Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft
File: kwpXLBbQxE93Zlh9kth4ujBUHR4.mft (raw, json)
Hash identifier: 0GWre1eght0+w0Ag2OMJbcAH8ZJSxbmyfNSe8IUXzBM=
Subject key identifier: 58:01:9E:3E:4D:F2:A0:EA:AC:7C:34:0B:DC:6A:BA:EB:E9:BA:42:52
Authority key identifier: 93:0A:57:2C:16:D0:C4:4F:77:66:58:7D:92:D8:78:BA:30:54:1D:1E
Certificate issuer: /CN=930a572c16d0c44f7766587d92d878ba30541d1e
Certificate serial: 0199FDDA53AE3C03794CD37C215E6F2998B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwpXLBbQxE93Zlh9kth4ujBUHR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft
Manifest number: 08B9
Signing time: Sun 19 Oct 2025 19:02:47 +0000
Manifest this update: Sun 19 Oct 2025 19:02:47 +0000
Manifest next update: Mon 20 Oct 2025 19:02:47 +0000
Files and hashes: 1: dDvbinURbnBhghcDsCWr8pNjL-Q.roa (hash: hUZbMhthMOHDXoT8VJO840vVSWFg65GOQ1Sk4GTZvhs=)
2: kwpXLBbQxE93Zlh9kth4ujBUHR4.crl (hash: TCO+UAQrvjUrpy5VRE+OhWlwQUc6sz3DT85YXR4eD3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwpXLBbQxE93Zlh9kth4ujBUHR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:53:ae:3c:03:79:4c:d3:7c:21:5e:6f:29:98:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=930a572c16d0c44f7766587d92d878ba30541d1e
Validity
Not Before: Oct 19 19:02:47 2025 GMT
Not After : Oct 20 19:02:47 2025 GMT
Subject: CN=58019e3e4df2a0eaac7c340bdc6abaebe9ba4252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:13:f6:a6:ea:71:da:7b:56:a4:ce:50:f7:34:
41:9c:a6:ab:65:6a:45:76:70:78:f0:98:c9:df:e5:
14:8f:bc:b2:8e:73:94:e7:d3:fd:41:50:2b:e3:04:
5a:ff:1b:94:8b:cc:97:7d:74:2d:be:09:5e:4c:7e:
f5:4c:9c:9f:33:7f:37:0b:fd:b8:f7:06:d4:ac:eb:
4e:2f:3e:91:3c:f9:b0:1f:a0:31:80:9d:3b:f0:f7:
3a:08:13:1a:7e:42:8e:a4:3f:46:c1:ed:64:2f:22:
3f:a4:22:77:79:28:6f:f8:25:d3:02:b5:29:1c:6e:
93:60:4c:3c:b6:58:37:dd:21:32:d4:87:b2:1e:80:
09:96:cc:b8:c3:3d:f0:94:17:67:e5:65:0c:c6:d7:
d2:90:38:ad:c6:66:97:91:f2:83:aa:bf:21:81:f0:
f2:7a:8f:31:b0:0a:e3:ad:b6:11:a0:e3:a5:61:29:
77:b8:6c:f4:4e:5c:50:80:d1:16:9a:a5:31:94:cb:
20:7d:6f:fa:5e:22:19:21:2b:3c:b6:01:13:bf:d7:
0e:b1:03:30:bd:96:9e:98:a2:c9:25:c9:fb:d2:f1:
43:16:cf:ad:a7:70:76:71:e4:0f:54:e8:a2:36:6c:
d8:00:55:2f:3b:b9:00:64:5c:39:42:28:49:7d:18:
e9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:01:9E:3E:4D:F2:A0:EA:AC:7C:34:0B:DC:6A:BA:EB:E9:BA:42:52
X509v3 Authority Key Identifier:
keyid:93:0A:57:2C:16:D0:C4:4F:77:66:58:7D:92:D8:78:BA:30:54:1D:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwpXLBbQxE93Zlh9kth4ujBUHR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:e9:b1:4c:6e:28:06:63:70:77:d5:99:a2:9b:f2:89:f6:de:
