Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.mft
File: kWg1p4YCMde8FkjUX46Vf1FQWyg.mft (raw, json)
Hash identifier: YepwYvTduVAYUuM6ZeITlTRFUgf8cOZ1ATMWgQo9MvY=
Subject key identifier: E7:D7:85:96:BD:DB:3B:98:C2:0D:DD:E1:D3:D0:EF:9A:3B:01:AC:18
Authority key identifier: 91:68:35:A7:86:02:31:D7:BC:16:48:D4:5F:8E:95:7F:51:50:5B:28
Certificate issuer: /CN=916835a7860231d7bc1648d45f8e957f51505b28
Certificate serial: 0199FD6AD2578A6FECC9CD4FCCD2433A580E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kWg1p4YCMde8FkjUX46Vf1FQWyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.mft
Manifest number: 04C1
Signing time: Sun 19 Oct 2025 17:01:00 +0000
Manifest this update: Sun 19 Oct 2025 17:01:00 +0000
Manifest next update: Mon 20 Oct 2025 17:01:00 +0000
Files and hashes: 1: kWg1p4YCMde8FkjUX46Vf1FQWyg.crl (hash: Od5KF1fEl9FYxbIqi9qGYGSsGEav2FOqyfFNs+60PPI=)
2: wrpYuCoTA0QDqUx1_Pjj2R81Fzo.roa (hash: EwlJIDraNdoBBYvI+7Xd9v0lh6FgCXu/F5yckTradM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/kWg1p4YCMde8FkjUX46Vf1FQWyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:d2:57:8a:6f:ec:c9:cd:4f:cc:d2:43:3a:58:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=916835a7860231d7bc1648d45f8e957f51505b28
Validity
Not Before: Oct 19 17:01:00 2025 GMT
Not After : Oct 20 17:01:00 2025 GMT
Subject: CN=e7d78596bddb3b98c20ddde1d3d0ef9a3b01ac18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:16:e1:05:95:4b:c7:68:bd:23:9a:dc:dd:fa:
ee:e8:04:ec:9e:22:65:ba:85:3e:9b:1b:96:d1:5b:
48:d4:5f:be:87:0f:4a:48:75:fb:8e:de:c9:6b:e0:
1e:40:73:a6:59:87:50:e6:c9:0b:c3:80:fc:0f:a2:
06:b7:1e:c4:4d:84:e6:a7:34:74:4a:3e:15:b5:14:
60:04:dd:24:98:5d:b9:78:0e:a8:81:24:2a:ca:b6:
b0:98:d4:07:aa:2f:63:34:1c:1a:e9:61:6d:1d:9f:
6f:30:b0:ee:6d:de:74:ce:81:ff:51:c8:00:e8:18:
2d:2d:a7:d2:fd:a9:0c:ea:64:8f:9c:17:fe:29:6e:
a8:25:2d:6a:d3:c7:a6:7b:26:28:2b:33:ae:f3:fb:
04:c7:1d:df:5e:c1:60:53:6d:68:27:ef:f1:96:4b:
a0:7d:e7:03:e2:d4:1d:e0:76:a7:e7:b7:99:03:56:
f0:63:e9:82:f0:74:d7:66:34:0e:c4:a4:76:d7:c3:
87:dc:38:0e:3b:6a:68:c6:2f:57:de:58:90:a0:fe:
f0:60:50:b8:f6:fa:17:6d:a7:98:07:3e:77:a6:3f:
00:40:6c:10:d2:a5:d7:6b:0f:6d:ae:8d:77:a8:35:
b4:88:06:06:75:f6:c0:d5:ef:99:8c:53:0c:a0:5f:
8a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:D7:85:96:BD:DB:3B:98:C2:0D:DD:E1:D3:D0:EF:9A:3B:01:AC:18
X509v3 Authority Key Identifier:
keyid:91:68:35:A7:86:02:31:D7:BC:16:48:D4:5F:8E:95:7F:51:50:5B:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kWg1p4YCMde8FkjUX46Vf1FQWyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:a2:5a:9f:48:68:08:a0:9f:cb:4d:c0:45:38:bf:32:ab:ec:
5a:13:1a:a3:73:7b:e0:1f:bc:f9:68:66:52:41:3e:24:3d:df:
82:3d:52:7b:db:05:2c:c7:0b:f0:6f:f3:0b:29:2e:09:0b:ab:
6d:ac:3d:dd:da:54:0e:35:0d:64:00:8c:a9:47:6c:19:a3:27:
7a:50:73:6c:62:3d:8b:d7:09:ec:ad:8e:72:e1:9f:dc:a2:01:
44:8d:04:9c:e2:d5:8a:e9:40:27:23:64:cb:a0:08:42:16:dd:
27:1b:14:3c:60:3f:14:65:74:08:67:6a:ae:d1:9c:0c:b0:c6:
4e:69:b1:dc:74:2b:5b:3c:e9:48:1b:de:9d:5e:b9:0d:af:b6:
d5:99:c4:4c:1f:e7:b0:a7:34:50:2a:fc:f0:ee:09:2d:56:9a:
d4:86:f9:50:ab:62:50:9c:9e:22:48:bc:d0:b1:3a:29:f3:31:
fa:90:b4:50:33:9f:9c:2e:8e:e3:4b:59:9e:0d:e0:69:4c:0a:
1e:dd:7b:46:71:dd:8a:8a:42:a8:b4:55:cd:47:23:88:fd:22:
ea:35:63:f6:f8:46:29:be:00:a6:ec:f3:93:d0:11:74:f9:64:
df:2f:16:98:16:eb:55:d6:b6:2b:a2:0b:44:a6:9f:09:0d:2f:
4c:81:a1:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:41:14 2025 by rpki-client