Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/66c025-53a2-4219-9f39-f18d0c1b8bee/1/Kwprx2i2FVjqweWekEUR_F3Yu8E.mft
File: Kwprx2i2FVjqweWekEUR_F3Yu8E.mft (raw, json)
Hash identifier: lu9vwzCim/x8npmfrmANpPjvnoLE/HpovvVZpqIxLzM=
Subject key identifier: 4E:F8:38:62:24:C8:84:EB:2C:AD:47:A7:01:F3:8E:5B:D6:AD:A0:35
Authority key identifier: 2B:0A:6B:C7:68:B6:15:58:EA:C1:E5:9E:90:45:11:FC:5D:D8:BB:C1
Certificate issuer: /CN=2b0a6bc768b61558eac1e59e904511fc5dd8bbc1
Certificate serial: 0199FDD904A997E938888C6190E6DAEC7864
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kwprx2i2FVjqweWekEUR_F3Yu8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/66c025-53a2-4219-9f39-f18d0c1b8bee/1/Kwprx2i2FVjqweWekEUR_F3Yu8E.mft
Manifest number: 06CF
Signing time: Sun 19 Oct 2025 19:01:22 +0000
Manifest this update: Sun 19 Oct 2025 19:01:22 +0000
Manifest next update: Mon 20 Oct 2025 19:01:22 +0000
Files and hashes: 1: Kwprx2i2FVjqweWekEUR_F3Yu8E.crl (hash: krJXUSx2E94NMjJIP/A6warB89VdvGMm3G/Es9TKSs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/66c025-53a2-4219-9f39-f18d0c1b8bee/1/Kwprx2i2FVjqweWekEUR_F3Yu8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/66c025-53a2-4219-9f39-f18d0c1b8bee/1/Kwprx2i2FVjqweWekEUR_F3Yu8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kwprx2i2FVjqweWekEUR_F3Yu8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:04:a9:97:e9:38:88:8c:61:90:e6:da:ec:78:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b0a6bc768b61558eac1e59e904511fc5dd8bbc1
Validity
Not Before: Oct 19 19:01:22 2025 GMT
Not After : Oct 20 19:01:22 2025 GMT
Subject: CN=4ef8386224c884eb2cad47a701f38e5bd6ada035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9f:eb:7d:a2:4c:97:7d:a8:36:fb:9a:41:7b:
3d:97:21:cb:cc:02:02:b9:fd:bf:39:7f:29:2c:29:
6f:f3:31:13:73:0b:47:ab:20:45:67:86:b3:c8:5a:
c5:1c:c0:bc:60:66:9f:3f:3b:fc:42:f5:f8:ac:af:
d8:02:b1:95:d6:1a:d1:e0:74:b0:c7:c3:3e:8d:c5:
bd:18:aa:5f:84:72:05:7b:1d:d2:0f:ab:67:7c:e0:
8a:a5:2b:55:61:a4:a5:e0:74:84:1b:2f:3e:66:08:
88:c1:4d:d2:35:be:c3:74:c5:e2:8d:bf:56:c1:51:
3d:03:da:68:a3:36:14:af:b2:47:af:3d:bb:f4:41:
7d:c1:7e:a8:f6:18:0a:d7:eb:e9:fb:05:02:e1:0e:
b8:02:4b:75:4b:ed:ef:4b:08:75:9a:f7:3a:0b:50:
54:3e:23:47:d8:91:98:59:79:fa:64:51:43:11:58:
24:97:79:ce:2c:a8:6f:c7:e7:27:6b:2c:29:46:c2:
ba:04:eb:e6:85:e8:41:a6:22:3d:39:9e:25:97:d2:
92:0b:dc:10:2d:ba:09:bd:82:12:5f:d7:f9:55:d4:
4a:7d:60:70:44:97:d9:6b:3a:78:64:eb:11:0a:08:
5c:f1:98:22:fb:98:cf:09:17:01:9f:00:06:3e:5b:
fe:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:F8:38:62:24:C8:84:EB:2C:AD:47:A7:01:F3:8E:5B:D6:AD:A0:35
X509v3 Authority Key Identifier:
keyid:2B:0A:6B:C7:68:B6:15:58:EA:C1:E5:9E:90:45:11:FC:5D:D8:BB:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kwprx2i2FVjqweWekEUR_F3Yu8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/66c025-53a2-4219-9f39-f18d0c1b8bee/1/Kwprx2i2FVjqweWekEUR_F3Yu8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/66c025-53a2-4219-9f39-f18d0c1b8bee/1/Kwprx2i2FVjqweWekEUR_F3Yu8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:91:58:c7:13:1b:79:d6:70:e1:e7:fe:84:0a:d8:15:41:94:
e5:d5:4b:fa:75:33:32:48:7a:1b:6d:59:c0:26:e0:4a:0d:6b:
a0:79:0b:40:f6:a6:28:e0:d2:37:10:c1:0d:8e:38:14:1c:24:
17:31:9b:9f:a4:d9:34:de:4b:0b:34:a5:a4:c0:a0:f5:63:62:
0d:80:3b:ab:fa:0e:44:22:6c:51:4c:26:36:ea:94:b2:03:7a:
9c:64:2a:bf:ee:03:ae:31:95:b6:ff:23:81:02:a0:c9:07:b4:
86:49:a3:5a:3f:e7:2c:91:d9:09:a0:58:e1:e3:56:66:d0:b6:
51:d6:a1:b3:d5:2d:2f:32:91:72:84:39:4b:07:39:bc:96:a8:
cf:3a:b5:4c:e2:30:6c:7f:08:f7:13:86:dd:89:ad:e7:9d:91:
83:b2:5d:1e:2c:2b:84:54:c5:e1:36:8e:05:79:e2:fc:19:70:
77:1e:01:b1:7e:e0:27:0a:31:ae:fa:d9:52:68:1a:e9:75:f4:
b2:b2:16:6a:c9:10:6e:58:75:0a:87:b2:64:6e:15:63:f6:5b:
11:40:49:d0:61:9c:bf:31:d4:6c:9a:ea:21:3e:08:30:46:6d:
0c:0d:0c:5c:10:2f:e7:82:bf:d0:44:3e:e1:1e:1b:32:fb:02:
fb:73:5c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:40:23 2025 by rpki-client