Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.mft
File: KwviJiMNQJnO6gpKbPTti5AgE1A.mft (raw, json)
Hash identifier: S8jax4tUver7ApKnGMCrprViHn3wvjhCdOOVRffiadI=
Subject key identifier: D3:03:19:E9:09:06:5F:47:57:F0:97:D6:9F:8D:2A:C7:1A:04:45:A6
Authority key identifier: 2B:0B:E2:26:23:0D:40:99:CE:EA:0A:4A:6C:F4:ED:8B:90:20:13:50
Certificate issuer: /CN=2b0be226230d4099ceea0a4a6cf4ed8b90201350
Certificate serial: 0199FBEB1337B698E2FA322DB727A0AB536B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KwviJiMNQJnO6gpKbPTti5AgE1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.mft
Manifest number: 0AEF
Signing time: Sun 19 Oct 2025 10:01:50 +0000
Manifest this update: Sun 19 Oct 2025 10:01:50 +0000
Manifest next update: Mon 20 Oct 2025 10:01:50 +0000
Files and hashes: 1: 1-QazRIRPg7ctmvpySXX90ZpNvVs.roa (hash: /R5NiKNiflnBoSvWiTSdWTvgCke/+xxLiQtRLSd2PN8=)
2: KwviJiMNQJnO6gpKbPTti5AgE1A.crl (hash: u1RT8W04T+KqQHakmAYlf8Y7lj/KOkonEs7ObjcTai0=)
3: qi0ZqRW6bWCGCBOudyRc_ZU33PM.roa (hash: Y/jI82xosnyON1Rhfs7vCWE2E/8RN3XifMYZrXwc2DQ=)
4: st8xnj4jJi6Xuwa7MiNbU3-F0wo.roa (hash: H2Z+tAqzPpLr9TIzWhq27NXaGhJV330iUQnoQkRKlKo=)
5: ymk3s2uYAjIifXFebx0Gs2GCpZg.roa (hash: 1iZB8mSVVI0xWBNNoWKTn+58QXVIuSn2YESYam7CY+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/KwviJiMNQJnO6gpKbPTti5AgE1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:13:37:b6:98:e2:fa:32:2d:b7:27:a0:ab:53:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b0be226230d4099ceea0a4a6cf4ed8b90201350
Validity
Not Before: Oct 19 10:01:50 2025 GMT
Not After : Oct 20 10:01:50 2025 GMT
Subject: CN=d30319e909065f4757f097d69f8d2ac71a0445a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:02:20:bc:a1:b6:25:17:b3:26:8b:da:73:39:
01:8c:75:26:e2:de:51:e7:6b:12:64:22:26:7d:01:
bf:8d:02:56:a4:da:52:17:70:53:4e:56:6a:51:4e:
a3:03:81:75:48:0a:62:79:66:7d:4f:be:98:79:bb:
63:41:4e:ec:91:6c:91:c5:46:3b:60:b3:ba:bd:b5:
16:30:88:01:a5:01:61:6f:7a:2d:dd:fa:2b:64:35:
be:00:88:ae:5e:da:3f:4b:20:42:4c:4f:b6:a0:b6:
1d:f5:21:c7:2d:f1:32:f5:9a:d6:bf:93:68:af:c0:
07:ab:04:96:6b:f2:ce:8d:86:f3:1c:ff:02:f9:57:
f6:c4:06:5c:b6:08:5a:9d:69:0b:68:89:4f:1f:96:
e3:ca:7a:e0:38:df:9d:92:ea:98:cd:d3:38:e8:29:
fe:64:25:42:c8:81:59:a0:94:88:c4:5e:4d:15:34:
07:fd:e3:fb:0f:e9:d5:49:4a:c4:86:9e:3a:ac:73:
93:cb:71:50:50:0d:30:01:33:cb:86:98:ea:76:86:
23:90:8a:8b:23:f8:40:2c:59:0e:4f:99:48:4f:8e:
db:c6:d5:1d:12:c6:ac:c0:08:83:46:01:27:5c:23:
cf:7c:6c:1d:f5:3d:be:92:4b:3c:b8:66:9d:d6:6b:
22:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:03:19:E9:09:06:5F:47:57:F0:97:D6:9F:8D:2A:C7:1A:04:45:A6
X509v3 Authority Key Identifier:
keyid:2B:0B:E2:26:23:0D:40:99:CE:EA:0A:4A:6C:F4:ED:8B:90:20:13:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwviJiMNQJnO6gpKbPTti5AgE1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:2f:22:ce:b5:ac:c4:47:ea:5a:7e:39:e8:0e:19:f8:f9:dd:
39:58:53:57:9d:97:ef:55:19:92:f1:00:47:8b:9c:7b:1b:aa:
87:69:4f:6c:26:c2:9a:07:74:96:36:90:ca:4a:02:a2:c6:ad:
a1:6c:e6:08:49:2c:ff:7a:99:14:56:52:82:e6:b2:65:ff:4c:
eb:13:67:cb:3b:02:7a:dd:e7:6f:59:fe:22:c3:8f:a4:04:f7:
87:b8:f7:44:cd:17:42:5e:a6:73:e3:69:55:a2:74:c6:ed:5e:
0b:ff:bd:0d:1a:70:82:23:f1:1b:ad:36:6b:1c:b8:aa:bc:6c:
f0:66:81:bd:b6:10:27:50:09:62:ab:6d:cf:be:1a:a0:01:62:
14:65:40:7d:67:db:c5:23:46:cb:6a:f6:ec:57:7c:fd:46:48:
91:70:d5:d3:22:6a:a9:8e:e6:e3:65:05:c8:38:50:90:d3:cb:
c0:2e:4b:99:e0:22:ec:9b:96:5a:d7:67:e4:81:8a:82:fd:50:
43:55:52:bb:aa:f2:5a:a2:22:2b:4a:41:03:8b:35:13:53:44:
b8:04:22:bd:86:3e:12:f2:59:25:49:bb:46:9f:b4:7c:14:4d:
e3:ee:cc:cc:43:71:38:84:89:7f:c8:80:25:ef:88:0a:c2:48:
eb:92:f7:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:39:18 2025 by rpki-client