Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.mft
File: KAWFe6e9XcggxhYmxjNJ47f6p9M.mft (raw, json)
Hash identifier: 9YqRrcVetfEpqtr9O+k68ib5UMHDmOppULV+6ykPLJw=
Subject key identifier: B9:34:C2:88:9F:4A:FF:AB:83:F0:46:C6:5D:A4:3B:60:94:AA:C9:14
Authority key identifier: 28:05:85:7B:A7:BD:5D:C8:20:C6:16:26:C6:33:49:E3:B7:FA:A7:D3
Certificate issuer: /CN=2805857ba7bd5dc820c61626c63349e3b7faa7d3
Certificate serial: 0198737430A47C086F92B3DD1753D96361D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KAWFe6e9XcggxhYmxjNJ47f6p9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.mft
Manifest number: 0EAA
Signing time: Mon 04 Aug 2025 05:00:51 +0000
Manifest this update: Mon 04 Aug 2025 05:00:51 +0000
Manifest next update: Tue 05 Aug 2025 05:00:51 +0000
Files and hashes: 1: KAWFe6e9XcggxhYmxjNJ47f6p9M.crl (hash: mTFvHndsftqEUhKOXhIJ9xdNAziyH5v57EGpaQdf168=)
2: QKHWtvbYs2bFm7Yqz1D-noGUUCg.roa (hash: ZmlSUpfzL4PQUwk4jtXCzAOTz3/AO/19cZEbT2JXoOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/KAWFe6e9XcggxhYmxjNJ47f6p9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:30:a4:7c:08:6f:92:b3:dd:17:53:d9:63:61:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2805857ba7bd5dc820c61626c63349e3b7faa7d3
Validity
Not Before: Aug 4 05:00:51 2025 GMT
Not After : Aug 5 05:00:51 2025 GMT
Subject: CN=b934c2889f4affab83f046c65da43b6094aac914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b5:93:03:c1:84:9f:0e:92:d7:d8:75:3f:cd:
0c:f3:22:88:d9:c8:25:7c:02:6e:cf:ec:55:95:68:
c6:e2:10:9c:c2:72:84:c8:69:8e:ff:3f:b9:1c:12:
7f:ee:b2:b9:f2:57:e3:ca:68:6a:53:73:19:a0:d9:
64:46:0a:61:4e:47:43:d9:d6:f5:e1:41:d2:83:3a:
62:1a:21:0c:a7:f0:3f:e7:d7:b8:94:d7:a0:f7:51:
96:c2:10:95:26:d6:a6:01:1b:90:b5:ad:80:0b:b9:
d5:a8:5e:2f:96:27:2e:af:0e:61:7b:a2:d8:f3:72:
4d:bc:37:f8:1d:03:b6:7b:84:4e:df:32:6c:9c:30:
20:cf:8f:40:df:9d:b1:b9:0c:98:4d:5e:8c:93:43:
0c:3d:6d:79:ad:7e:95:fb:7a:71:ef:42:da:2d:5d:
25:a5:c8:76:14:04:ff:6f:74:72:f4:5f:9f:6e:be:
5a:7a:72:4a:44:d3:e9:30:3c:6f:92:47:fe:a5:e8:
48:7d:c5:9d:7f:51:d5:bc:b1:a4:2a:e4:fc:24:1e:
12:67:25:68:7a:d2:d3:2a:e2:25:13:40:a7:34:59:
72:97:62:ac:9c:c4:1d:08:b3:20:c6:a3:9d:d1:04:
f3:ff:92:6c:9f:64:3f:af:31:d1:38:17:12:84:17:
13:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:34:C2:88:9F:4A:FF:AB:83:F0:46:C6:5D:A4:3B:60:94:AA:C9:14
X509v3 Authority Key Identifier:
keyid:28:05:85:7B:A7:BD:5D:C8:20:C6:16:26:C6:33:49:E3:B7:FA:A7:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAWFe6e9XcggxhYmxjNJ47f6p9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:54:0a:9b:a8:2f:e7:73:ea:35:10:9c:d1:3d:42:50:12:8e:
e0:73:69:72:e1:ff:17:0e:6b:0c:01:a7:22:58:27:e2:7e:94:
e5:c9:df:aa:06:31:79:4e:48:dd:e4:df:68:b2:7b:2b:75:d2:
f9:38:48:8d:6b:65:73:21:cf:e0:dd:0f:3d:fe:36:10:5a:7c:
d6:aa:4d:fc:ec:5d:cf:ff:25:cf:c4:a8:ad:a6:f0:92:f0:a0:
31:8e:28:22:11:2e:d8:78:34:40:ca:83:bd:80:a6:93:7e:cf:
36:4c:04:cc:81:56:5c:42:7d:58:02:06:be:dd:fb:6f:a8:53:
17:01:f4:fc:8e:7f:d0:ad:8c:69:8b:91:e2:be:2a:32:1f:51:
5a:a7:78:f2:e2:6c:2b:e3:49:7f:7e:58:0b:05:24:79:f4:1e:
b6:c3:b9:dd:bd:11:b6:25:2a:51:c5:5f:27:2e:4c:20:5d:89:
63:cd:53:8c:79:19:62:40:da:5b:09:80:bb:8e:47:8b:b1:a4:
6f:50:18:6b:36:1a:fe:39:5b:36:f8:21:3b:89:31:60:4a:0a:
ee:42:60:b6:af:e7:dd:9e:a4:5f:bb:ca:d5:d7:78:0c:6c:8f:
27:8e:3f:80:09:93:5b:a2:b8:40:03:0e:cb:aa:a3:fd:64:94:
6c:58:ef:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:38 2025 by rpki-client