa:
9c:4a:90:7f:21:5d:27:38:7a:06:40:d3:f0:f1:5c:d0:ae:55:
b4:5d:19:fc:77:88:65:c0:4b:07:59:2d:4a:84:29:35:07:4c:
de:84:b4:ec:69:f5:a1:ef:d0:1e:bc:98:e2:fb:8d:0a:6a:5f:
43:7b:a0:31:ed:7f:4c:48:6f:3f:ca:1d:7c:64:bd:de:07:e3:
99:53:28:5e:d5:46:a3:88:f6:77:92:65:5f:92:f6:b9:32:63:
be:6a:2d:c0:9b:8e:28:ce:d5:57:15:d3:91:4f:c4:36:6f:69:
30:7b:e1:88:a5:c8:14:a3:9b:df:4f:a6:b2:fd:4c:18:63:b9:
aa:b4:5b:ea:63:a4:80:96:7b:dc:dd:60:0b:31:8c:9a:11:43:
df:d5:54:66:4b:5f:a3:8a:0e:fd:f5:84:b9:31:2e:9e:af:40:
58:ca:f0:7f:98:2a:ae:24:72:c4:77:bf:db:f0:b8:99:8d:59:
94:81:eb:ae:7c:48:e3:0f:14:eb:50:bc:08:23:52:02:fc:ae:
21:fc:8d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:21:17 2025 by rpki-client