Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft
File: KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft (raw, json)
Hash identifier: 7arBsNcmX7Eevs48GQnl6sZlGpU6qsqUp4pikv0uRb8=
Subject key identifier: 47:63:5E:68:AD:7D:E0:41:59:C4:60:89:96:6D:DC:22:C8:95:7F:7B
Authority key identifier: 2B:04:D5:55:76:3F:BA:A0:94:DC:A7:A9:3D:AA:A7:8F:D4:00:85:54
Certificate issuer: /CN=2b04d555763fbaa094dca7a93daaa78fd4008554
Certificate serial: 0198D404796F8C6BD1E4A1A632908D639D47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KwTVVXY_uqCU3KepPaqnj9QAhVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft
Manifest number: 0512
Signing time: Fri 22 Aug 2025 23:01:59 +0000
Manifest this update: Fri 22 Aug 2025 23:01:59 +0000
Manifest next update: Sat 23 Aug 2025 23:01:59 +0000
Files and hashes: 1: 3Vh4V2QgqmooTGsNFJzabIkkGuM.roa (hash: pE5OL1gfqKCShXk+oFUj+oL3mmpNWjZD2zCOccDVAJo=)
2: KwTVVXY_uqCU3KepPaqnj9QAhVQ.crl (hash: LSJStSR9CvZmSsbdW2Nkm1Dd6ywuoJBlv8kxHZJKxsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KwTVVXY_uqCU3KepPaqnj9QAhVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:79:6f:8c:6b:d1:e4:a1:a6:32:90:8d:63:9d:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b04d555763fbaa094dca7a93daaa78fd4008554
Validity
Not Before: Aug 22 23:01:59 2025 GMT
Not After : Aug 23 23:01:59 2025 GMT
Subject: CN=47635e68ad7de04159c46089966ddc22c8957f7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8b:db:84:c2:3c:61:da:5c:dc:8b:82:e5:29:
3d:27:61:14:60:6d:29:85:50:fd:d6:78:51:3c:84:
97:70:02:ac:e7:c7:cb:42:d1:b2:89:66:1c:57:71:
ca:6b:ee:dd:06:02:3c:22:6a:6b:2f:ba:2f:53:f0:
8f:c4:5c:53:de:d0:1b:8b:53:92:2f:70:a8:b0:66:
19:06:22:c3:c6:dc:4a:39:58:d9:a0:ef:79:1d:7d:
87:93:83:e2:6a:ec:09:ff:60:5d:77:12:dc:30:cf:
77:c6:d0:65:a8:2a:56:8f:5b:98:f9:c6:97:7c:bb:
4e:3d:8d:b0:d8:09:24:33:cf:d4:e5:dd:f6:0e:54:
53:aa:40:f7:e9:f5:7e:40:2a:96:33:d4:bd:71:e1:
68:d3:3c:55:88:ed:53:d0:7b:17:54:13:d9:13:58:
8c:e2:3d:4f:37:cc:3f:cd:eb:ec:08:20:66:6a:35:
49:56:cb:a0:3d:c2:66:30:6b:4c:19:43:71:03:5c:
36:a7:47:e3:dc:e6:5a:d1:2f:e5:28:7b:3b:9c:54:
eb:4a:7c:f9:31:af:90:34:bb:3c:84:cb:43:e4:d6:
b4:23:cb:f4:e9:e8:83:18:58:02:a3:f7:e1:b8:8a:
20:6e:51:53:43:c6:c2:68:69:e9:c7:83:f3:57:1d:
8c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:63:5E:68:AD:7D:E0:41:59:C4:60:89:96:6D:DC:22:C8:95:7F:7B
X509v3 Authority Key Identifier:
keyid:2B:04:D5:55:76:3F:BA:A0:94:DC:A7:A9:3D:AA:A7:8F:D4:00:85:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwTVVXY_uqCU3KepPaqnj9QAhVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:d4:ae:54:83:2b:1b:7b:6f:b9:95:36:37:39:94:52:29:a6:
01:92:24:c8:05:e9:c5:06:75:86:35:af:b1:29:c8:be:a3:d0:
4b:16:e2:9f:2c:eb:50:96:e7:4c:08:bd:23:38:d0:3b:b9:67:
c8:19:7b:c6:ca:0c:a8:2e:3f:5b:cc:43:07:6e:d2:e1:b8:f3:
2e:21:cc:eb:3b:a8:ef:92:fb:d0:b8:5c:60:34:c5:1e:91:b4:
0f:c6:a8:49:fe:8d:ce:51:f3:c8:8d:55:ce:5e:a2:11:21:52:
e0:e5:bf:82:ec:a5:b0:40:06:9f:9c:c9:0c:3b:8b:ea:ba:c9:
8f:06:4c:c7:19:c5:44:bc:5f:45:e1:ed:3e:f7:57:e0:3a:9b:
db:f8:11:e9:11:87:56:ae:95:1c:97:e9:ce:f3:76:ab:ee:7b:
21:54:79:25:b2:c4:05:ce:78:83:34:09:4e:bb:ba:33:46:0f:
54:03:5b:40:47:46:22:85:70:86:fb:32:89:4b:a9:27:49:b4:
07:27:73:15:d3:42:e1:ae:a8:79:b1:a1:94:d6:88:86:09:01:
2d:b1:a5:8d:64:95:e4:79:f9:7e:ba:db:63:cf:0c:17:6f:2a:
af:66:0a:44:99:8a:fe:8f:70:64:86:cf:75:43:e1:d7:68:c9:
f7:c2:d6:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:18:19 2025 by rpki-client