Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.mft
File: KwviJiMNQJnO6gpKbPTti5AgE1A.mft (raw, json)
Hash identifier: NjBhXSxy9RXlmFNLOR/ktYPsdR9wYTAvaKb5wYQQPT8=
Subject key identifier: BB:01:00:65:F7:A3:D3:7A:44:22:F2:64:47:DE:D7:9E:31:8C:12:AB
Authority key identifier: 2B:0B:E2:26:23:0D:40:99:CE:EA:0A:4A:6C:F4:ED:8B:90:20:13:50
Certificate issuer: /CN=2b0be226230d4099ceea0a4a6cf4ed8b90201350
Certificate serial: 019A54BF5723EE6368DAEA6CACB2208E1A53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KwviJiMNQJnO6gpKbPTti5AgE1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.mft
Manifest number: 0B1D
Signing time: Wed 05 Nov 2025 16:00:17 +0000
Manifest this update: Wed 05 Nov 2025 16:00:17 +0000
Manifest next update: Thu 06 Nov 2025 16:00:17 +0000
Files and hashes: 1: 1-QazRIRPg7ctmvpySXX90ZpNvVs.roa (hash: /R5NiKNiflnBoSvWiTSdWTvgCke/+xxLiQtRLSd2PN8=)
2: KwviJiMNQJnO6gpKbPTti5AgE1A.crl (hash: oP4hP71VMyX8kav3tfxHDTWR0U7CLcqaYKD/vehdqeg=)
3: qi0ZqRW6bWCGCBOudyRc_ZU33PM.roa (hash: Y/jI82xosnyON1Rhfs7vCWE2E/8RN3XifMYZrXwc2DQ=)
4: st8xnj4jJi6Xuwa7MiNbU3-F0wo.roa (hash: H2Z+tAqzPpLr9TIzWhq27NXaGhJV330iUQnoQkRKlKo=)
5: ymk3s2uYAjIifXFebx0Gs2GCpZg.roa (hash: 1iZB8mSVVI0xWBNNoWKTn+58QXVIuSn2YESYam7CY+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/KwviJiMNQJnO6gpKbPTti5AgE1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:bf:57:23:ee:63:68:da:ea:6c:ac:b2:20:8e:1a:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b0be226230d4099ceea0a4a6cf4ed8b90201350
Validity
Not Before: Nov 5 16:00:17 2025 GMT
Not After : Nov 6 16:00:17 2025 GMT
Subject: CN=bb010065f7a3d37a4422f26447ded79e318c12ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3f:bf:02:a3:f1:22:f6:ab:d0:d0:a7:8f:09:
42:18:29:5e:95:bc:ce:4c:ea:b5:4a:f9:d0:be:4d:
10:b5:ff:a9:eb:b2:01:53:03:4f:30:57:5f:9c:32:
79:81:b1:db:dc:42:c4:ec:1b:7e:f0:76:eb:06:45:
82:d2:00:69:63:f4:aa:0d:ba:60:db:4d:0b:9c:62:
b8:c2:0b:2b:41:aa:87:da:5b:83:14:f0:31:b3:9d:
9f:34:82:92:f8:12:06:a5:61:33:5a:48:ed:c6:6f:
0d:1f:33:df:c2:40:af:88:0c:03:bd:6c:5e:b6:af:
39:fb:c1:f7:32:0d:26:d1:81:0c:77:61:03:46:5b:
f3:2e:30:55:19:99:52:e2:ee:f3:71:8b:01:78:48:
ca:d9:9a:ad:c7:cd:7f:5f:d4:55:7b:f1:e5:a5:34:
a5:33:59:05:dc:03:a9:d8:b7:57:87:18:fa:7e:5a:
f9:20:33:3d:ee:c4:09:12:61:ff:f5:03:47:5d:4c:
7d:c7:87:c4:6d:8f:cd:e3:62:c0:79:69:c4:25:24:
94:db:fe:06:8d:db:b5:90:36:77:c4:33:e4:20:02:
5a:44:4a:8c:0f:4d:0c:98:ee:34:53:9b:71:9b:a7:
7a:94:48:66:24:23:bd:24:95:ee:14:23:70:c4:f3:
c7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:01:00:65:F7:A3:D3:7A:44:22:F2:64:47:DE:D7:9E:31:8C:12:AB
X509v3 Authority Key Identifier:
