Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.mft
File: KWAWrWTCJgCs8wSfh1j1PrseV8Q.mft (raw, json)
Hash identifier: 1QJw8+jF/hOCDbD0saJ/rO1JHomX5Lec1Nzvon1H8Kw=
Subject key identifier: 43:03:87:E3:B5:5C:24:20:9B:58:BC:34:0D:90:B2:1A:7A:D5:79:B4
Authority key identifier: 29:60:16:AD:64:C2:26:00:AC:F3:04:9F:87:58:F5:3E:BB:1E:57:C4
Certificate issuer: /CN=296016ad64c22600acf3049f8758f53ebb1e57c4
Certificate serial: 0198D54E217FDB7F3B40DD6740219A20AB05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWAWrWTCJgCs8wSfh1j1PrseV8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.mft
Manifest number: 0400
Signing time: Sat 23 Aug 2025 05:02:03 +0000
Manifest this update: Sat 23 Aug 2025 05:02:03 +0000
Manifest next update: Sun 24 Aug 2025 05:02:03 +0000
Files and hashes: 1: IoK2zTe-OC_dDY_734EVd48qQJ8.roa (hash: OV/EhbwqGxvFaPc6Pz7o/yEGyZxODTXrHQIagp84Afg=)
2: KWAWrWTCJgCs8wSfh1j1PrseV8Q.crl (hash: QkFm5F6JTDzBlx+NoL1GB/l8kZXVb+Zo4eD+0+5o8Bk=)
3: ZRdLYDl7hpyDg6YsYK-Wdw4baMc.roa (hash: 5DTIP8T8IUMMx2MqkILNMeW793Ol6SuU7VuRgBULAp4=)
4: r_GgOOrK8Ih9MzmtnCA_DxxC0BY.roa (hash: lJ1n4OTRsjhQ2vj+G2gNkyHqsFIRt5AG3VU9W6pXzHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWAWrWTCJgCs8wSfh1j1PrseV8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:21:7f:db:7f:3b:40:dd:67:40:21:9a:20:ab:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296016ad64c22600acf3049f8758f53ebb1e57c4
Validity
Not Before: Aug 23 05:02:03 2025 GMT
Not After : Aug 24 05:02:03 2025 GMT
Subject: CN=430387e3b55c24209b58bc340d90b21a7ad579b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e8:58:1d:cc:bc:a4:cf:62:46:1d:46:71:f1:
bb:a9:79:7b:1c:16:77:aa:4a:e4:e5:55:1f:19:67:
4e:ee:5a:1d:40:4a:36:a6:1a:24:90:dd:5e:f8:38:
d3:7c:ab:9b:bd:2b:0d:62:3e:e1:56:4d:d7:a9:67:
eb:7b:99:0f:19:d9:87:4b:68:b7:bd:75:96:30:f6:
d0:06:1c:23:8f:ee:37:e2:0f:76:73:8e:a3:77:6d:
b3:3c:77:4c:66:07:74:25:58:b0:62:4f:d4:a1:33:
0c:c4:d4:d2:ba:5b:fb:96:f4:f2:74:5e:86:ce:38:
4a:ad:a3:0f:ed:16:bb:f3:ec:72:fd:74:af:0d:7c:
3b:cc:19:3a:94:68:29:b6:21:c2:cd:85:f7:0d:59:
28:c3:a6:b1:88:18:d4:04:d9:10:fc:ff:6b:97:1a:
31:78:28:c8:5b:2b:f1:d0:33:c2:1f:b7:00:fe:e9:
b8:3f:74:8c:e1:7b:b8:58:95:e6:f5:f3:82:fd:dc:
2f:74:7b:0f:fc:c2:fe:fd:d6:72:7c:f1:a3:13:c6:
22:d0:28:b6:21:7d:de:72:eb:f0:c1:b5:dd:58:81:
a5:bf:83:5e:ea:a3:18:da:80:df:70:ec:34:6d:bb:
d0:da:c2:db:d7:43:27:5b:27:d0:71:46:1f:58:5a:
2a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:03:87:E3:B5:5C:24:20:9B:58:BC:34:0D:90:B2:1A:7A:D5:79:B4
X509v3 Authority Key Identifier:
keyid:29:60:16:AD:64:C2:26:00:AC:F3:04:9F:87:58:F5:3E:BB:1E:57:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWAWrWTCJgCs8wSfh1j1PrseV8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:58:f9:0c:da:d7:ff:01:fc:1a:5f:f1:a2:f1:dd:5a:85:af:
b7:f0:5e:38:e1:f9:e8:e2:07:90:6b:28:cf:09:0b:ef:02:f0:
b4:7f:e2:2b:0a:00:4a:18:19:d3:18:83:ea:d6:22:f4:70:3e:
a3:92:bd:d3:c6:bd:16:d0:00:e1:cb:75:3b:f2:72:30:0f:03:
1b:89:fd:a4:f5:78:83:c8:41:dc:bc:c5:67:d2:9d:d5:af:d3:
29:2a:9a:9d:db:dd:09:69:bb:17:f1:db:3e:e6:cf:30:06:bf:
26:08:c0:cb:a2:31:00:ae:9f:ed:5e:01:99:88:27:b8:85:be:
a7:85:aa:4d:10:a3:5a:47:f7:ec:ba:07:4b:14:bf:52:22:08:
0b:63:eb:11:a1:38:3a:93:03:85:d5:61:33:a5:96:26:94:79:
a3:3b:e9:8b:73:d2:3c:7e:b8:fc:2b:9f:62:a8:e1:24:1d:a0:
d0:59:6d:18:9c:5b:41:ed:f2:50:49:20:66:a7:5e:33:9e:eb:
bd:68:a2:6e:df:84:da:7a:9a:62:52:d1:06:7f:f1:b6:b1:e2:
cd:8a:07:68:33:c1:16:88:a4:56:da:57:c5:48:80:28:c6:4e:
9c:37:cd:ad:73:36:2d:0d:68:e1:ea:11:a3:a3:7e:4c:ae:57:
9b:84:32:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:39 2025 by rpki-client