Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
File: kwHqBZY8l1byjuLpi488xHncn1g.mft (raw, json)
Hash identifier: skuhIb/aKTGBs1wa8WFt8rC7zk+xisyB5elwOIY+5JM=
Subject key identifier: 53:37:48:DA:9B:00:4D:75:80:23:5F:44:0F:A9:DC:A0:DA:A3:1F:B4
Authority key identifier: 93:01:EA:05:96:3C:97:56:F2:8E:E2:E9:8B:8F:3C:C4:79:DC:9F:58
Certificate issuer: /CN=9301ea05963c9756f28ee2e98b8f3cc479dc9f58
Certificate serial: 0199FC21A613721375ED8A3566DD787A1CC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 11:01:27 +0000
Manifest this update: Sun 19 Oct 2025 11:01:27 +0000
Manifest next update: Mon 20 Oct 2025 11:01:27 +0000
Files and hashes: 1: TVR9Wcx95L9uIbI7vmRK3_ppXuA.roa (hash: FBGg+DHw7jOc497O265+HPovAlPdSEs0qwJnAdItW6I=)
2: UvYnHc7rFlBw3j4tqyHKN3v104E.roa (hash: 6QDgTXlr47CFI8bSc1FSdC5Ii7Qu4oH4gM2ZxRc6gQc=)
3: bdOSuRKRee1uOsbVObRylNDB0a0.roa (hash: gjO8qJZwFaEvDikQnhsOULa/ARdOkiQLGR4fYx/iUVY=)
4: kwHqBZY8l1byjuLpi488xHncn1g.crl (hash: jFJsAVTgAkUU5J2JK7VJ0fVgllKAAogTi3waHwpGjnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:a6:13:72:13:75:ed:8a:35:66:dd:78:7a:1c:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9301ea05963c9756f28ee2e98b8f3cc479dc9f58
Validity
Not Before: Oct 19 11:01:27 2025 GMT
Not After : Oct 20 11:01:27 2025 GMT
Subject: CN=533748da9b004d7580235f440fa9dca0daa31fb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:76:92:4a:80:a2:76:f7:7b:85:00:dd:a0:43:
33:d9:8e:66:d2:ef:cb:04:31:f1:fa:c8:d3:25:71:
d7:fe:7d:a2:02:7f:27:76:25:7b:a8:c2:06:aa:5f:
40:af:c5:6c:5c:09:2a:3c:4b:02:47:d0:1b:2c:6b:
c5:d1:f7:9f:42:74:6b:bd:ee:95:ac:7b:03:3a:f0:
bc:38:eb:31:09:94:f2:87:b3:56:d1:80:6f:b3:2e:
e3:78:64:52:0d:ad:f6:5a:ab:92:11:92:3a:37:0a:
9b:51:56:35:3b:3a:42:61:74:c3:94:46:33:6e:2c:
93:8f:be:2b:90:8b:d3:b1:f5:26:08:f2:e6:3a:f1:
ac:f2:e2:ab:c4:de:9a:8a:b8:66:6c:a9:5f:75:2c:
d9:de:49:f1:e9:13:dc:8b:49:f4:c8:cb:07:e2:f2:
f7:60:79:e8:32:dc:14:29:4d:7d:fd:74:dd:2e:d6:
13:e8:79:6b:fc:71:90:07:ac:d4:b6:04:af:e4:11:
87:6d:82:e9:e9:84:fc:14:03:b1:ce:a5:ce:c1:8b:
ac:42:9c:92:01:85:25:c6:03:44:e5:40:fd:20:86:
e6:4e:9d:77:f9:b9:6b:91:d2:32:22:65:66:cd:72:
14:0f:2d:6e:dd:32:50:c8:ae:19:e4:2e:4c:51:4c:
6d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:37:48:DA:9B:00:4D:75:80:23:5F:44:0F:A9:DC:A0:DA:A3:1F:B4
X509v3 Authority Key Identifier:
keyid:93:01:EA:05:96:3C:97:56:F2:8E:E2:E9:8B:8F:3C:C4:79:DC:9F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:27:69:e4:46:73:3e:05:f6:7f:7a:ee:8d:f9:7a:44:0e:e1:
56:71:b8:f6:cb:19:32:1e:4a:9d:e3:ae:1b:fe:c7:76:08:d6:
1c:db:24:9d:78:23:f6:ea:07:ae:74:57:b3:63:ec:8a:2f:1f:
6d:b5:c5:e2:40:3d:3f:ca:83:1d:b4:16:b9:4a:0e:84:d8:69:
ef:ef:30:4e:70:55:97:14:9e:77:24:5c:b1:5d:21:b4:90:f3:
a7:81:74:d5:81:4f:b5:ac:52:4c:0b:71:a5:29:96:dd:35:43:
4e:0e:d3:f3:c2:20:52:46:d3:46:3a:a3:87:98:f6:a4:f5:d7:
e8:34:55:58:34:09:b7:41:f9:15:42:56:d1:ca:c1:63:ea:d9:
7c:cc:3b:49:64:95:d9:df:34:06:6a:f2:1f:82:20:82:cf:85:
21:40:bf:24:1e:34:13:3e:66:b6:a8:03:f2:6c:c1:49:3c:3a:
d8:81:6c:94:34:dd:29:bd:ab:2f:f0:bd:28:93:33:ce:36:d1:
d1:60:a1:e2:d4:bf:ea:ad:cd:d7:ad:96:27:bf:16:1a:3e:c2:
34:d2:9a:32:9a:70:b6:34:81:3d:32:58:6f:fd:36:83:db:21:
20:59:8a:3a:be:71:75:80:77:9f:57:48:c1:5f:92:df:ad:7f:
7e:0e:74:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:42 2025 by rpki-client