Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.mft
File: kwy6S0MwS1HEvd-9QzF4KtkRAso.mft (raw, json)
Hash identifier: +rP32Ltl+XfBCjbhNg7ZdbIO2Sk1T1Ve9P+icMBKE0M=
Subject key identifier: 47:A9:04:F3:D7:85:EB:F4:74:F4:3B:5F:B0:1E:81:10:72:1E:10:32
Authority key identifier: 93:0C:BA:4B:43:30:4B:51:C4:BD:DF:BD:43:31:78:2A:D9:11:02:CA
Certificate issuer: /CN=930cba4b43304b51c4bddfbd4331782ad91102ca
Certificate serial: 019A025A171A319FBDDF25CF13CD80DF61E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwy6S0MwS1HEvd-9QzF4KtkRAso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.mft
Manifest number: 03FE
Signing time: Mon 20 Oct 2025 16:00:49 +0000
Manifest this update: Mon 20 Oct 2025 16:00:49 +0000
Manifest next update: Tue 21 Oct 2025 16:00:49 +0000
Files and hashes: 1: kwy6S0MwS1HEvd-9QzF4KtkRAso.crl (hash: YUuuTNKrmdsnuscWWcwQ0y73ypN9Iq62eFaZVJDKopk=)
2: uxtuL63qPRDpKVk1ikR7XA0jVWo.roa (hash: MOBvDlpT4Tx/Y9+52ugnxgyKuM5ZQrSPEm8NwRXVQVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwy6S0MwS1HEvd-9QzF4KtkRAso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:5a:17:1a:31:9f:bd:df:25:cf:13:cd:80:df:61:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=930cba4b43304b51c4bddfbd4331782ad91102ca
Validity
Not Before: Oct 20 16:00:49 2025 GMT
Not After : Oct 21 16:00:49 2025 GMT
Subject: CN=47a904f3d785ebf474f43b5fb01e8110721e1032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f8:eb:c6:b8:b3:a1:fa:15:fb:3e:db:d7:44:
d4:89:84:05:e4:60:99:80:e7:39:0c:c0:fa:7f:96:
31:d9:74:9a:31:88:3d:82:da:b3:a9:29:0e:44:3e:
ed:9d:41:25:63:00:cd:51:f4:4d:e1:88:b8:69:ee:
0f:fc:cf:db:d6:9f:b9:ac:43:ad:af:6a:9c:7a:dc:
19:94:e0:ef:4e:32:c9:8b:b2:38:e1:6b:ee:cb:1a:
a9:85:b2:76:2d:7c:ba:67:e4:f2:af:34:6c:af:6c:
79:70:c2:3c:4b:02:fc:78:4b:f9:28:be:11:af:a9:
7f:a4:26:9b:51:3f:e9:23:99:eb:bd:94:8c:2e:56:
3e:42:28:5b:b4:81:22:1a:e3:45:fb:33:0b:21:98:
b4:20:1a:99:72:72:b6:17:d9:76:ea:1f:d7:5b:cc:
18:70:7e:35:be:27:9e:3f:3a:c6:48:a3:66:4c:c5:
1e:0a:40:94:32:19:9c:c5:22:c5:0c:19:d6:40:56:
31:c8:4c:70:93:3a:f8:ad:0a:f8:4c:a4:df:3b:63:
ce:f7:09:50:53:8b:6a:a4:bf:dd:be:9e:0f:69:cb:
ad:56:35:e4:f7:8d:95:23:d6:c4:3b:5c:e0:cb:ac:
25:62:11:38:da:b2:0c:ec:29:84:06:fd:fe:0c:cd:
b3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A9:04:F3:D7:85:EB:F4:74:F4:3B:5F:B0:1E:81:10:72:1E:10:32
X509v3 Authority Key Identifier:
keyid:93:0C:BA:4B:43:30:4B:51:C4:BD:DF:BD:43:31:78:2A:D9:11:02:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwy6S0MwS1HEvd-9QzF4KtkRAso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:c4:8b:e7:0c:c5:fe:43:84:b0:60:57:05:00:3b:66:44:54:
