Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
File: kIp-pxKAHkyP64Wz8HjQW6EBquE.mft (raw, json)
Hash identifier: M07VuMvS1POPB5acAfe94m0vtIIzY7YcOjiLRCL4QXw=
Subject key identifier: 69:26:3E:56:5D:25:A7:95:56:38:56:7D:FB:F1:16:0C:54:4B:B0:78
Authority key identifier: 90:8A:7E:A7:12:80:1E:4C:8F:EB:85:B3:F0:78:D0:5B:A1:01:AA:E1
Certificate issuer: /CN=908a7ea712801e4c8feb85b3f078d05ba101aae1
Certificate serial: 019955D5E98FD313796B55A8A8F09E3ABEF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
Manifest number: 168C
Signing time: Wed 17 Sep 2025 04:01:46 +0000
Manifest this update: Wed 17 Sep 2025 04:01:46 +0000
Manifest next update: Thu 18 Sep 2025 04:01:46 +0000
Files and hashes: 1: 5otqJznFN06_a5lb9QnpMCQFqQI.roa (hash: NxQ406RCVAu9Gv14nckV258lPo22JEB7yBMbejU2osI=)
2: kIp-pxKAHkyP64Wz8HjQW6EBquE.crl (hash: AaIiwHek6O3CDNYyUc4CYBocRhXdeSu12f86U4P1s5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 22:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:55:d5:e9:8f:d3:13:79:6b:55:a8:a8:f0:9e:3a:be:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908a7ea712801e4c8feb85b3f078d05ba101aae1
Validity
Not Before: Sep 17 04:01:46 2025 GMT
Not After : Sep 18 04:01:46 2025 GMT
Subject: CN=69263e565d25a7955638567dfbf1160c544bb078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e2:02:a0:e6:a0:4c:9b:86:8c:64:d7:25:24:
f0:99:3a:f1:99:dd:a7:14:a9:6d:ef:ec:a4:ce:11:
dc:46:be:63:fc:60:90:b4:5e:01:49:97:6b:78:7c:
41:65:db:97:e3:30:20:8e:cc:24:4b:54:9e:98:f9:
9e:91:74:9b:a9:8f:a8:d2:1f:5d:91:99:ec:16:54:
d6:b4:bc:77:37:37:2f:cc:ff:c7:9f:1c:ce:24:28:
0e:0d:f6:03:b8:4f:56:e6:c1:ef:d4:10:38:8a:15:
54:20:1c:6e:22:ff:7c:73:ef:fd:fb:51:2d:8e:f6:
71:93:a7:c7:70:c3:12:bd:2d:14:23:10:25:b9:bf:
7b:ac:4e:38:b8:d3:a7:88:b6:f6:76:6c:ef:57:c0:
00:8a:12:63:0d:32:a2:da:f2:b2:20:ee:01:78:85:
b7:e1:f0:36:d2:31:7b:3d:dc:87:2e:09:67:9d:95:
98:4c:40:1f:be:0b:7a:74:30:fd:5a:e2:1a:7b:33:
1f:f0:74:9f:b3:a2:9b:6b:83:6b:ab:39:f4:75:ad:
51:cc:ac:f3:78:75:a3:de:d2:34:ff:2e:1b:2b:95:
bc:33:0b:97:4f:a1:44:10:42:1c:1f:06:14:6f:f8:
a5:71:c1:45:16:98:8a:a3:93:b6:31:7b:92:8b:5f:
72:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:26:3E:56:5D:25:A7:95:56:38:56:7D:FB:F1:16:0C:54:4B:B0:78
X509v3 Authority Key Identifier:
keyid:90:8A:7E:A7:12:80:1E:4C:8F:EB:85:B3:F0:78:D0:5B:A1:01:AA:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:0a:3b:66:53:44:8c:6e:09:fa:70:4b:8b:7d:6b:1c:16:53:
a5:13:69:bb:9f:ad:f2:d4:a0:7a:4c:cc:9b:c3:47:3e:1d:14:
39:72:0d:0a:e0:61:8d:b7:32:77:26:51:a6:5d:9f:3d:5a:0b:
3a:97:80:c2:a3:36:9a:b2:68:7e:6f:96:66:d1:45:12:bf:e3:
25:01:b5:bb:4f:13:08:81:61:6f:58:83:13:cf:f7:0b:6b:de:
1b:64:18:7c:33:df:7c:9c:62:fc:31:e3:0c:0c:5e:19:62:5a:
af:93:24:a5:96:bc:97:d8:e2:35:e5:3f:42:85:d5:32:a7:9c:
71:e6:da:fe:60:a3:5a:60:c3:b5:ca:2c:7c:6a:07:1e:07:b6:
f0:3b:ca:7a:34:27:a6:30:69:16:11:12:ae:9d:98:38:11:6b:
fe:58:f5:e9:32:05:33:94:15:68:46:ca:d0:4c:6e:ac:ff:2e:
87:cb:ad:64:63:90:ed:b7:78:4b:07:fd:1b:54:f9:d2:4a:fe:
74:bd:79:90:a5:42:10:3a:09:90:a6:d0:fe:12:18:52:e7:56:
c2:01:28:ba:b1:9d:75:76:49:b4:68:b8:66:e3:04:b9:da:63:
d6:bf:59:e9:0e:e0:d7:4f:a7:17:12:42:27:aa:f8:2f:87:43:
d2:5d:8a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 06:00:38 2025 by rpki-client