Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft
File: KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft (raw, json)
Hash identifier: /rWkkvLv3RPdWeSGAe56Upmkhi0BvusJYbTgC/Hd65g=
Subject key identifier: ED:62:5C:3B:3A:00:5A:CA:BE:42:28:93:D0:0B:0A:6A:9F:D7:8E:03
Authority key identifier: 2B:04:D5:55:76:3F:BA:A0:94:DC:A7:A9:3D:AA:A7:8F:D4:00:85:54
Certificate issuer: /CN=2b04d555763fbaa094dca7a93daaa78fd4008554
Certificate serial: 019A0147979A4CE76800E5BD1B94B0F94C29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KwTVVXY_uqCU3KepPaqnj9QAhVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft
Manifest number: 05AE
Signing time: Mon 20 Oct 2025 11:01:00 +0000
Manifest this update: Mon 20 Oct 2025 11:01:00 +0000
Manifest next update: Tue 21 Oct 2025 11:01:00 +0000
Files and hashes: 1: 3Vh4V2QgqmooTGsNFJzabIkkGuM.roa (hash: pE5OL1gfqKCShXk+oFUj+oL3mmpNWjZD2zCOccDVAJo=)
2: KwTVVXY_uqCU3KepPaqnj9QAhVQ.crl (hash: nDH/73NmBxA5qWA/ylUIX4IXoW2tedYS7eV3wyi1n/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KwTVVXY_uqCU3KepPaqnj9QAhVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 11:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:47:97:9a:4c:e7:68:00:e5:bd:1b:94:b0:f9:4c:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b04d555763fbaa094dca7a93daaa78fd4008554
Validity
Not Before: Oct 20 11:01:00 2025 GMT
Not After : Oct 21 11:01:00 2025 GMT
Subject: CN=ed625c3b3a005acabe422893d00b0a6a9fd78e03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ed:6f:65:75:f3:2e:7a:29:35:4a:d1:bb:c7:
a4:9f:84:0a:74:96:31:b6:27:63:d1:5f:97:82:7a:
5f:30:3d:c3:ce:9d:86:e9:8a:9c:ea:80:b9:a3:bc:
df:b9:f0:ae:7f:7b:b6:97:e4:e3:59:cb:f4:cc:6f:
31:c8:d8:dc:d0:ef:74:97:59:ec:f2:74:e9:bd:09:
c9:00:54:b5:30:38:d5:4e:d4:dd:12:f9:d3:3f:e0:
81:a6:47:a7:81:bf:7d:d1:f9:e1:cd:2c:74:ac:40:
1e:24:46:76:cb:23:16:16:7d:ac:3b:f1:80:92:83:
83:20:b0:7f:ce:26:87:af:3d:80:69:a5:3a:c7:82:
c1:f8:ed:c0:1e:6c:52:dc:87:5b:b8:7b:aa:0a:c9:
11:f9:60:9c:8c:68:6d:96:cc:8d:68:ea:99:ad:a8:
65:82:53:4f:9c:64:2b:9e:38:34:02:5a:52:47:01:
8f:d7:77:17:37:dd:e2:cc:64:89:78:65:9e:f8:f4:
1b:fe:6c:b6:99:93:fe:3b:58:06:9f:c8:6e:ed:73:
1a:f5:46:73:8c:a3:11:c6:62:88:1d:ab:9d:9d:b7:
34:48:92:3d:40:5d:6a:a4:95:94:5b:e2:ca:a5:40:
b3:ac:6c:6a:3a:52:42:d5:49:ea:cc:fd:4d:52:e4:
3f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:62:5C:3B:3A:00:5A:CA:BE:42:28:93:D0:0B:0A:6A:9F:D7:8E:03
X509v3 Authority Key Identifier:
keyid:2B:04:D5:55:76:3F:BA:A0:94:DC:A7:A9:3D:AA:A7:8F:D4:00:85:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwTVVXY_uqCU3KepPaqnj9QAhVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:35:4d:7f:d8:25:41:82:5f:b4:d2:1f:a8:65:ee:df:f6:14:
8d:0b:6b:53:29:f7:b4:0d:3a:2f:42:ea:60:46:88:1d:5a:b0:
2b:db:ae:38:80:8c:a6:d6:cd:ba:70:da:a5:cb:06:3f:07:d4:
e1:d8:ca:25:a5:2c:c2:88:50:e8:12:9e:3c:01:fd:0f:9f:cb:
6a:a1:41:65:b2:c5:2d:31:b5:d4:5c:e5:13:d0:c4:8f:d9:1d:
63:37:7f:55:c1:a8:8e:9b:0a:a8:2e:a6:19:88:c5:61:54:73:
bc:03:7e:21:dc:40:dc:ae:81:bf:6b:98:ad:b3:2e:f3:7d:14:
f0:a7:7c:92:8a:e9:9f:0e:1a:c5:42:08:99:7e:6a:e1:51:71:
3d:bf:f3:9f:70:02:7d:88:fb:5f:6d:30:60:37:9b:44:49:89:
17:e7:18:23:21:72:00:79:4b:7e:c6:28:cc:45:46:95:76:77:
04:d5:57:4c:1f:20:1b:c6:8d:18:a7:7b:84:5e:0c:fd:c5:ba:
24:e0:56:30:95:a3:33:99:3b:a4:57:12:9f:8a:4f:ef:cb:dd:
a1:2b:c8:79:be:e0:e8:55:83:a2:21:b9:59:18:12:05:fc:cf:
f4:3b:03:4c:b9:e2:83:e1:b0:7e:71:e7:7f:1d:2d:69:08:01:
2b:55:11:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:59:11 2025 by rpki-client