Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.mft
File: kw4KO7COSsZzY-MLqDsHFjLQqkM.mft (raw, json)
Hash identifier: kMgktW5BM3pr/cATLvvyM7VrgharTef8Y64MMyJNStQ=
Subject key identifier: 6B:97:F0:9F:43:61:D4:C0:D6:6D:6C:6B:4A:E4:3C:B0:03:F2:93:90
Authority key identifier: 93:0E:0A:3B:B0:8E:4A:C6:73:63:E3:0B:A8:3B:07:16:32:D0:AA:43
Certificate issuer: /CN=930e0a3bb08e4ac67363e30ba83b071632d0aa43
Certificate serial: 0199FBEC38DC89B560DB435A9C4A66612B33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kw4KO7COSsZzY-MLqDsHFjLQqkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.mft
Manifest number: 03EA
Signing time: Sun 19 Oct 2025 10:03:06 +0000
Manifest this update: Sun 19 Oct 2025 10:03:06 +0000
Manifest next update: Mon 20 Oct 2025 10:03:06 +0000
Files and hashes: 1: kw4KO7COSsZzY-MLqDsHFjLQqkM.crl (hash: s7Pi3qe3is8GHNAzyHUMfkygYgiIoWNilcJRAi7DWBE=)
2: xaq4DEF6a2KbAw0s5ehiRgdBeuQ.roa (hash: NrVb13nbYMUhAilB4rQP3yYP82eHLTMIedBxEXPs6iM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kw4KO7COSsZzY-MLqDsHFjLQqkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:38:dc:89:b5:60:db:43:5a:9c:4a:66:61:2b:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=930e0a3bb08e4ac67363e30ba83b071632d0aa43
Validity
Not Before: Oct 19 10:03:06 2025 GMT
Not After : Oct 20 10:03:06 2025 GMT
Subject: CN=6b97f09f4361d4c0d66d6c6b4ae43cb003f29390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:01:8d:86:fb:56:3f:5e:ea:00:3d:97:df:dc:
c3:d4:30:7b:2e:7b:c3:e0:80:2a:b7:f7:21:fa:f2:
e5:8c:3f:7a:fa:35:cf:62:29:eb:f2:42:44:58:9c:
a2:17:23:6c:8e:2e:bd:6a:64:d1:e5:10:84:4c:31:
9a:7e:63:48:3c:a0:c7:76:6b:46:b1:49:b7:20:7f:
dc:25:ad:a9:1c:62:ee:35:f3:7c:b0:42:b3:0c:8b:
c8:1f:e4:42:dc:f1:90:d3:9e:5f:eb:d9:3c:f1:2e:
fb:65:ad:6a:ef:86:ac:55:b8:7b:19:63:d9:df:07:
1b:00:fb:12:0e:a0:8d:33:56:46:ef:60:3a:11:6c:
97:39:5c:59:1f:8c:ac:5c:68:8d:d9:19:a9:9b:55:
8b:c7:67:1a:15:7c:42:3a:2a:3e:6d:7c:cf:91:60:
8e:4f:6e:f3:ea:ec:18:90:9a:66:d4:12:e5:88:4e:
c2:c1:b1:09:7a:26:1a:f8:c4:c9:45:c8:7c:1a:76:
14:2c:79:7a:4a:13:cf:37:f7:6c:84:2d:4a:aa:b5:
c6:02:09:7f:48:27:9c:88:57:2c:fd:a2:c5:b2:2c:
a3:0a:e6:0f:d3:b5:0e:29:af:e0:2b:9f:98:24:df:
cc:46:ae:d6:51:52:37:1f:11:ee:27:0e:df:01:78:
ce:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:97:F0:9F:43:61:D4:C0:D6:6D:6C:6B:4A:E4:3C:B0:03:F2:93:90
X509v3 Authority Key Identifier:
keyid:93:0E:0A:3B:B0:8E:4A:C6:73:63:E3:0B:A8:3B:07:16:32:D0:AA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kw4KO7COSsZzY-MLqDsHFjLQqkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:46:dd:20:00:2f:be:63:49:36:c9:81:85:9f:ef:84:6c:4b:
c2:d5:ca:7f:c3:16:75:76:b2:a5:e9:92:ea:9a:4c:3d:0d:17:
22:7a:51:bc:ba:2c:69:8c:e8:61:c1:a1:be:c5:3e:49:18:a4:
b7:4f:a4:a8:93:ca:10:a9:db:d3:b7:74:7f:73:22:b5:f2:56:
f8:08:e7:af:8e:d3:d2:c4:48:2d:69:4e:e3:f5:67:52:b0:19:
5e:3c:88:99:f8:fb:1b:0d:33:60:a5:3d:83:39:39:cf:3d:90:
ab:60:a3:16:23:67:c6:da:b9:8d:7f:d4:37:23:93:72:65:03:
c7:c8:28:20:6e:6c:9a:6a:a2:43:c2:b7:ef:33:e6:06:59:cd:
75:54:3c:6c:20:63:72:34:b3:da:a3:a7:40:cb:7c:2f:94:e7:
24:0b:a1:e8:db:4b:09:f0:3d:64:14:2d:4a:c3:fe:c5:9b:dc:
ee:f9:d6:e0:91:1b:f7:05:ae:49:5a:e5:d8:9b:1a:53:ba:88:
40:7a:0e:9c:74:8a:3d:d3:43:1a:da:20:6c:e3:60:a4:05:86:
2f:ac:80:40:e4:ab:c9:dc:96:21:10:ed:21:28:53:f1:98:18:
f2:34:3d:9a:b4:03:92:d4:a8:06:79:05:fa:6e:56:3a:7f:de:
97:e0:e3:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:30 2025 by rpki-client