Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.mft
File: KAWFe6e9XcggxhYmxjNJ47f6p9M.mft (raw, json)
Hash identifier: 2xCxWZjpWCofx+CJEj8PZIMEelSFHNENoXo7dxhFewI=
Subject key identifier: 33:09:2C:4C:60:FC:38:60:3F:E4:C5:4C:68:0B:1F:00:02:23:AB:B0
Authority key identifier: 28:05:85:7B:A7:BD:5D:C8:20:C6:16:26:C6:33:49:E3:B7:FA:A7:D3
Certificate issuer: /CN=2805857ba7bd5dc820c61626c63349e3b7faa7d3
Certificate serial: 019A52633E8E40EE3143267E9F48ECE9672D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KAWFe6e9XcggxhYmxjNJ47f6p9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.mft
Manifest number: 0FA2
Signing time: Wed 05 Nov 2025 05:00:27 +0000
Manifest this update: Wed 05 Nov 2025 05:00:27 +0000
Manifest next update: Thu 06 Nov 2025 05:00:27 +0000
Files and hashes: 1: KAWFe6e9XcggxhYmxjNJ47f6p9M.crl (hash: wkFALRWMndVyp1wTsdM+4W7yEBfo3m3BeQch0kcRHRw=)
2: QKHWtvbYs2bFm7Yqz1D-noGUUCg.roa (hash: ZmlSUpfzL4PQUwk4jtXCzAOTz3/AO/19cZEbT2JXoOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/KAWFe6e9XcggxhYmxjNJ47f6p9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:3e:8e:40:ee:31:43:26:7e:9f:48:ec:e9:67:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2805857ba7bd5dc820c61626c63349e3b7faa7d3
Validity
Not Before: Nov 5 05:00:27 2025 GMT
Not After : Nov 6 05:00:27 2025 GMT
Subject: CN=33092c4c60fc38603fe4c54c680b1f000223abb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8a:17:e7:c6:2b:d0:40:e9:4f:1b:e4:af:27:
4e:41:0c:55:27:70:39:96:13:f9:da:41:01:ca:83:
64:4b:32:8e:bf:36:02:44:67:09:8e:11:fd:90:4a:
69:9e:60:73:7d:02:1a:a8:96:fe:eb:90:6d:6e:a2:
e4:3f:84:ef:74:10:bb:1a:0a:6c:ce:27:30:27:86:
65:46:19:1a:e2:72:b8:1e:7d:5d:8f:3e:42:8d:60:
ad:c6:ab:e2:63:8d:0d:98:b6:97:e0:1d:96:a5:91:
12:0b:3b:2e:e3:53:7b:9e:90:13:54:58:57:7d:a3:
48:d5:8c:50:2f:fe:87:49:c2:3a:38:3b:47:8a:e3:
5b:ff:0c:68:56:8b:8a:7c:ac:10:3c:ae:e8:8b:25:
3b:78:3f:95:cd:dd:07:14:f7:eb:c7:48:97:54:26:
30:e1:1e:59:49:db:6e:28:58:98:34:5d:a4:1f:cc:
da:4a:fd:69:00:90:67:bf:0b:c0:ed:9b:aa:c8:55:
8f:b6:32:48:14:10:c4:d5:72:64:c0:d0:23:13:28:
1b:3c:f0:2c:45:c2:ec:2a:2d:ef:e0:8a:79:88:c0:
33:5b:20:de:74:5b:3e:47:0d:12:db:4d:ef:96:f6:
f0:d3:89:60:b3:08:32:c1:c0:1a:27:ad:b2:d6:9f:
d3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:09:2C:4C:60:FC:38:60:3F:E4:C5:4C:68:0B:1F:00:02:23:AB:B0
X509v3 Authority Key Identifier:
keyid:28:05:85:7B:A7:BD:5D:C8:20:C6:16:26:C6:33:49:E3:B7:FA:A7:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAWFe6e9XcggxhYmxjNJ47f6p9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:5e:ae:2d:55:3c:ee:1a:ab:a6:fe:44:0c:7f:57:0c:88:f3:
a4:f0:8e:08:3a:b7:31:93:82:b2:4f:36:fe:4e:16:78:12:d7:
2a:37:03:3d:09:ad:e2:71:18:7a:57:86:e2:36:67:cb:f8:b5:
a2:66:13:4a:51:41:06:5d:51:6b:82:7f:85:99:d3:59:ef:4d:
79:92:88:e4:33:cf:e2:91:71:17:e0:11:4c:59:4d:5f:b0:6b:
74:f9:ef:35:57:06:1a:12:d4:a1:4e:61:bf:7d:a9:16:15:98:
b5:8b:7f:dd:7d:75:35:f4:68:44:d8:85:4f:c1:1c:ff:29:a1:
30:60:81:98:f8:b0:cd:52:c5:b9:f9:35:12:fd:11:f1:6a:11:
b0:54:ba:c0:05:0e:fd:d4:c3:b6:f0:be:28:aa:12:fe:99:40:
10:e3:2e:fa:eb:71:94:1d:86:02:93:05:94:29:0e:14:ed:31:
15:3b:9d:9d:47:6e:5d:b0:93:1b:45:a7:22:6f:c9:2d:53:cb:
f0:78:5c:6c:7c:cc:e1:18:9c:f2:86:a7:2a:31:32:b1:fc:68:
06:e7:6e:bd:fd:f7:6b:6d:e1:60:cf:be:dd:58:18:d5:23:c3:
81:f4:36:35:2f:0a:a5:8c:b4:08:d3:28:70:d3:e4:7b:a0:c5:
15:96:fb:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:52:28 2025 by rpki-client