Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.mft
File: klPiFMjlpvQTRb5oL2gmVbGr6ls.mft (raw, json)
Hash identifier: w6TsJboRW0z3Di8cElcooMJSe58J5KRx0/JCU0un6RM=
Subject key identifier: E0:88:E1:8F:B0:41:2E:63:BE:CA:6A:60:CD:8E:CC:C0:FD:AA:42:07
Authority key identifier: 92:53:E2:14:C8:E5:A6:F4:13:45:BE:68:2F:68:26:55:B1:AB:EA:5B
Certificate issuer: /CN=9253e214c8e5a6f41345be682f682655b1abea5b
Certificate serial: 019934253A65B6C1271771042431913755C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klPiFMjlpvQTRb5oL2gmVbGr6ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.mft
Manifest number: 0636
Signing time: Wed 10 Sep 2025 15:01:18 +0000
Manifest this update: Wed 10 Sep 2025 15:01:18 +0000
Manifest next update: Thu 11 Sep 2025 15:01:18 +0000
Files and hashes: 1: g9a2AgSYQsELLiSB_-OegEcbQ9I.roa (hash: ImJVXRp/ldmW9cQsi6+awLuGwVI0Qm+zTXoZ5uHaLy0=)
2: klPiFMjlpvQTRb5oL2gmVbGr6ls.crl (hash: FQz/beDm2NKlQ1R++OVCwAiBbMvbO8U1zhU61dUyAqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/klPiFMjlpvQTRb5oL2gmVbGr6ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:25:3a:65:b6:c1:27:17:71:04:24:31:91:37:55:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9253e214c8e5a6f41345be682f682655b1abea5b
Validity
Not Before: Sep 10 15:01:18 2025 GMT
Not After : Sep 11 15:01:18 2025 GMT
Subject: CN=e088e18fb0412e63beca6a60cd8eccc0fdaa4207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:14:b7:64:40:0f:79:b5:cf:ff:89:d4:dd:f0:
5c:a0:9e:21:50:96:fb:29:36:1e:0c:85:86:c5:d5:
ae:08:4b:cd:8d:ac:d6:ea:15:a9:9d:d9:c0:9f:33:
d1:ea:47:fd:57:58:ca:2c:47:0a:6b:49:57:87:5b:
45:a5:af:fe:ab:3a:1c:71:00:2f:00:53:7c:94:28:
bc:09:41:ce:fc:02:28:04:15:07:df:b5:76:06:95:
f9:c0:4b:50:73:63:51:1b:05:a9:78:66:a8:53:b0:
80:e6:07:77:a0:4d:71:00:68:78:fc:08:47:fb:c4:
20:e3:7e:92:12:66:70:a5:5a:63:61:b6:ca:7d:9b:
fc:00:e0:58:20:df:21:c2:c8:ac:3a:5f:61:0e:22:
5b:9b:ac:64:56:6d:3a:0b:85:39:5c:9c:cf:d5:86:
a8:b4:b7:e8:e2:b0:b3:a1:61:d4:b9:0c:e6:eb:45:
43:ef:4b:2d:a1:13:50:eb:63:c4:8c:5b:08:98:f5:
c0:bb:7d:0d:21:b8:8e:d4:14:c7:9a:78:e0:78:00:
3b:d5:f5:b5:a7:40:6e:ad:63:93:4a:80:f4:e7:55:
11:82:cd:0d:15:e4:87:91:33:70:6a:f4:4c:f7:96:
56:76:ed:b8:19:04:5c:24:59:fa:b4:da:8a:c0:82:
a9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:88:E1:8F:B0:41:2E:63:BE:CA:6A:60:CD:8E:CC:C0:FD:AA:42:07
X509v3 Authority Key Identifier:
keyid:92:53:E2:14:C8:E5:A6:F4:13:45:BE:68:2F:68:26:55:B1:AB:EA:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klPiFMjlpvQTRb5oL2gmVbGr6ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:60:34:46:7e:c5:f8:14:5e:c9:2b:38:74:64:bb:d7:e3:03:
1c:d2:d1:1b:cb:a5:c2:95:d0:36:9b:ce:08:e5:a5:ce:05:96:
ea:15:64:f8:8a:5b:bb:78:19:a8:6e:52:84:1a:b1:b6:06:88:
b1:96:bf:34:eb:f6:1b:2d:7b:f3:3a:7f:e6:e9:eb:f4:24:6e:
d9:c3:4f:db:1f:86:c0:4e:26:24:af:f7:60:25:e2:71:5f:52:
cd:c3:ce:9f:1a:4d:f5:97:3a:36:35:5e:07:2b:15:0a:50:77:
52:50:1a:00:83:38:71:c6:04:7a:66:90:99:81:f1:92:3c:b1:
b9:38:a8:34:ca:f1:75:6a:5e:22:64:1d:85:16:c5:40:9f:c7:
2a:bb:66:51:94:a7:1e:5d:ef:95:a3:00:3f:4d:4b:40:03:38:
e2:3d:af:65:d2:44:11:0d:5a:8c:6d:4b:1b:aa:77:01:2c:88:
9b:23:6d:b7:af:ec:b9:1a:01:85:7e:ee:db:4a:51:41:75:1c:
29:08:6b:2a:db:e4:ac:c7:3a:e4:c2:0a:80:db:1d:49:c9:f9:
72:3c:7d:55:3d:26:9c:8a:6c:1f:95:34:42:b5:62:f1:3d:a3:
e5:f8:16:60:c1:d2:85:8c:fd:94:72:c5:74:01:5b:e9:7d:26:
2e:af:0e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 16:13:13 2025 by rpki-client