Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft
File: KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft (raw, json)
Hash identifier: vDE9duV520QeBb6YEufdKrMzUSpIh9mSZ7Jm3Vem/ls=
Subject key identifier: AB:30:41:AF:37:01:69:CC:94:5A:70:6C:AE:BA:25:85:FF:25:25:E9
Authority key identifier: 2B:04:D5:55:76:3F:BA:A0:94:DC:A7:A9:3D:AA:A7:8F:D4:00:85:54
Certificate issuer: /CN=2b04d555763fbaa094dca7a93daaa78fd4008554
Certificate serial: 0199FF594D8EB8FCB8858D7369045CEBE16A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KwTVVXY_uqCU3KepPaqnj9QAhVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft
Manifest number: 05AD
Signing time: Mon 20 Oct 2025 02:01:06 +0000
Manifest this update: Mon 20 Oct 2025 02:01:06 +0000
Manifest next update: Tue 21 Oct 2025 02:01:06 +0000
Files and hashes: 1: 3Vh4V2QgqmooTGsNFJzabIkkGuM.roa (hash: pE5OL1gfqKCShXk+oFUj+oL3mmpNWjZD2zCOccDVAJo=)
2: KwTVVXY_uqCU3KepPaqnj9QAhVQ.crl (hash: /wV7yaEcKjZMwVpy/LFjG15mqUNEnCo9m5MtRlxfA9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KwTVVXY_uqCU3KepPaqnj9QAhVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:4d:8e:b8:fc:b8:85:8d:73:69:04:5c:eb:e1:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b04d555763fbaa094dca7a93daaa78fd4008554
Validity
Not Before: Oct 20 02:01:06 2025 GMT
Not After : Oct 21 02:01:06 2025 GMT
Subject: CN=ab3041af370169cc945a706caeba2585ff2525e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4c:69:13:33:f1:aa:ed:73:dd:1a:1f:72:2b:
96:98:b4:86:3a:bd:de:1e:7d:42:74:f3:7f:81:93:
26:df:74:e4:f6:1c:1f:6d:a0:3a:c1:7f:29:1f:dc:
25:f1:dc:ba:ec:d6:5e:12:95:b7:33:14:23:9d:a4:
ec:95:0d:a8:8a:7c:96:04:4b:a9:9b:6d:f3:52:88:
0c:37:bb:da:61:b1:06:88:20:41:60:ff:41:5a:73:
81:bd:0f:1b:e4:4e:ad:68:ab:08:d2:a8:80:19:e5:
da:40:d5:20:f5:65:d8:66:47:3e:90:e6:7f:e0:6f:
d4:a2:04:6c:70:71:da:5f:ef:e2:1c:de:8a:9a:a4:
90:ea:f8:39:e0:aa:b3:0c:a2:20:0a:d6:e3:ee:00:
cf:3f:36:4f:c0:9f:65:73:b0:33:31:cc:4b:fd:3c:
e8:e1:cc:77:d9:ea:d5:d6:84:c2:1b:e4:87:e6:d4:
26:51:35:85:a2:99:17:7d:b7:49:55:47:50:4a:97:
eb:cf:7f:67:59:df:e7:38:53:87:fc:40:19:1d:b5:
c3:79:50:9b:5c:24:be:1b:55:14:61:12:52:1b:aa:
63:69:db:39:7c:08:27:37:7e:7b:1a:51:78:f0:c8:
a3:7a:a2:fd:0f:51:cc:57:dd:ff:fa:fc:19:c5:6b:
67:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:30:41:AF:37:01:69:CC:94:5A:70:6C:AE:BA:25:85:FF:25:25:E9
X509v3 Authority Key Identifier:
keyid:2B:04:D5:55:76:3F:BA:A0:94:DC:A7:A9:3D:AA:A7:8F:D4:00:85:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwTVVXY_uqCU3KepPaqnj9QAhVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:e9:bd:b3:f4:ce:d1:80:72:3e:bd:54:98:74:e9:f6:7f:bb:
d6:c7:d0:2d:60:c1:79:68:a4:cf:99:bf:d6:ad:a4:b6:eb:67:
29:f1:95:a5:27:bb:1b:08:0f:55:5a:f8:dc:24:9d:98:7f:5e:
d7:39:30:94:3e:d1:e4:5f:2e:28:65:82:7a:01:7f:ab:b1:58:
9a:e4:29:cb:8e:e6:98:72:24:c1:b4:72:66:14:a1:9a:c8:b4:
7b:38:98:8e:b2:3e:d5:b3:06:bf:a0:48:07:2c:39:8a:dd:23:
34:d1:7c:1a:c9:f7:d0:8e:bd:86:ea:89:de:94:ab:13:5c:de:
01:7e:a2:99:ad:48:6b:65:1e:cb:b6:5b:0c:4b:71:79:00:53:
42:bb:bc:f5:ae:24:dc:51:a0:11:3d:d3:e2:85:b3:da:a3:14:
37:72:f6:4f:0f:51:18:46:08:9e:94:1b:7e:82:e1:20:ad:4d:
e5:8c:5c:52:63:cb:e9:4a:23:f7:87:7a:d9:10:13:4b:7b:d9:
6f:e9:f0:f2:c4:db:db:20:e3:32:72:87:e6:c8:b3:6a:7d:02:
a7:d0:1a:de:3c:7a:21:6b:4c:0f:14:55:18:d4:0c:d1:83:f3:
54:a4:6b:78:d6:cf:0e:1d:e5:66:21:89:89:82:25:9e:8d:2c:
81:45:e1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:23:56 2025 by rpki-client