b3:ed:28:87:21:b0:38:77:6f:be:2b:74:c0:90:03:23:21:71:
f9:48:8c:ab:a9:52:14:04:01:ad:56:fe:50:1b:45:d1:6f:f3:
20:8a:e3:da:62:aa:75:cf:58:88:a4:0e:fd:45:c9:51:a6:09:
5c:fc:06:5d:c4:dc:79:51:63:a7:1f:1c:00:d0:ad:a0:a9:f1:
97:de:e1:68:fd:71:0a:20:4d:86:52:fb:b0:c6:66:26:4e:9a:
f2:da:1f:3e:8d:c9:f8:fd:13:70:1e:08:86:9b:7e:98:df:09:
80:b4:b0:01:ec:79:3b:ab:57:e8:67:33:15:03:e9:c6:93:71:
79:e2:c0:89:f7:78:80:7b:38:bd:d6:58:ce:5d:ae:57:eb:b7:
3a:90:34:61:91:67:3c:d1:04:16:8c:75:8b:d2:be:e7:5f:48:
cb:08:ab:ef:99:64:d1:13:ee:17:cf:44:46:cf:c5:33:58:06:
97:f1:79:f6:09:b9:11:9e:4b:2e:b2:82:f5:6b:d3:4b:f5:85:
2c:3c:3f:8f:fa:2e:c0:db:73:cf:0d:1b:dd:5c:3e:95:78:a3:
82:58:17:38:33:4b:a4:f8:99:16:9d:e5:87:a3:93:70:46:1b:
73:d8:ed:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoCWhcaMZ+93yXPE82A32HoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzMGNiYTRiNDMzMDRiNTFjNGJkZGZiZDQzMzE3ODJhZDkx
MTAyY2EwHhcNMjUxMDIwMTYwMDQ5WhcNMjUxMDIxMTYwMDQ5WjAzMTEwLwYDVQQD
Eyg0N2E5MDRmM2Q3ODVlYmY0NzRmNDNiNWZiMDFlODExMDcyMWUxMDMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfjrxrizofoV+z7b10TUiYQF5GCZ
gOc5DMD6f5Yx2XSaMYg9gtqzqSkORD7tnUElYwDNUfRN4Yi4ae4P/M/b1p+5rEOt
r2qcetwZlODvTjLJi7I44WvuyxqphbJ2LXy6Z+TyrzRsr2x5cMI8SwL8eEv5KL4R
r6l/pCabUT/pI5nrvZSMLlY+QihbtIEiGuNF+zMLIZi0IBqZcnK2F9l26h/XW8wY
cH41vieePzrGSKNmTMUeCkCUMhmcxSLFDBnWQFYxyExwkzr4rQr4TKTfO2PO9wlQ
U4tqpL/dvp4PacutVjXk942VI9bEO1zgy6wlYhE42rIM7CmEBv3+DM2z+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEepBPPXhev0dPQ7X7AegRByHhAyMB8GA1UdIwQY
MBaAFJMMuktDMEtRxL3fvUMxeCrZEQLKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3d5NlMwTXdTMUhFdmQtOVF6RjRLdGtSQXNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80ZWNhM2YtNGY0MS00NTk4LWFhMWIt
ZWVkYjE2OThjMjFhLzEva3d5NlMwTXdTMUhFdmQtOVF6RjRLdGtSQXNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80ZWNhM2YtNGY0MS00NTk4LWFhMWItZWVkYjE2OThjMjFh
LzEva3d5NlMwTXdTMUhFdmQtOVF6RjRLdGtSQXNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG8SL5wzF
/kOEsGBXBQA7ZkRUs+0ohyGwOHdvvit0wJADIyFx+UiMq6lSFAQBrVb+UBtF0W/z
IIrj2mKqdc9YiKQO/UXJUaYJXPwGXcTceVFjpx8cANCtoKnxl97haP1xCiBNhlL7
sMZmJk6a8tofPo3J+P0TcB4Ihpt+mN8JgLSwAex5O6tX6GczFQPpxpNxeeLAifd4
gHs4vdZYzl2uV+u3OpA0YZFnPNEEFox1i9K+519Iywir75lk0RPuF89ERs/FM1gG
l/F59gm5EZ5LLrKC9WvTS/WFLDw/j/ouwNtzzw0b3Vw+lXijglgXODNLpPiZFp3l
h6OTcEYbc9jtEA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 21:41:28 2025 by rpki-client