Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.mft
File: KwUe8jBg61G_2MeXlfak2vSKOqA.mft (raw, json)
Hash identifier: dcHpE0vM5K/pJZBnSvj6HXYYiwC2u1xRapRgNph5Hzc=
Subject key identifier: F8:C5:7D:B4:1A:8A:C6:B3:15:6B:92:74:9E:A5:BF:C3:ED:C8:25:3C
Authority key identifier: 2B:05:1E:F2:30:60:EB:51:BF:D8:C7:97:95:F6:A4:DA:F4:8A:3A:A0
Certificate issuer: /CN=2b051ef23060eb51bfd8c79795f6a4daf48a3aa0
Certificate serial: 019A03DA8DFD717326D8CB1B90663B103557
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KwUe8jBg61G_2MeXlfak2vSKOqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.mft
Manifest number: 0B19
Signing time: Mon 20 Oct 2025 23:00:46 +0000
Manifest this update: Mon 20 Oct 2025 23:00:46 +0000
Manifest next update: Tue 21 Oct 2025 23:00:46 +0000
Files and hashes: 1: HJo0Q6u7BHPf7uGGtOh1Cm5Rgr4.roa (hash: KO4VFFsczF64WfUlIBm0orog3QT9gcqLspybHYHoxis=)
2: KwUe8jBg61G_2MeXlfak2vSKOqA.crl (hash: K2rhL7L2VBGk2OPqSa72VBhYSqIUiIiHFnNF+bCOHEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KwUe8jBg61G_2MeXlfak2vSKOqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:03:da:8d:fd:71:73:26:d8:cb:1b:90:66:3b:10:35:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b051ef23060eb51bfd8c79795f6a4daf48a3aa0
Validity
Not Before: Oct 20 23:00:46 2025 GMT
Not After : Oct 21 23:00:46 2025 GMT
Subject: CN=f8c57db41a8ac6b3156b92749ea5bfc3edc8253c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a3:09:ea:d0:03:07:b2:f4:d3:77:89:c4:05:
71:62:c8:a3:eb:31:49:51:4e:9e:65:a4:c6:75:89:
cc:3c:76:ce:9b:21:4b:48:34:9e:06:c2:a2:bf:03:
c4:0e:a6:66:5b:c0:2a:a1:fa:57:d4:12:d4:ec:eb:
94:d3:be:97:34:d7:93:c4:e2:f6:13:60:96:07:34:
99:4e:41:17:41:64:68:53:3c:fe:78:f9:97:92:f4:
a5:f9:22:be:8c:fc:e0:92:e6:c3:70:94:9f:57:c7:
0b:7b:45:6c:5b:d7:28:3e:e7:0d:c2:21:71:c0:c2:
52:93:37:87:56:55:59:aa:8f:27:b7:60:4b:87:7d:
58:b6:c4:12:14:30:32:d8:e9:2b:6c:f1:9d:39:db:
61:90:5f:f4:23:6b:23:7a:61:1b:d5:06:eb:1d:8f:
5b:46:cf:0d:c6:5c:c4:df:e7:1c:7f:64:50:b5:fc:
75:50:5b:90:d0:eb:ae:3d:22:22:fa:2e:44:a2:3a:
bf:6f:12:8b:14:37:7d:f1:ec:6a:8c:b9:d3:6f:4f:
d9:bd:5c:ff:04:c9:a4:7a:f3:3a:2c:e1:d8:74:34:
0e:27:48:2a:ec:89:43:11:94:69:ae:0c:5a:45:8b:
da:30:3e:f3:c7:4a:2b:0d:08:e1:16:26:80:33:f4:
f4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:C5:7D:B4:1A:8A:C6:B3:15:6B:92:74:9E:A5:BF:C3:ED:C8:25:3C
X509v3 Authority Key Identifier:
keyid:2B:05:1E:F2:30:60:EB:51:BF:D8:C7:97:95:F6:A4:DA:F4:8A:3A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwUe8jBg61G_2MeXlfak2vSKOqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:3d:d6:f1:6e:36:17:14:64:e8:58:77:76:f4:c9:a3:45:a6:
b3:37:c9:2e:41:97:24:c4:a0:20:60:b8:4a:51:78:80:a7:26:
96:05:62:cf:fd:4e:01:5e:90:6a:bc:62:e0:9b:b1:e4:fd:69:
c9:f8:1e:ab:65:ac:5f:cf:c5:53:cb:a2:83:2d:02:fe:c0:65:
93:65:ed:59:aa:4e:1f:8a:2a:db:d5:b4:77:e7:be:2e:e9:c7:
5c:be:cb:6d:74:cd:31:8f:a9:c4:03:02:c4:01:e4:bf:8c:fc:
63:12:76:7a:bc:17:b8:40:d7:45:e2:a6:22:31:0c:92:b3:fb:
aa:59:52:8f:73:e4:2c:b8:64:b3:f6:00:9d:0d:bb:d7:ce:b9:
f5:18:69:18:e4:20:27:22:4e:56:9f:62:bc:09:10:b3:23:4b:
91:92:49:a1:c6:bc:b5:49:07:8c:fe:a1:0e:f1:25:8b:08:06:
64:04:34:7e:e1:08:28:c3:4a:e0:53:1e:75:70:06:0b:a5:7d:
48:c1:59:1c:63:60:bc:6b:82:25:90:c7:7c:46:a3:25:04:c4:
c1:98:54:50:81:47:88:20:d6:4d:bf:2a:e5:a0:a0:33:63:3f:
34:a4:06:eb:3f:ee:22:65:6c:a4:5a:1c:6d:9a:72:83:17:51:
36:03:5c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:04:12 2025 by rpki-client