Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.mft
File: KwviJiMNQJnO6gpKbPTti5AgE1A.mft (raw, json)
Hash identifier: 4ZDirvcZ6jYnOZ4Jc8NdKkqhuTpBy/yYcNrDphe39MU=
Subject key identifier: 25:DF:B8:BB:3A:8A:BC:C6:2E:86:DA:11:56:8D:28:2F:73:19:4F:9C
Authority key identifier: 2B:0B:E2:26:23:0D:40:99:CE:EA:0A:4A:6C:F4:ED:8B:90:20:13:50
Certificate issuer: /CN=2b0be226230d4099ceea0a4a6cf4ed8b90201350
Certificate serial: 019A52D108DCB433E0C08B79119B74CD995E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KwviJiMNQJnO6gpKbPTti5AgE1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.mft
Manifest number: 0B1C
Signing time: Wed 05 Nov 2025 07:00:22 +0000
Manifest this update: Wed 05 Nov 2025 07:00:22 +0000
Manifest next update: Thu 06 Nov 2025 07:00:22 +0000
Files and hashes: 1: 1-QazRIRPg7ctmvpySXX90ZpNvVs.roa (hash: /R5NiKNiflnBoSvWiTSdWTvgCke/+xxLiQtRLSd2PN8=)
2: KwviJiMNQJnO6gpKbPTti5AgE1A.crl (hash: sjjs8r2guPoeYtReoibRb/mDI9JDidIGTmEHlJTYedY=)
3: qi0ZqRW6bWCGCBOudyRc_ZU33PM.roa (hash: Y/jI82xosnyON1Rhfs7vCWE2E/8RN3XifMYZrXwc2DQ=)
4: st8xnj4jJi6Xuwa7MiNbU3-F0wo.roa (hash: H2Z+tAqzPpLr9TIzWhq27NXaGhJV330iUQnoQkRKlKo=)
5: ymk3s2uYAjIifXFebx0Gs2GCpZg.roa (hash: 1iZB8mSVVI0xWBNNoWKTn+58QXVIuSn2YESYam7CY+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/KwviJiMNQJnO6gpKbPTti5AgE1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:08:dc:b4:33:e0:c0:8b:79:11:9b:74:cd:99:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b0be226230d4099ceea0a4a6cf4ed8b90201350
Validity
Not Before: Nov 5 07:00:22 2025 GMT
Not After : Nov 6 07:00:22 2025 GMT
Subject: CN=25dfb8bb3a8abcc62e86da11568d282f73194f9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2c:71:7d:cd:81:92:a4:d2:83:ac:37:5b:42:
f3:36:e0:e0:c3:c8:9f:f8:87:2f:10:ab:56:5d:2b:
e1:b5:ed:88:7d:e3:5d:f6:e4:02:f6:5b:68:b1:87:
49:e2:f4:b7:30:b4:e4:02:cc:23:52:f1:f9:e8:23:
f8:7c:bf:07:b9:3b:9b:a7:47:05:44:a4:fe:e7:1b:
e6:b3:eb:e2:8b:3d:af:13:55:49:3d:ff:61:ea:d9:
54:8d:d8:38:20:9c:35:17:f7:2b:1e:b9:30:4e:6c:
9e:04:8a:26:50:52:74:ff:6b:e6:ff:53:76:a8:96:
1a:c8:31:82:78:73:35:38:e4:b0:b8:b7:07:e1:05:
95:de:3f:4a:60:75:7c:dc:56:6e:06:64:40:ce:c2:
89:84:7f:0b:b7:d5:c3:72:b4:27:55:4c:c3:a5:e4:
01:c3:36:8d:3a:47:11:84:56:a6:11:ce:77:45:4e:
aa:6d:de:6f:a5:1e:a1:19:8b:34:3a:15:50:2d:cb:
36:30:9f:b5:5f:6d:16:8b:9d:03:3e:e0:19:03:27:
c3:71:02:2f:a3:05:ff:a6:2b:15:ef:4a:f7:ba:d1:
f3:83:07:a6:d1:7c:ba:2c:44:40:07:c8:30:a9:28:
ba:e2:dc:27:fb:f6:32:d1:ec:fa:17:ef:87:82:6e:
0a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:DF:B8:BB:3A:8A:BC:C6:2E:86:DA:11:56:8D:28:2F:73:19:4F:9C
X509v3 Authority Key Identifier:
keyid:2B:0B:E2:26:23:0D:40:99:CE:EA:0A:4A:6C:F4:ED:8B:90:20:13:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwviJiMNQJnO6gpKbPTti5AgE1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:a2:43:7b:f5:3a:73:d1:98:1e:e8:34:a2:66:a0:8c:3b:05:
fd:aa:ee:a7:94:dd:48:e9:f4:e9:22:31:e3:42:0a:02:64:ce:
ea:0f:fb:dd:16:5f:bd:92:84:1b:db:06:59:8b:fe:ae:c1:95:
1f:44:26:fa:57:cc:3f:a1:ab:9e:b6:52:0c:b5:6a:0d:30:f6:
a9:8b:2a:4d:06:a4:ea:ca:a0:15:61:0e:88:7b:97:91:2c:ec:
ee:b0:2f:de:ff:9f:bd:79:79:e5:1a:58:d4:59:e7:a9:c6:4e:
37:a7:26:88:a7:b4:5a:de:4b:e1:e0:72:64:b9:1b:1e:72:8f:
c2:6c:97:3c:19:29:46:1d:0f:44:8d:d4:c9:a6:17:a9:07:55:
63:67:ea:80:21:8c:35:45:30:83:57:6e:64:39:08:1f:08:e6:
36:28:c2:a3:fa:ea:31:27:2e:b2:74:b6:6b:32:a9:78:75:b3:
6a:80:bd:86:75:aa:98:b6:e7:b3:4c:f8:a7:75:2b:b2:06:89:
03:32:62:74:2b:e5:c4:c2:8d:1f:a5:61:d6:bf:26:7f:58:a0:
41:4c:fb:91:ed:94:89:9b:3b:a7:81:0c:7a:a5:ae:b1:5a:7b:
37:f0:18:46:44:63:a4:01:19:61:ac:5d:05:ef:dd:54:dd:44:
48:0e:9d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:48:06 2025 by rpki-client