67:d8:47:49:fb:97:0c:d3:25:35:dd:7d:fb:4d:7b:da:07:13:
72:78:6a:49:47:7c:65:72:88:17:42:4e:b3:5b:20:a1:37:b5:
ea:dc:f4:ac:86:2c:91:e4:67:27:9d:72:82:32:62:7b:a0:c0:
75:be:38:c2:91:8f:41:2c:34:d0:25:c0:e3:4e:95:d4:7d:53:
c0:5b:1f:0b:b2:23:12:9b:eb:c3:f6:b0:9c:5d:e2:60:c7:da:
17:a4:ed:df:1b:e3:4f:a8:25:72:7c:07:dd:48:96:3e:79:d2:
5e:c2:18:57:2a:7a:90:61:08:c7:a6:cd:a3:ec:dc:37:03:03:
ba:f9:0e:92:6f:4e:74:16:fb:5e:75:62:5e:45:a1:bc:62:2b:
19:ea:22:f1:6b:a3:46:f8:9d:74:7c:91:99:98:5d:ac:f0:b4:
ec:d9:1b:e5:f3:8d:86:15:6e:2a:a4:61:63:e5:4b:e6:a5:7d:
3f:7f:00:55:08:2f:f6:9b:0e:80:93:18:e1:1a:21:92:77:fb:
f6:a7:c1:03:d1:5b:88:69:ad:12:4f:1b:9a:14:72:d1:1f:58:
24:30:31:af:50:b1:97:00:5b:8c:eb:7a:de:68:fc:9d:db:2d:
d6:e3:d7:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92lOuPAN5TNN8IV5vKZi1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzMGE1NzJjMTZkMGM0NGY3NzY2NTg3ZDkyZDg3OGJhMzA1
NDFkMWUwHhcNMjUxMDE5MTkwMjQ3WhcNMjUxMDIwMTkwMjQ3WjAzMTEwLwYDVQQD
Eyg1ODAxOWUzZTRkZjJhMGVhYWM3YzM0MGJkYzZhYmFlYmU5YmE0MjUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhP2pupx2ntWpM5Q9zRBnKarZWpF
dnB48JjJ3+UUj7yyjnOU59P9QVAr4wRa/xuUi8yXfXQtvgleTH71TJyfM383C/24
9wbUrOtOLz6RPPmwH6AxgJ078Pc6CBMafkKOpD9Gwe1kLyI/pCJ3eShv+CXTArUp
HG6TYEw8tlg33SEy1IeyHoAJlsy4wz3wlBdn5WUMxtfSkDitxmaXkfKDqr8hgfDy
eo8xsArjrbYRoOOlYSl3uGz0TlxQgNEWmqUxlMsgfW/6XiIZISs8tgETv9cOsQMw
vZaemKLJJcn70vFDFs+tp3B2ceQPVOiiNmzYAFUvO7kAZFw5QihJfRjpKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFgBnj5N8qDqrHw0C9xquuvpukJSMB8GA1UdIwQY
MBaAFJMKVywW0MRPd2ZYfZLYeLowVB0eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3dwWExCYlF4RTkzWmxoOWt0aDR1akJVSFI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9hYTU1YTItZTMzZS00ZGMwLTlkODct
OGNjNjU3OTQxNWRhLzEva3dwWExCYlF4RTkzWmxoOWt0aDR1akJVSFI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi9hYTU1YTItZTMzZS00ZGMwLTlkODctOGNjNjU3OTQxNWRh
LzEva3dwWExCYlF4RTkzWmxoOWt0aDR1akJVSFI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfumxTG4o
BmNwd9WZopvyifbeZ9hHSfuXDNMlNd19+0172gcTcnhqSUd8ZXKIF0JOs1sgoTe1
6tz0rIYskeRnJ51ygjJie6DAdb44wpGPQSw00CXA406V1H1TwFsfC7IjEpvrw/aw
nF3iYMfaF6Tt3xvjT6glcnwH3UiWPnnSXsIYVyp6kGEIx6bNo+zcNwMDuvkOkm9O
dBb7XnViXkWhvGIrGeoi8WujRviddHyRmZhdrPC07Nkb5fONhhVuKqRhY+VL5qV9
P38AVQgv9psOgJMY4Rohknf79qfBA9FbiGmtEk8bmhRy0R9YJDAxr1CxlwBbjOt6
3mj8ndst1uPXTA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:12:41 2025 by rpki-client