Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
File: kwTroql6CcmzsIz_g9-0dxQbwcs.mft (raw, json)
Hash identifier: iVDGwLsOIq6JrXbtH2iaAdo6s6yP0ejhgmZN56fj3hI=
Subject key identifier: 4B:65:3D:C9:D0:B7:F5:C9:50:C0:99:93:83:AF:76:36:26:6F:B9:21
Authority key identifier: 93:04:EB:A2:A9:7A:09:C9:B3:B0:8C:FF:83:DF:B4:77:14:1B:C1:CB
Certificate issuer: /CN=9304eba2a97a09c9b3b08cff83dfb477141bc1cb
Certificate serial: 0199FD6B65F0DA660DB10A9D4467BA86B353
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 17:01:37 +0000
Manifest this update: Sun 19 Oct 2025 17:01:37 +0000
Manifest next update: Mon 20 Oct 2025 17:01:37 +0000
Files and hashes: 1: kwTroql6CcmzsIz_g9-0dxQbwcs.crl (hash: vnK00wu6N/twRgqFtex+vYEz7c/4xvX6wy2SgQlVlGk=)
2: veklkDiCqI48H1uQ5ixFAlK84NY.roa (hash: KUIRIFDZrVheg1iXYyW8LsCjhDrH33Kf+Op6ybMvK2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:65:f0:da:66:0d:b1:0a:9d:44:67:ba:86:b3:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9304eba2a97a09c9b3b08cff83dfb477141bc1cb
Validity
Not Before: Oct 19 17:01:37 2025 GMT
Not After : Oct 20 17:01:37 2025 GMT
Subject: CN=4b653dc9d0b7f5c950c0999383af7636266fb921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e9:f9:76:1d:58:94:80:ce:f1:df:ef:7a:75:
be:c2:f6:e9:59:6e:d1:7f:5b:c1:d5:2d:78:a2:ce:
37:95:56:4a:81:6b:52:60:0b:94:1b:88:8b:ae:f0:
6a:2c:ce:e3:65:8e:d6:d6:9e:9a:52:ae:7d:06:45:
86:e4:93:a3:e5:55:8b:77:f4:09:95:a1:21:9e:c4:
8a:f1:22:d4:37:71:d5:a1:9b:47:de:62:29:2a:47:
12:64:46:0a:f7:14:00:55:ef:73:17:1d:cd:f9:d7:
c4:74:1a:84:2f:86:0d:a2:60:3a:e9:32:66:64:ea:
50:af:8a:03:7d:41:a3:99:a1:3d:8b:b8:36:0b:df:
e3:9d:d3:fc:f3:76:97:ec:c3:fb:42:8e:bd:c5:5c:
af:f6:2a:0e:89:bb:36:f8:b4:a8:da:2d:a8:d6:b6:
4c:e6:5a:bb:c7:b2:ae:f4:19:4e:7a:48:c9:ba:3a:
b7:43:5c:95:34:d5:85:50:63:a6:f3:3f:65:08:69:
40:bb:a4:5f:d4:c4:1a:3f:66:ff:67:ca:15:20:26:
11:74:f5:5a:d2:aa:67:da:f3:42:f2:4c:99:d3:7c:
19:df:e2:c6:66:60:3e:40:b9:3e:2f:62:bc:30:cf:
b2:35:ca:02:99:fb:d4:3e:48:39:19:8e:74:29:93:
fb:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:65:3D:C9:D0:B7:F5:C9:50:C0:99:93:83:AF:76:36:26:6F:B9:21
X509v3 Authority Key Identifier:
keyid:93:04:EB:A2:A9:7A:09:C9:B3:B0:8C:FF:83:DF:B4:77:14:1B:C1:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:83:12:b3:59:10:fd:b3:01:61:cc:23:c8:c5:a1:65:b5:b1:
09:11:45:01:61:7b:c5:b0:14:b6:04:5d:33:2b:45:44:00:89:
4b:aa:7c:42:9d:e3:f3:19:d6:9b:ae:00:be:0d:9a:db:a9:42:
03:95:cc:ea:37:45:a1:50:25:ee:59:5d:c4:3e:25:b7:fa:56:
a6:85:a9:90:ed:2f:8e:6a:a9:b3:d0:c3:9f:e5:41:db:46:e3:
5a:b8:d6:19:e7:88:63:49:b3:b3:0b:1f:5d:b1:3f:89:b9:70:
02:83:38:19:56:88:f1:6a:af:e2:31:fd:86:8c:20:c2:03:72:
58:08:67:af:b2:7e:c3:34:8e:ef:03:d7:1b:24:9d:71:12:ac:
e2:96:b6:94:de:b0:25:c4:84:e1:ec:11:7e:12:0f:c1:6e:57:
8a:8c:c1:d9:f5:b9:dd:0c:2d:7a:64:fe:45:f3:67:97:28:bf:
f3:5e:f5:91:f5:74:de:75:d8:32:fc:90:77:2c:10:43:4a:c5:
44:6f:26:bb:b7:be:5b:c1:96:09:02:31:15:0d:10:72:c9:4f:
3b:0e:06:5b:6c:7b:80:89:7f:a4:6b:f9:28:ba:cb:46:5a:93:
2e:f5:64:13:b2:be:81:90:82:d6:d8:d8:b3:ef:19:0d:af:cb:
b3:92:03:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:15:26 2025 by rpki-client