keyid:2B:0B:E2:26:23:0D:40:99:CE:EA:0A:4A:6C:F4:ED:8B:90:20:13:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwviJiMNQJnO6gpKbPTti5AgE1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:5a:60:86:94:7b:9d:84:59:2b:07:49:42:8f:82:e7:98:65:
0d:a4:5d:7d:e5:4f:0f:7f:33:b0:e9:3d:90:50:98:05:43:9e:
ee:be:45:7c:7b:22:b2:4e:24:f7:e2:93:f1:39:37:b1:fe:10:
7b:62:93:31:73:7a:1d:11:ff:3f:9e:f3:04:0f:d2:a4:5e:54:
62:44:ff:fd:1d:05:8a:1a:f3:5a:9e:fd:1b:6f:ee:61:cd:41:
ba:b2:9d:a9:44:eb:ca:e4:3c:93:0f:84:7f:cb:1f:b5:18:dc:
85:fa:fe:88:90:dc:8b:22:25:9c:d3:38:c1:7c:92:4c:17:37:
04:f9:5a:26:e5:79:ac:8c:7d:93:ea:ec:b2:68:de:5c:81:ea:
a7:40:27:12:d5:4a:d7:25:ff:85:c4:93:b2:ba:55:a7:c4:14:
3d:f4:c7:c4:e3:b4:e2:e6:d4:d3:5f:86:fa:e8:0c:71:ed:17:
e8:d1:45:c6:02:8c:4e:3d:01:0b:b0:2d:fd:4d:96:0b:7e:fb:
a3:55:f5:cf:eb:ad:46:57:54:de:0a:e0:cb:d6:ed:63:58:36:
53:2d:96:6b:bb:47:b8:13:2d:40:66:3d:75:d7:77:93:34:93:
43:6a:c9:99:d4:f0:0e:fc:3e:d1:97:c2:c9:78:35:28:2e:78:
48:ee:72:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpUv1cj7mNo2upsrLIgjhpTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiMGJlMjI2MjMwZDQwOTljZWVhMGE0YTZjZjRlZDhiOTAy
MDEzNTAwHhcNMjUxMTA1MTYwMDE3WhcNMjUxMTA2MTYwMDE3WjAzMTEwLwYDVQQD
EyhiYjAxMDA2NWY3YTNkMzdhNDQyMmYyNjQ0N2RlZDc5ZTMxOGMxMmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtj+/AqPxIvar0NCnjwlCGClelbzO
TOq1SvnQvk0Qtf+p67IBUwNPMFdfnDJ5gbHb3ELE7Bt+8HbrBkWC0gBpY/SqDbpg
200LnGK4wgsrQaqH2luDFPAxs52fNIKS+BIGpWEzWkjtxm8NHzPfwkCviAwDvWxe
tq85+8H3Mg0m0YEMd2EDRlvzLjBVGZlS4u7zcYsBeEjK2Zqtx81/X9RVe/HlpTSl
M1kF3AOp2LdXhxj6flr5IDM97sQJEmH/9QNHXUx9x4fEbY/N42LAeWnEJSSU2/4G
jdu1kDZ3xDPkIAJaREqMD00MmO40U5txm6d6lEhmJCO9JJXuFCNwxPPH2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLsBAGX3o9N6RCLyZEfe154xjBKrMB8GA1UdIwQY
MBaAFCsL4iYjDUCZzuoKSmz07YuQIBNQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3d2aUppTU5RSm5PNmdwS2JQVHRpNUFnRTFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9mY2U2NzUtYmY1My00Nzg3LTkzZTct
ODFmNTY2MTg1YjA2LzEvS3d2aUppTU5RSm5PNmdwS2JQVHRpNUFnRTFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9mY2U2NzUtYmY1My00Nzg3LTkzZTctODFmNTY2MTg1YjA2
LzEvS3d2aUppTU5RSm5PNmdwS2JQVHRpNUFnRTFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxFpghpR7
nYRZKwdJQo+C55hlDaRdfeVPD38zsOk9kFCYBUOe7r5FfHsisk4k9+KT8Tk3sf4Q
e2KTMXN6HRH/P57zBA/SpF5UYkT//R0FihrzWp79G2/uYc1BurKdqUTryuQ8kw+E
f8sftRjchfr+iJDciyIlnNM4wXySTBc3BPlaJuV5rIx9k+rssmjeXIHqp0AnEtVK
1yX/hcSTsrpVp8QUPfTHxOO04ubU01+G+ugMce0X6NFFxgKMTj0BC7At/U2WC377
o1X1z+utRldU3grgy9btY1g2Uy2Wa7tHuBMtQGY9ddd3kzSTQ2rJmdTwDvw+0ZfC
yXg1KC54SO5yIA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 20:49:36 2025 by rpki-client