Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/3bb178-b336-489c-9e8d-0d1164daa1e4/1/kiluMEh7qUY-S2rcgat9pkfDn-c.mft
File: kiluMEh7qUY-S2rcgat9pkfDn-c.mft (raw, json)
Hash identifier: 9wLI+jVgQorgjX9NSLk998LAEOGv6MNMerz1K9d/odE=
Subject key identifier: BC:79:DE:1A:24:59:A7:C0:50:A6:25:D3:88:56:C1:8D:2F:24:30:FE
Authority key identifier: 92:29:6E:30:48:7B:A9:46:3E:4B:6A:DC:81:AB:7D:A6:47:C3:9F:E7
Certificate issuer: /CN=92296e30487ba9463e4b6adc81ab7da647c39fe7
Certificate serial: 01992255C2B6B3A456CF62BB0BF2F963E3F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiluMEh7qUY-S2rcgat9pkfDn-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/3bb178-b336-489c-9e8d-0d1164daa1e4/1/kiluMEh7qUY-S2rcgat9pkfDn-c.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 04:01:09 +0000
Manifest this update: Sun 07 Sep 2025 04:01:09 +0000
Manifest next update: Mon 08 Sep 2025 04:01:09 +0000
Files and hashes: 1: i-OzQF2bcpPJxDcOX5kIL87LKyE.roa (hash: y62UPCmvVteCyYBr7OynuTmwVuaAEnPLTcqTccWvdJo=)
2: kiluMEh7qUY-S2rcgat9pkfDn-c.crl (hash: C3/2Bgtk410p6CN3QwnDeni5unqR4o/Af0jvZnhZ+KI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/3bb178-b336-489c-9e8d-0d1164daa1e4/1/kiluMEh7qUY-S2rcgat9pkfDn-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/3bb178-b336-489c-9e8d-0d1164daa1e4/1/kiluMEh7qUY-S2rcgat9pkfDn-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/kiluMEh7qUY-S2rcgat9pkfDn-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:c2:b6:b3:a4:56:cf:62:bb:0b:f2:f9:63:e3:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92296e30487ba9463e4b6adc81ab7da647c39fe7
Validity
Not Before: Sep 7 04:01:09 2025 GMT
Not After : Sep 8 04:01:09 2025 GMT
Subject: CN=bc79de1a2459a7c050a625d38856c18d2f2430fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:ca:ae:ad:23:f2:1b:f9:c3:4a:87:c2:eb:e0:
0e:46:04:21:ee:43:c1:2e:e0:93:c0:1d:94:0d:9c:
15:a2:8e:3a:bc:27:3b:9f:17:41:a9:0e:e5:3a:4d:
0f:68:ba:13:b5:2d:a4:54:de:2d:85:49:54:48:e4:
17:68:65:e3:11:49:80:34:79:51:c5:2f:2b:84:c2:
0c:c7:0d:34:b0:bc:d0:2e:fd:61:6d:67:01:20:99:
4f:60:b4:a4:84:a0:e1:3a:61:d0:4d:b7:b2:3a:a6:
e7:4e:d2:7c:91:80:86:6b:09:01:84:dc:2b:36:24:
27:9c:7b:bc:8e:bb:f9:27:9f:98:d8:e0:b6:4a:d3:
eb:21:06:6f:7b:6c:e7:22:e4:38:8c:82:d7:59:81:
5d:64:8e:c0:21:c7:a7:3f:ab:10:1d:17:f5:1d:be:
ab:5c:1a:c2:85:07:2a:8d:e5:87:92:5a:64:16:f2:
3a:57:f4:9e:7e:94:fb:0c:90:60:4c:6e:da:0c:fe:
21:a7:ab:71:b6:b7:26:2a:9e:ea:cc:62:92:41:7c:
f6:dd:fa:48:29:c5:8d:01:12:c4:f0:22:d7:96:4a:
0a:ae:41:55:22:73:73:d7:e0:59:98:e7:dd:ed:f9:
99:d5:c9:8c:d1:92:f3:55:d0:9e:62:f2:b2:69:ec:
42:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:79:DE:1A:24:59:A7:C0:50:A6:25:D3:88:56:C1:8D:2F:24:30:FE
X509v3 Authority Key Identifier:
keyid:92:29:6E:30:48:7B:A9:46:3E:4B:6A:DC:81:AB:7D:A6:47:C3:9F:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiluMEh7qUY-S2rcgat9pkfDn-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3bb178-b336-489c-9e8d-0d1164daa1e4/1/kiluMEh7qUY-S2rcgat9pkfDn-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3bb178-b336-489c-9e8d-0d1164daa1e4/1/kiluMEh7qUY-S2rcgat9pkfDn-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:ae:92:ff:77:c0:3b:26:90:e0:d9:c9:94:4e:03:d6:2a:e5:
f3:a0:32:3c:5d:0f:1a:89:63:93:8e:4b:36:20:eb:85:00:58:
ce:be:3d:b8:b0:da:b4:90:09:02:84:17:ff:10:2e:5e:59:f5:
a2:69:79:35:5f:65:e4:a1:b4:4c:ff:4a:0f:bb:6b:cc:f6:2b:
df:53:cd:a4:cb:ed:af:ec:72:60:20:b5:46:ea:c6:47:ed:ee:
47:b9:4b:12:85:3f:25:71:d8:9b:56:f5:7b:f7:11:91:c3:6e:
5c:d3:a3:ca:bb:58:c4:1b:5c:83:39:9a:49:41:b9:09:c5:1c:
cb:ad:6c:e5:28:af:47:22:e5:36:cd:b8:2a:cf:a4:e6:d6:9a:
d9:a1:13:07:69:b8:42:a9:2f:14:15:3c:fc:1b:a9:c9:1b:0f:
08:98:0f:50:78:c1:c6:62:c5:1f:36:9b:94:90:dd:c2:b4:95:
75:52:24:0e:49:5a:97:92:35:da:30:2c:2b:15:8a:13:b7:c5:
14:b6:21:75:58:a9:73:16:78:ca:a4:0b:84:f2:e8:e6:ae:92:
c8:5c:05:81:40:c7:c0:9d:9c:74:f6:ae:59:1e:7e:c2:b0:2d:
70:f1:40:54:90:52:d5:f0:a8:08:f0:d3:32:1e:52:0e:ae:f4:
e0:98:89:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:52:45 2025 by rpki-client