Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.mft
File: KAWFe6e9XcggxhYmxjNJ47f6p9M.mft (raw, json)
Hash identifier: lzBvGrVwYtHWwcN79ap+1PPqG6JQf95GfNG2taFvC+4=
Subject key identifier: 02:E5:8F:89:A8:FC:FC:5E:3B:95:C3:2F:2F:02:5E:CF:43:7F:D5:DE
Authority key identifier: 28:05:85:7B:A7:BD:5D:C8:20:C6:16:26:C6:33:49:E3:B7:FA:A7:D3
Certificate issuer: /CN=2805857ba7bd5dc820c61626c63349e3b7faa7d3
Certificate serial: 0198D5F14CC24E74CE7128F72481A48024AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KAWFe6e9XcggxhYmxjNJ47f6p9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.mft
Manifest number: 0EDD
Signing time: Sat 23 Aug 2025 08:00:17 +0000
Manifest this update: Sat 23 Aug 2025 08:00:17 +0000
Manifest next update: Sun 24 Aug 2025 08:00:17 +0000
Files and hashes: 1: KAWFe6e9XcggxhYmxjNJ47f6p9M.crl (hash: qBfow9Sw+LgJNdF2uoQr2vh0oaD9SKogKv82Evo11ng=)
2: QKHWtvbYs2bFm7Yqz1D-noGUUCg.roa (hash: ZmlSUpfzL4PQUwk4jtXCzAOTz3/AO/19cZEbT2JXoOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/KAWFe6e9XcggxhYmxjNJ47f6p9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:4c:c2:4e:74:ce:71:28:f7:24:81:a4:80:24:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2805857ba7bd5dc820c61626c63349e3b7faa7d3
Validity
Not Before: Aug 23 08:00:17 2025 GMT
Not After : Aug 24 08:00:17 2025 GMT
Subject: CN=02e58f89a8fcfc5e3b95c32f2f025ecf437fd5de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:29:a1:42:95:3d:22:bf:55:79:df:68:fa:08:
24:fa:d0:93:ba:45:e5:d0:5a:44:d7:17:25:31:a0:
93:ad:c2:93:19:95:95:fe:08:b8:ac:71:37:3f:0c:
f5:ab:7e:37:3c:28:5d:51:31:a0:39:0c:5b:49:fe:
b0:9d:fa:71:35:0b:51:30:8a:72:7a:87:e2:1e:41:
53:38:44:e3:00:fa:12:f8:d1:b3:1f:01:c6:4c:af:
92:4e:8c:a2:fb:8b:b6:ab:87:b3:26:52:82:19:e5:
11:11:8c:72:a5:17:28:e8:93:4d:82:31:f1:83:6e:
19:94:a7:98:93:cf:9a:73:c9:9b:3b:de:dc:a5:67:
70:e8:86:8c:cc:fd:3a:9e:16:df:bc:c1:fb:1e:f6:
03:fe:2c:8a:84:02:90:ff:d2:9b:38:dc:09:fc:89:
34:df:08:9b:41:86:39:28:00:d4:ff:e9:2b:21:73:
da:12:10:0f:be:48:b6:ba:00:12:2b:de:f9:8d:c6:
fb:c9:b5:43:7f:ca:ff:87:44:7e:9a:ac:35:79:41:
72:c6:bf:85:1c:f6:56:e8:ed:11:1f:80:0d:16:5d:
ed:9b:4c:c2:71:13:07:f3:2d:58:66:fe:1b:47:52:
1d:01:f5:65:37:7f:4a:59:e7:86:44:ea:2b:01:e8:
db:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E5:8F:89:A8:FC:FC:5E:3B:95:C3:2F:2F:02:5E:CF:43:7F:D5:DE
X509v3 Authority Key Identifier:
keyid:28:05:85:7B:A7:BD:5D:C8:20:C6:16:26:C6:33:49:E3:B7:FA:A7:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAWFe6e9XcggxhYmxjNJ47f6p9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:85:e9:58:5c:c2:92:3c:c7:9f:d1:8b:7b:1c:72:76:b7:02:
50:02:a6:9c:36:9c:30:a5:fc:ef:b0:71:e0:31:4d:8a:52:96:
51:9a:fb:e0:76:6e:1c:65:05:46:53:d5:2d:a2:86:13:93:43:
a9:ea:79:9c:52:c5:28:80:03:ec:21:f0:f4:e5:d3:cc:31:34:
5b:b5:b3:35:75:4a:ac:92:df:78:f5:17:2c:fa:82:5d:87:5b:
ba:1b:21:ed:b0:24:61:f2:3e:79:99:65:5d:da:3e:01:29:df:
51:52:ae:07:f0:59:66:5f:e7:9b:25:49:07:4d:61:96:5b:19:
91:c2:49:27:ea:26:d8:6f:3a:f7:bd:2e:26:aa:44:6a:c9:d0:
05:ac:c8:98:be:6b:9e:2a:16:aa:07:a6:e1:98:8c:13:3d:28:
41:f4:a8:27:ed:1d:c7:fa:eb:0b:d5:35:87:13:79:12:ad:af:
2f:38:26:8b:80:4c:b2:fb:91:b6:09:13:29:5a:3c:c0:17:9b:
3f:35:a7:68:d7:71:a5:22:f0:42:38:31:c9:97:ad:54:0d:a2:
f4:d0:fe:44:73:af:c7:a8:7b:7b:a7:84:76:3e:8e:c9:02:3a:
04:a3:cb:ad:c4:8e:9e:e4:73:75:b5:d0:c2:81:df:bb:a5:60:
27:0e:81:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:26:27 2025 by rpki-client