Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/077a50-45b6-4a38-9db9-950c7e73245c/1/kwNiKzxU5F9BZvMBeY-G27pHGAw.mft
File: kwNiKzxU5F9BZvMBeY-G27pHGAw.mft (raw, json)
Hash identifier: DoAJ03dNnKbD6K+36pdJmB6wPHXU8LWwgSrOZ4H3Ccw=
Subject key identifier: EF:26:ED:9B:6F:4B:2B:83:18:0E:19:25:66:B3:7E:34:A3:52:77:44
Authority key identifier: 93:03:62:2B:3C:54:E4:5F:41:66:F3:01:79:8F:86:DB:BA:47:18:0C
Certificate issuer: /CN=9303622b3c54e45f4166f301798f86dbba47180c
Certificate serial: 019A4E18BA0A2AEF9099773318350F675DD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwNiKzxU5F9BZvMBeY-G27pHGAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/077a50-45b6-4a38-9db9-950c7e73245c/1/kwNiKzxU5F9BZvMBeY-G27pHGAw.mft
Manifest number: 08A6
Signing time: Tue 04 Nov 2025 09:00:34 +0000
Manifest this update: Tue 04 Nov 2025 09:00:34 +0000
Manifest next update: Wed 05 Nov 2025 09:00:34 +0000
Files and hashes: 1: kwNiKzxU5F9BZvMBeY-G27pHGAw.crl (hash: SN5GmSoE0DfNbgQPNcR84qWfCKCenJQ0Q9l5Ru7aFjY=)
2: v_98mZARWXkG0c7MrFhUfz1ZnSk.roa (hash: CoGKVro1tI7BKUl2OeE8GJuS6b7gkbb5BZSSNbzRr+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/077a50-45b6-4a38-9db9-950c7e73245c/1/kwNiKzxU5F9BZvMBeY-G27pHGAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/077a50-45b6-4a38-9db9-950c7e73245c/1/kwNiKzxU5F9BZvMBeY-G27pHGAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwNiKzxU5F9BZvMBeY-G27pHGAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:ba:0a:2a:ef:90:99:77:33:18:35:0f:67:5d:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9303622b3c54e45f4166f301798f86dbba47180c
Validity
Not Before: Nov 4 09:00:34 2025 GMT
Not After : Nov 5 09:00:34 2025 GMT
Subject: CN=ef26ed9b6f4b2b83180e192566b37e34a3527744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f1:7e:7c:78:46:2f:90:28:a4:e8:eb:5a:d0:
2e:8c:0e:a1:2b:8a:1b:a4:a1:ce:ca:49:9a:01:e6:
58:1b:36:75:4c:73:e3:ee:62:54:18:c6:b1:17:4d:
a5:ce:02:7d:a7:b3:06:5c:23:74:0c:1a:39:fc:7f:
da:0e:53:72:4e:95:e2:6d:32:bd:7e:63:12:26:16:
3b:81:0e:d5:36:b7:a7:cd:07:d4:b5:d0:db:1e:0c:
fc:56:2d:e9:2f:61:ef:07:cc:c3:64:82:29:8a:36:
c3:f8:b0:39:c5:dc:6b:1f:ea:8f:cf:10:ef:53:8e:
b6:2c:dd:f1:d2:35:3f:14:30:ec:89:4b:eb:de:bf:
e7:cc:8b:2e:68:9c:70:ac:95:6e:51:a4:25:6f:fa:
2b:b2:52:f3:be:df:a6:e4:9d:55:5b:a7:be:7f:90:
14:2f:69:c8:65:2d:cd:62:06:0e:91:bf:5d:0c:49:
ff:7d:ba:f5:81:a1:1f:2c:21:f5:de:cc:35:14:df:
c9:37:d3:48:6d:12:7d:27:58:ac:d4:10:51:99:a4:
04:ff:d3:41:28:c6:e0:df:a1:c4:04:6e:dc:91:91:
90:e8:20:98:d5:2d:b1:a8:dc:bf:c1:3d:75:07:75:
a4:76:c6:cb:27:1b:b9:52:69:d4:44:93:da:33:36:
f0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:26:ED:9B:6F:4B:2B:83:18:0E:19:25:66:B3:7E:34:A3:52:77:44
X509v3 Authority Key Identifier:
keyid:93:03:62:2B:3C:54:E4:5F:41:66:F3:01:79:8F:86:DB:BA:47:18:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwNiKzxU5F9BZvMBeY-G27pHGAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/077a50-45b6-4a38-9db9-950c7e73245c/1/kwNiKzxU5F9BZvMBeY-G27pHGAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/077a50-45b6-4a38-9db9-950c7e73245c/1/kwNiKzxU5F9BZvMBeY-G27pHGAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:8e:aa:f7:03:6b:0f:3b:37:83:75:56:36:60:a8:58:3b:1f:
af:6e:3f:7b:3f:80:40:80:d1:d9:69:49:88:ce:c6:85:bb:dc:
76:ff:32:b4:38:d8:bb:7e:4d:f1:cb:70:76:fe:c0:09:17:e6:
c3:02:11:eb:12:49:c6:1c:59:79:d5:e1:11:f7:69:13:8a:fa:
35:d5:eb:d4:35:4f:0a:c7:f0:2e:d9:43:16:14:ae:61:bc:a0:
3f:c7:e0:8d:f3:5d:12:bb:60:69:83:b4:1b:07:cf:be:97:94:
08:6c:04:94:c1:50:35:d4:1b:51:da:7c:97:1a:2e:21:bb:31:
d6:cc:5a:50:19:9f:d1:61:cd:74:d5:93:78:b1:56:9c:87:15:
e4:43:c5:a9:15:da:61:5a:9c:77:0f:58:b4:e4:9e:54:0d:7f:
e8:77:c4:fe:86:2d:3c:11:20:b4:6e:1f:7c:7b:34:7d:5f:74:
99:15:f1:2e:01:97:f2:dd:6e:49:8d:e9:68:63:10:04:6c:a9:
21:a6:97:91:26:bf:ca:a6:52:a0:38:4c:80:6b:e3:66:cd:e1:
f8:bd:d0:