Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.mft
File: KWJHhUnYzCZMLMV9znGQXRdvuIo.mft (raw, json)
Hash identifier: MsYGorGOtWAAMobu/3J+CmT6W9gko9wHmWzDWIaDpgw=
Subject key identifier: A2:34:50:B2:14:C2:CF:84:C9:8B:6F:7A:A2:0D:D4:1E:35:6D:F8:21
Authority key identifier: 29:62:47:85:49:D8:CC:26:4C:2C:C5:7D:CE:71:90:5D:17:6F:B8:8A
Certificate issuer: /CN=2962478549d8cc264c2cc57dce71905d176fb88a
Certificate serial: 0198D5BC1A0D3CCA80F5D92D20C345DE49E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWJHhUnYzCZMLMV9znGQXRdvuIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.mft
Manifest number: 15DA
Signing time: Sat 23 Aug 2025 07:02:11 +0000
Manifest this update: Sat 23 Aug 2025 07:02:11 +0000
Manifest next update: Sun 24 Aug 2025 07:02:11 +0000
Files and hashes: 1: Db4cgvqb5UOgeQz4JyUwJf6Q1lU.roa (hash: zvZMT/bbatMS4tl05cs3bvS/uoQt4c5U4AeQiIO1dXo=)
2: KWJHhUnYzCZMLMV9znGQXRdvuIo.crl (hash: 4n/cVLG3EkKkZ3oy4YOiLFWSeCKaKXLLWbg4k7bRj0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWJHhUnYzCZMLMV9znGQXRdvuIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:1a:0d:3c:ca:80:f5:d9:2d:20:c3:45:de:49:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2962478549d8cc264c2cc57dce71905d176fb88a
Validity
Not Before: Aug 23 07:02:11 2025 GMT
Not After : Aug 24 07:02:11 2025 GMT
Subject: CN=a23450b214c2cf84c98b6f7aa20dd41e356df821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:72:ce:b4:f5:fe:2f:bb:f1:a3:d5:bb:18:69:
fd:25:02:e2:f0:24:c7:3e:5f:21:80:b4:e6:ad:e0:
1b:ef:fa:09:e8:a8:a0:f7:01:73:a2:47:cd:39:ed:
3f:06:63:18:57:c5:a0:ef:ed:30:b7:24:e0:ac:95:
22:88:02:91:ff:69:c5:18:c5:0d:76:84:c3:4c:9c:
ce:20:f1:6b:3b:de:0e:fd:07:26:27:ac:8e:21:23:
ca:c0:63:4a:88:d1:be:e2:34:a2:5c:15:d8:81:1a:
91:a5:d1:e9:88:90:1d:87:0d:5e:5d:ea:d1:10:24:
c9:24:09:96:f1:e7:45:03:be:ee:ae:1e:9a:56:89:
8e:0b:ea:05:f5:27:7d:f6:d0:13:7c:88:0e:00:eb:
b5:4d:d0:f5:3a:bb:e9:a9:e3:26:5e:3e:5c:f9:8c:
ff:83:a4:cd:8a:95:cf:55:0f:31:7d:c8:71:b0:c3:
2f:3f:c5:1a:13:c3:02:97:c2:6a:1f:b8:99:5d:ec:
64:af:8c:63:0d:71:1d:17:6e:0c:a1:b7:cd:59:96:
d6:29:21:45:56:63:94:a3:dd:29:15:d1:b1:16:64:
37:50:9d:e7:16:8c:7c:a8:35:ee:a1:a3:a2:fd:24:
c6:84:df:df:c9:0f:85:f7:4f:5d:d3:48:5f:b6:c9:
f2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:34:50:B2:14:C2:CF:84:C9:8B:6F:7A:A2:0D:D4:1E:35:6D:F8:21
X509v3 Authority Key Identifier:
keyid:29:62:47:85:49:D8:CC:26:4C:2C:C5:7D:CE:71:90:5D:17:6F:B8:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWJHhUnYzCZMLMV9znGQXRdvuIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:52:60:71:e7:33:ff:0a:4e:30:83:d3:f3:96:54:d8:da:01:
22:b5:c0:6c:70:8d:e7:47:fe:c9:31:e0:fa:5e:74:07:57:5b:
15:21:6d:cc:c7:c1:b0:2a:48:5e:c4:99:d6:48:82:91:5d:5d:
4f:6e:51:60:ec:9c:55:27:b6:34:4b:94:11:dc:8c:6b:2d:dc:
f6:27:e9:1b:b1:04:fc:64:c1:74:ca:91:3d:db:a0:a8:b0:7d:
0d:ca:90:43:ee:95:32:84:b2:07:7b:f5:d1:38:f0:81:2a:23:
30:4c:b4:9f:ef:0e:96:0a:16:49:2e:70:68:c7:52:d2:e2:10:
f8:87:cb:4f:9c:75:a9:92:da:69:5e:56:ce:d8:d6:0b:a9:74:
91:c9:b8:44:cf:30:05:93:bb:bc:70:3d:67:7b:42:ef:a9:8c:
93:b0:1a:f2:ae:1d:89:d9:a8:a5:96:c6:b7:71:b9:d5:cc:91:
56:88:70:9a:fa:d2:1a:00:0f:9e:70:47:1f:29:36:d0:1b:ef:
ea:11:5b:db:ef:4a:ee:43:bf:d9:a2:85:d7:4c:b5:5f:57:5d:
fd:86:ed:26:31:f6:ea:9d:eb:56:fd:ec:79:d5:56:4f:4d:d4:
e5:0a:61:a0:e4:fe:7b:80:2d:4f:df:2e:d3:73:be:fc:f8:b9:
d8:d7:0a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:29:17 2025 by rpki-client