Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
File: kIp-pxKAHkyP64Wz8HjQW6EBquE.mft (raw, json)
Hash identifier: XgctMHi9vnJetheqAvrgQWyuepTOzMdgbrsvfnfljXI=
Subject key identifier: 37:D8:85:B2:70:39:D4:BB:A7:6B:B7:C8:0F:C0:38:5F:1F:E7:45:F1
Authority key identifier: 90:8A:7E:A7:12:80:1E:4C:8F:EB:85:B3:F0:78:D0:5B:A1:01:AA:E1
Certificate issuer: /CN=908a7ea712801e4c8feb85b3f078d05ba101aae1
Certificate serial: 019A52D0F63ECE00BD546E5F7E916669886C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
Manifest number: 170F
Signing time: Wed 05 Nov 2025 07:00:17 +0000
Manifest this update: Wed 05 Nov 2025 07:00:17 +0000
Manifest next update: Thu 06 Nov 2025 07:00:17 +0000
Files and hashes: 1: 5otqJznFN06_a5lb9QnpMCQFqQI.roa (hash: NxQ406RCVAu9Gv14nckV258lPo22JEB7yBMbejU2osI=)
2: kIp-pxKAHkyP64Wz8HjQW6EBquE.crl (hash: YHZQOxE34mfi0xJQ+iUMwRYN/yh6emG0E3zF5W+yrYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d0:f6:3e:ce:00:bd:54:6e:5f:7e:91:66:69:88:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908a7ea712801e4c8feb85b3f078d05ba101aae1
Validity
Not Before: Nov 5 07:00:17 2025 GMT
Not After : Nov 6 07:00:17 2025 GMT
Subject: CN=37d885b27039d4bba76bb7c80fc0385f1fe745f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6e:75:13:73:7b:eb:08:d2:6f:8f:0d:a7:ec:
1c:0c:66:9c:f4:87:42:9f:9e:ce:5d:65:4e:b1:f5:
c3:69:98:f4:fa:39:6d:01:b9:80:f8:93:1d:bc:b1:
f8:91:95:79:d8:18:e2:90:73:cf:cd:42:dd:fd:22:
87:19:7f:27:ed:be:e5:ca:06:b1:96:87:c7:6e:a9:
99:8a:c3:6b:80:fa:ea:cf:4f:9e:e3:49:ef:b8:b0:
54:32:85:ea:a5:1a:50:b1:9d:12:9d:a3:97:cf:56:
17:db:46:eb:b7:40:46:9e:27:cf:bc:ee:a6:bb:8e:
8c:b7:89:c3:1a:00:32:be:d0:3e:c5:90:91:c5:f3:
90:5d:39:a9:68:cc:41:a7:f3:28:d9:c5:0b:47:4c:
b2:26:e4:98:0f:b6:27:f9:04:32:1e:e0:63:c6:50:
e9:c9:36:b5:da:8a:27:ec:4a:67:cc:3c:14:58:96:
8b:5c:a6:17:86:53:b3:06:97:7a:02:bf:be:20:4d:
61:d3:40:3c:0f:fe:0b:15:79:c7:04:8c:a3:36:a2:
e0:36:01:59:19:c2:80:c7:0a:4b:87:b2:cc:1b:49:
db:16:f7:b9:fd:60:de:0d:cb:8b:30:e2:da:03:09:
24:3f:b6:66:08:4a:09:ab:5d:88:19:0d:16:f5:7b:
0a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D8:85:B2:70:39:D4:BB:A7:6B:B7:C8:0F:C0:38:5F:1F:E7:45:F1
X509v3 Authority Key Identifier:
keyid:90:8A:7E:A7:12:80:1E:4C:8F:EB:85:B3:F0:78:D0:5B:A1:01:AA:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:cf:38:33:71:a1:48:4a:7f:78:3f:cf:d0:26:3b:eb:0c:66:
f1:3b:8a:6a:39:e7:38:b9:fe:e3:1c:68:06:e6:ae:40:e1:55:
70:1c:68:97:b4:f2:23:77:0e:e8:e7:a4:c7:ff:74:cf:8c:14:
8b:b1:9b:f0:66:05:e1:d9:b1:4e:36:a9:a5:60:92:ca:38:25:
d0:00:0b:cd:2f:4d:61:4a:b4:0b:cb:42:4f:93:71:f0:b6:8a:
5f:fc:f7:2a:c2:62:c0:b3:7d:35:1b:85:73:d0:66:25:26:0f:
2c:ef:7f:2f:08:f9:cc:6c:c9:b7:6d:c8:ff:7c:68:93:73:bd:
05:4e:0d:a0:b9:93:11:92:4e:f4:02:10:05:02:ce:7b:b3:62:
6f:8b:fd:53:9b:5c:90:cb:da:27:87:a0:ee:95:02:7f:1d:71:
0c:cc:20:c6:d1:83:2b:2d:9b:cf:98:07:c8:8c:0b:74:92:5e:
b7:49:f6:84:31:5c:1a:d8:8c:43:4c:87:6c:c9:f1:38:dd:2d:
0e:98:f6:8f:a9:04:ad:02:05:a3:97:14:1a:4b:20:4e:67:1c:
d3:17:18:7d:82:db:97:51:1c:47:ef:76:89:fc:7e:63:7d:12:
5a:ae:46:0e:24:e0:9e:af:b1:5b:ab:30:d6:2e:13:cc:e1:64:
57:05:4b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:04:50 2025 by rpki-client