Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft
File: kwpXLBbQxE93Zlh9kth4ujBUHR4.mft (raw, json)
Hash identifier: rVII9A3Tbfdr9FZUienaCMRRWEQSMW5BV3hRVvECQbY=
Subject key identifier: 31:4E:2D:28:15:88:7E:A7:B8:06:07:55:11:4F:CC:0E:DE:CA:A3:F6
Authority key identifier: 93:0A:57:2C:16:D0:C4:4F:77:66:58:7D:92:D8:78:BA:30:54:1D:1E
Certificate issuer: /CN=930a572c16d0c44f7766587d92d878ba30541d1e
Certificate serial: 0198D472B7642AA90C699B483C045ECAE5DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwpXLBbQxE93Zlh9kth4ujBUHR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft
Manifest number: 081F
Signing time: Sat 23 Aug 2025 01:02:24 +0000
Manifest this update: Sat 23 Aug 2025 01:02:24 +0000
Manifest next update: Sun 24 Aug 2025 01:02:24 +0000
Files and hashes: 1: dDvbinURbnBhghcDsCWr8pNjL-Q.roa (hash: hUZbMhthMOHDXoT8VJO840vVSWFg65GOQ1Sk4GTZvhs=)
2: kwpXLBbQxE93Zlh9kth4ujBUHR4.crl (hash: 297bx9LFs25OBqm0sKwwJ6krwpnAgb1aOpDIJPFlFFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwpXLBbQxE93Zlh9kth4ujBUHR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:b7:64:2a:a9:0c:69:9b:48:3c:04:5e:ca:e5:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=930a572c16d0c44f7766587d92d878ba30541d1e
Validity
Not Before: Aug 23 01:02:24 2025 GMT
Not After : Aug 24 01:02:24 2025 GMT
Subject: CN=314e2d2815887ea7b8060755114fcc0edecaa3f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3e:b3:26:45:0e:93:8d:fc:e4:86:fa:e4:5d:
de:8f:aa:c2:02:1a:07:09:cf:8b:4e:6a:aa:ad:85:
c8:8d:78:19:0e:42:48:1c:22:14:34:55:3f:4d:b3:
46:f5:04:d8:7c:2a:bd:c0:9f:10:f9:de:45:f7:d1:
16:d0:aa:fa:c1:ee:01:aa:b2:a7:f3:73:fd:e4:58:
0a:ae:e9:45:ec:f8:10:7f:99:f4:e3:4a:7e:24:fc:
06:f9:60:e4:04:d0:c4:a8:58:1d:d7:18:a4:5e:33:
93:3c:d3:e6:66:6e:10:be:e1:ab:e9:5e:af:0d:b8:
70:82:56:d8:72:0a:0b:8b:31:99:39:e2:80:b4:d8:
43:dc:00:b9:67:42:2d:cf:35:15:b5:1d:69:47:e5:
0a:0c:82:8f:bd:43:92:fb:a5:7c:0f:4a:71:98:d6:
e2:9f:3d:46:10:b7:eb:eb:ae:9d:ab:d3:03:2e:b7:
68:f7:fe:24:04:6e:fa:6c:06:e0:af:a9:7c:98:b7:
1a:0c:c5:14:99:90:df:3f:d2:90:a0:60:05:94:97:
f2:fd:5d:b7:4e:73:b3:fd:c6:b1:ec:e9:ed:7e:bb:
b5:85:e3:e9:b5:11:f8:8b:00:c9:3f:dd:b5:40:6c:
68:0d:da:2c:e9:d0:28:aa:da:c7:44:cc:3c:0c:62:
f4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:4E:2D:28:15:88:7E:A7:B8:06:07:55:11:4F:CC:0E:DE:CA:A3:F6
X509v3 Authority Key Identifier:
keyid:93:0A:57:2C:16:D0:C4:4F:77:66:58:7D:92:D8:78:BA:30:54:1D:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwpXLBbQxE93Zlh9kth4ujBUHR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:6b:4b:6c:1d:ab:ad:cb:f5:e6:5f:5d:c5:71:08:18:36:a6:
76:5b:58:17:5f:5a:c6:92:96:ba:ff:9c:ee:5e:a7:72:14:51:
7b:44:48:3a:3d:cf:32:12:e5:b4:1f:23:5a:eb:59:2c:7f:73:
f5:a3:b1:01:d3:ff:1d:37:7c:45:5a:ab:70:aa:65:17:b4:a4:
7d:da:2e:09:ec:1d:5e:10:e5:80:71:94:27:e0:f0:e7:4e:f2:
99:a9:9f:a5:58:2e:52:79:c2:8a:d8:91:de:fe:5b:06:b6:5f:
15:07:94:c9:25:c0:2d:a9:28:e0:6e:e3:b7:34:4d:16:ed:58:
81:c6:87:01:a3:d7:95:81:f2:a5:61:27:31:b5:bb:0c:f7:b4:
0d:83:ee:5e:23:26:4e:b6:39:7e:5e:eb:89:48:a8:21:15:0d:
62:24:90:d6:c3:3e:d2:a6:29:70:0b:d1:21:44:b2:9e:d8:16:
f1:7b:55:0c:26:d0:9e:4f:5a:f5:85:60:3c:e5:f2:2d:b6:94:
ae:01:9b:0a:5c:b3:20:2d:9d:66:78:c3:0c:16:5c:aa:73:76:
3c:a0:61:9e:a2:18:b4:cc:6e:d1:82:38:20:aa:b4:32:d1:8d:
85:73:95:80:fd:bf:ed:97:0e:0e:34:dc:29:d3:36:7c:5b:47:
02:8c:db:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:09:47 2025 by rpki-client