Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.mft
File: KWJHhUnYzCZMLMV9znGQXRdvuIo.mft (raw, json)
Hash identifier: HxhJdKS8wgT0eabZSR9c0KvUqtCO/umeSqPe/AL1mQM=
Subject key identifier: A4:48:0A:33:15:4C:65:D9:5B:11:B1:BC:09:E6:50:FE:F4:E6:A0:C9
Authority key identifier: 29:62:47:85:49:D8:CC:26:4C:2C:C5:7D:CE:71:90:5D:17:6F:B8:8A
Certificate issuer: /CN=2962478549d8cc264c2cc57dce71905d176fb88a
Certificate serial: 0199FF22E6F493D5D1ADED3B9C3206AD37F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWJHhUnYzCZMLMV9znGQXRdvuIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.mft
Manifest number: 1674
Signing time: Mon 20 Oct 2025 01:01:41 +0000
Manifest this update: Mon 20 Oct 2025 01:01:41 +0000
Manifest next update: Tue 21 Oct 2025 01:01:41 +0000
Files and hashes: 1: Db4cgvqb5UOgeQz4JyUwJf6Q1lU.roa (hash: zvZMT/bbatMS4tl05cs3bvS/uoQt4c5U4AeQiIO1dXo=)
2: KWJHhUnYzCZMLMV9znGQXRdvuIo.crl (hash: 1mirf25lKDjCeK1r70Aq/hGmY0Z1+TXByRssU/DVWwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWJHhUnYzCZMLMV9znGQXRdvuIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:e6:f4:93:d5:d1:ad:ed:3b:9c:32:06:ad:37:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2962478549d8cc264c2cc57dce71905d176fb88a
Validity
Not Before: Oct 20 01:01:41 2025 GMT
Not After : Oct 21 01:01:41 2025 GMT
Subject: CN=a4480a33154c65d95b11b1bc09e650fef4e6a0c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:42:91:b4:09:21:9e:8c:4a:db:5b:74:e0:7c:
63:bf:a7:a1:cb:66:fe:fa:23:45:8d:30:db:c1:ab:
2b:8a:96:06:c8:ee:ac:68:9a:5c:49:23:78:3c:2f:
d3:ba:41:fa:1d:1c:d8:bb:72:a1:11:17:e3:e3:13:
2a:23:9f:fd:13:d8:b3:7f:4c:05:54:39:63:68:26:
94:20:b7:f8:20:54:f9:01:ad:c0:0b:95:e4:0b:dc:
d7:d5:51:e0:df:8e:7c:99:b4:72:92:eb:48:48:06:
e6:45:8b:d2:4c:bf:e6:4c:c5:51:93:68:58:76:8c:
7f:e8:cb:02:fb:09:1e:19:2e:16:c2:93:43:b7:cb:
3d:a1:36:13:9d:10:d7:04:00:34:a6:78:7f:6b:cd:
2e:79:cf:fd:f9:6b:36:99:d0:6a:7b:4a:a9:9d:50:
c4:08:f5:88:11:02:d8:72:42:9a:a5:85:e6:7c:c5:
f6:8e:1b:92:7b:08:e9:24:c8:70:60:65:fd:8e:45:
11:56:d3:9a:ad:ef:55:f1:a6:5a:ad:2d:b7:ad:58:
c7:d7:d7:57:09:e7:80:a6:8e:e5:da:95:2f:50:b8:
5b:a2:9f:7e:5b:57:bf:4a:2b:11:f7:84:98:a2:d6:
f6:a0:e8:e8:93:2c:a1:af:23:19:a8:6b:7c:0e:14:
23:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:48:0A:33:15:4C:65:D9:5B:11:B1:BC:09:E6:50:FE:F4:E6:A0:C9
X509v3 Authority Key Identifier:
keyid:29:62:47:85:49:D8:CC:26:4C:2C:C5:7D:CE:71:90:5D:17:6F:B8:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWJHhUnYzCZMLMV9znGQXRdvuIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:59:70:e0:bf:4e:e1:25:d2:0c:bd:e6:59:75:9e:86:f7:d8:
50:fb:7f:26:54:cc:33:95:5b:db:a8:38:c3:95:5a:c2:39:56:
c2:e8:4f:64:f3:29:60:4c:1f:29:cd:e2:5c:e2:7b:8f:f2:b4:
1b:98:e7:21:03:13:12:2b:c9:0a:1b:ee:0c:7a:46:08:6b:28:
a0:13:4a:d5:8e:27:b2:f5:03:e6:af:28:f7:b8:c5:27:6a:4c:
01:6a:6d:ac:7c:3b:e9:3a:a0:d9:6e:fc:75:0c:79:51:c4:f3:
97:d6:0c:96:58:95:23:de:69:ef:1d:28:e2:7a:7d:77:a3:df:
b3:06:1c:39:b7:ef:27:f6:2e:4b:17:44:52:ad:b1:dd:8e:36:
e2:b7:7b:03:4b:14:25:a3:c4:35:d2:e4:17:3b:a7:1f:19:e5:
72:02:6f:a4:68:d4:8b:54:bb:08:b5:f8:49:d1:90:01:8f:f6:
f6:4c:9f:c0:cc:3d:44:67:c9:ca:af:c6:c0:31:53:86:be:49:
6b:fd:b2:11:89:73:9a:9c:9c:84:76:6c:a1:75:ca:a9:06:7a:
83:b3:b2:44:4f:50:ea:25:52:97:11:f9:8c:b1:1e:79:c6:09:
c9:d7:0b:af:3f:1d:40:84:16:63:62:b4:8a:3d:0b:05:0e:ab:
5a:1b:87:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:02:12 2025 by rpki-client