Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
File: kIp-pxKAHkyP64Wz8HjQW6EBquE.mft (raw, json)
Hash identifier: 2b7mbzzK/A46lRRtdgA4Ry3qpElBsyrGng7rkzgPRLA=
Subject key identifier: FF:A6:AD:82:BC:CE:1B:39:0C:68:CE:3C:2E:E4:D0:ED:A9:6A:1E:A8
Authority key identifier: 90:8A:7E:A7:12:80:1E:4C:8F:EB:85:B3:F0:78:D0:5B:A1:01:AA:E1
Certificate issuer: /CN=908a7ea712801e4c8feb85b3f078d05ba101aae1
Certificate serial: 01984D42F2EF84941EBC073AF37D34A6485B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 19:01:29 +0000
Manifest this update: Sun 27 Jul 2025 19:01:29 +0000
Manifest next update: Mon 28 Jul 2025 19:01:29 +0000
Files and hashes: 1: 5otqJznFN06_a5lb9QnpMCQFqQI.roa (hash: NxQ406RCVAu9Gv14nckV258lPo22JEB7yBMbejU2osI=)
2: kIp-pxKAHkyP64Wz8HjQW6EBquE.crl (hash: eTQtjHbmgWDiG2XX/9RfLmrA1RMU/4BBlMXPLH9OYwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4d:42:f2:ef:84:94:1e:bc:07:3a:f3:7d:34:a6:48:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908a7ea712801e4c8feb85b3f078d05ba101aae1
Validity
Not Before: Jul 27 19:01:29 2025 GMT
Not After : Jul 28 19:01:29 2025 GMT
Subject: CN=ffa6ad82bcce1b390c68ce3c2ee4d0eda96a1ea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:94:67:fb:6a:c6:04:09:61:4c:b1:a7:08:e5:
56:d9:a2:0e:ad:89:ef:c0:c1:7f:b8:fa:03:05:b1:
20:76:eb:c5:69:0e:83:d4:97:a4:2b:03:37:54:94:
ee:50:48:0c:1e:ae:d8:95:d3:4a:92:bd:9d:88:61:
a5:26:c9:f5:25:f3:f2:76:ce:51:b8:54:c8:3b:f2:
8a:a4:e3:be:85:d6:22:27:fb:0a:8c:71:b5:7d:d1:
d3:e8:78:3e:af:5f:0b:23:5e:ea:0d:5b:1c:2c:35:
30:71:fa:25:ff:e0:55:88:a4:ac:47:9a:ea:13:72:
7f:af:d1:5f:2d:7b:09:86:2e:59:77:80:1c:f8:d2:
a3:60:0b:a8:30:b3:db:2a:f2:90:82:04:49:7a:ab:
2b:94:f1:a9:cd:21:1f:5d:1d:61:19:d0:3a:7d:4b:
8a:a8:f3:bb:94:3e:b5:15:a9:f5:25:3c:a2:e9:2d:
30:79:90:c0:a8:4b:87:be:98:dd:71:11:f3:7e:45:
63:9d:fd:d1:df:05:7c:12:80:77:79:be:64:37:d8:
aa:b5:fc:7a:47:ee:75:f1:20:32:c2:18:77:2f:b4:
90:2a:de:b9:2e:8f:51:49:d1:fd:dd:4b:52:2d:d1:
82:0f:40:15:cf:a4:00:80:93:37:e3:5d:a3:83:f3:
8a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A6:AD:82:BC:CE:1B:39:0C:68:CE:3C:2E:E4:D0:ED:A9:6A:1E:A8
X509v3 Authority Key Identifier:
keyid:90:8A:7E:A7:12:80:1E:4C:8F:EB:85:B3:F0:78:D0:5B:A1:01:AA:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:92:c5:80:70:c5:7e:32:93:a2:ce:28:d9:18:27:58:1e:cd:
66:a7:ba:54:75:82:e4:fc:7a:ae:93:ac:c8:ff:16:26:3f:86:
e3:e6:ac:59:28:41:5c:fc:ec:0b:3d:34:ee:54:2e:66:78:f2:
4f:44:cc:16:ec:93:2d:42:ae:00:42:d5:23:4a:81:c8:b1:f5:
6c:23:44:6f:6f:6e:ee:7e:5a:ea:12:94:96:33:ac:ce:50:36:
e2:b6:7c:5e:cf:ed:47:5d:f7:3c:eb:fd:02:f3:9e:e2:a8:d2:
9f:62:79:fb:ab:5a:11:16:9b:1d:53:d0:67:f3:01:c3:0b:2f:
e9:e1:b5:85:74:b3:a9:8c:c5:a2:81:96:2a:d1:21:2a:98:97:
2f:95:0a:77:65:91:5f:86:c7:cd:d4:3b:df:52:d0:36:11:56:
b2:c7:4a:36:35:31:b5:db:79:ef:76:e0:de:c8:9a:ca:fd:17:
9b:49:0f:14:5f:c0:5a:f0:6e:80:96:2f:ee:a5:d5:a2:38:b8:
f0:41:44:8d:04:f1:eb:73:53:c7:23:58:50:d5:70:4d:08:b7:
47:a7:1a:0b:0e:f0:51:2e:9e:75:6f:e1:c4:a0:cc:36:b2:c8:
07:94:75:ac:b3:7a:e4:9a:f3:8e:7a:6b:aa:90:1f:48:f8:da:
ec:09:02:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 21:57:20 2025 by rpki-client