Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft
File: Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft (raw, json)
Hash identifier: OHVYKY5+viqtDmegfLcxfbGanHYmhxoCkgClHLVCBj8=
Subject key identifier: 93:CA:E9:5E:B2:4B:9D:0E:4E:0B:CE:0F:B5:6E:50:C7:18:D8:AC:E9
Authority key identifier: 2B:0E:6A:7B:DB:11:C4:FF:D7:77:18:08:15:10:C9:14:31:17:8C:DB
Certificate issuer: /CN=2b0e6a7bdb11c4ffd77718081510c91431178cdb
Certificate serial: 0199FBEAE9182145E6DB2FF4A552F6703A35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 10:01:40 +0000
Manifest this update: Sun 19 Oct 2025 10:01:40 +0000
Manifest next update: Mon 20 Oct 2025 10:01:40 +0000
Files and hashes: 1: HF_iZrXdVvTKE2NYXNHiTyOcQ64.roa (hash: WVml14eDTh4qN4FFOa9q4K+T7+9z6Qbi8JZGS0EECf0=)
2: Kw5qe9sRxP_XdxgIFRDJFDEXjNs.crl (hash: pDerT3vrsv+o6kN9+FZnx6nhS8EWtAxGLCVnxYVQ/ZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:e9:18:21:45:e6:db:2f:f4:a5:52:f6:70:3a:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b0e6a7bdb11c4ffd77718081510c91431178cdb
Validity
Not Before: Oct 19 10:01:40 2025 GMT
Not After : Oct 20 10:01:40 2025 GMT
Subject: CN=93cae95eb24b9d0e4e0bce0fb56e50c718d8ace9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4e:c2:5c:d2:9c:7f:7d:b0:6d:5f:3c:20:5b:
5a:5b:ae:85:11:c0:c9:d9:5c:d5:ff:90:3b:a1:03:
fc:e0:f7:62:ce:bb:ff:e0:8d:31:cd:5c:d3:17:9d:
fb:ec:ed:a3:5e:c7:54:a0:39:c3:ba:48:01:24:d6:
ec:ad:32:06:5d:89:78:94:bb:13:a5:b1:68:9a:49:
cb:dd:ad:85:04:63:32:29:dc:01:09:fb:e1:64:c4:
13:d7:10:ce:50:06:51:44:4d:fc:a2:3d:96:4b:4f:
7d:38:f9:8e:2f:0c:ff:1a:d0:e2:54:46:34:8e:e3:
8e:73:1e:2a:3a:c4:32:52:6c:47:a0:53:cd:60:28:
1d:f5:23:c7:28:6e:3f:bd:ac:34:bc:6e:4a:20:5d:
b3:af:41:e1:22:f0:d4:fc:70:e8:4e:76:c2:51:5a:
ae:77:1f:b0:fb:93:42:33:b2:06:ce:94:a7:6b:90:
6d:7c:d6:1b:79:51:97:3b:83:ce:b8:8b:9c:d5:30:
46:74:9e:80:dd:8d:3f:26:3b:5d:45:a4:cc:86:95:
85:6d:e6:e5:fa:9f:83:e2:03:e6:24:06:4b:09:b5:
0f:a3:0d:4a:c7:e1:ed:0f:49:58:7b:b2:b8:89:08:
f1:49:57:f9:7e:78:37:b9:34:aa:f8:aa:44:8f:c6:
6d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:CA:E9:5E:B2:4B:9D:0E:4E:0B:CE:0F:B5:6E:50:C7:18:D8:AC:E9
X509v3 Authority Key Identifier:
keyid:2B:0E:6A:7B:DB:11:C4:FF:D7:77:18:08:15:10:C9:14:31:17:8C:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:00:bc:58:40:e3:32:23:6e:53:17:a8:f2:54:10:33:35:55:
54:61:a0:99:e2:52:e7:5e:60:12:c6:c6:15:14:93:7b:d4:58:
32:20:eb:79:cb:03:2b:73:2b:c4:64:c6:f4:eb:3a:d2:9f:f1:
f8:c0:b4:4b:8c:11:b7:fc:70:f6:17:4c:12:08:bc:9a:e9:94:
b8:ac:a1:be:29:f2:36:0b:f6:ab:09:db:3d:ca:8e:4b:db:45:
75:b6:50:cf:43:77:c4:b2:94:fe:0f:3f:6e:02:fd:4f:3c:e5:
3e:7d:ed:29:40:92:77:db:72:1b:34:67:ee:5d:ff:45:57:3f:
de:e0:44:bf:98:2b:7a:02:ac:1d:f4:35:14:26:90:66:26:5b:
4f:e8:d0:02:94:5f:25:72:2a:ac:13:33:d3:8f:cb:7e:ad:fa:
c7:34:ca:ef:58:78:0b:37:60:8d:73:d3:91:06:b8:92:d9:c4:
ce:fa:7b:42:66:44:03:66:0d:8c:2d:55:2a:41:19:de:34:67:
02:4c:df:af:bc:57:c0:c0:1c:70:7f:ad:77:28:9c:6c:dd:0f:
6b:95:c7:7e:93:7d:e2:64:0d:ee:a6:72:89:35:dc:72:b7:14:
b5:0d:ab:a2:7e:63:09:ca:f3:11:b7:f1:44:d3:7f:6f:b8:48:
e4:fc:2b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:52:20 2025 by rpki-client