Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.mft
File: KAWFe6e9XcggxhYmxjNJ47f6p9M.mft (raw, json)
Hash identifier: 1LEWlYdr2ZY0XcSC65FgJoAt/WdeHOjwNZKxmB0yNHE=
Subject key identifier: 4C:25:C0:6B:AB:C1:EE:9C:5E:7F:EC:BC:34:D0:98:CE:72:E1:99:78
Authority key identifier: 28:05:85:7B:A7:BD:5D:C8:20:C6:16:26:C6:33:49:E3:B7:FA:A7:D3
Certificate issuer: /CN=2805857ba7bd5dc820c61626c63349e3b7faa7d3
Certificate serial: 0199FF59A8F3981E6164AD84DA5D4D99E537
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KAWFe6e9XcggxhYmxjNJ47f6p9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.mft
Manifest number: 0F77
Signing time: Mon 20 Oct 2025 02:01:29 +0000
Manifest this update: Mon 20 Oct 2025 02:01:29 +0000
Manifest next update: Tue 21 Oct 2025 02:01:29 +0000
Files and hashes: 1: KAWFe6e9XcggxhYmxjNJ47f6p9M.crl (hash: MJ3UjItw5BpgEIwxIOgOKu1CbLcOey0eLIIkeeIXtTU=)
2: QKHWtvbYs2bFm7Yqz1D-noGUUCg.roa (hash: ZmlSUpfzL4PQUwk4jtXCzAOTz3/AO/19cZEbT2JXoOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/KAWFe6e9XcggxhYmxjNJ47f6p9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:a8:f3:98:1e:61:64:ad:84:da:5d:4d:99:e5:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2805857ba7bd5dc820c61626c63349e3b7faa7d3
Validity
Not Before: Oct 20 02:01:29 2025 GMT
Not After : Oct 21 02:01:29 2025 GMT
Subject: CN=4c25c06babc1ee9c5e7fecbc34d098ce72e19978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:48:44:2c:e9:5e:88:c3:ae:d5:76:03:e1:b7:
46:c5:65:49:cc:78:51:fa:39:8c:55:79:81:71:36:
9f:36:60:2e:c0:41:25:ee:83:1c:02:63:d1:00:a0:
03:b6:f1:30:f6:f5:7d:4e:66:ce:0f:ed:64:e2:47:
72:e6:f9:20:61:0b:d5:a4:d5:f3:f3:42:a7:c5:25:
18:33:d1:c9:65:ea:b0:18:41:a4:e5:a2:33:4e:83:
15:b7:54:37:55:a4:d5:97:08:75:b6:d6:1b:32:85:
4b:aa:ae:62:9d:81:d7:e3:ed:a7:02:b6:8c:19:f2:
4d:93:7e:20:10:d7:71:81:d4:2a:33:00:0a:cc:d6:
bd:93:d3:0d:cb:4a:93:91:5d:35:4c:12:6b:8a:76:
3e:2b:02:0e:61:0e:04:99:d6:c5:7f:03:c8:4b:6f:
1c:98:b9:53:14:12:c6:ee:25:9b:d4:e9:cc:a8:a7:
ab:d2:49:47:76:96:2a:cf:21:a7:2b:d3:ab:65:5d:
09:db:61:7d:ef:59:cf:77:57:f3:fa:3c:5f:98:1c:
82:4a:b2:33:a4:05:19:98:f3:d4:b0:bc:99:77:aa:
59:4c:df:6b:85:15:8b:c9:9d:a4:f0:04:9b:c8:f1:
90:44:35:ed:61:24:4b:6e:e9:a7:da:46:65:82:80:
32:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:25:C0:6B:AB:C1:EE:9C:5E:7F:EC:BC:34:D0:98:CE:72:E1:99:78
X509v3 Authority Key Identifier:
keyid:28:05:85:7B:A7:BD:5D:C8:20:C6:16:26:C6:33:49:E3:B7:FA:A7:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAWFe6e9XcggxhYmxjNJ47f6p9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:e9:89:df:dd:35:1c:e0:be:79:40:14:db:ed:5d:fa:8f:bb:
cb:00:60:c5:4b:bb:5e:f3:c9:31:a2:42:79:fe:cf:2b:1f:67:
79:fc:c6:68:ca:f8:78:fa:ac:c1:94:ef:c8:58:b4:94:ba:36:
25:34:4d:73:07:5f:8d:47:bf:bb:b9:00:75:51:95:74:76:df:
76:c5:46:75:35:d6:20:3c:b2:bb:1a:32:0c:77:3b:56:bd:cd:
19:79:21:7d:ad:b1:10:56:2d:c7:92:69:d7:75:ec:3a:86:e3:
4e:1d:60:88:dc:38:a5:6d:ea:1c:78:c0:4b:04:11:05:16:2e:
8e:b1:5a:d0:93:87:79:e9:88:d3:d5:28:e3:a0:2c:1a:1c:56:
6b:9b:a6:42:a9:0a:a0:db:ee:07:e7:87:5c:74:00:a2:c4:6e:
44:99:a2:3b:14:ac:12:52:c8:9f:1a:24:8f:d5:85:6c:0a:97:
00:7f:8f:6e:65:ce:22:75:d7:dc:73:75:6c:39:a3:67:28:27:
86:12:b5:48:9b:5b:c9:87:b8:02:41:8c:b5:b5:a6:ad:c2:fd:
b7:83:67:6d:ca:29:80:c7:89:21:11:8a:47:51:26:95:39:1a:
66:c3:a7:1a:a5:ce:be:a5:34:26:7f:4e:f6:33:1a:40:90:b1:
bb:97:72:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:53:30 2025 by rpki-client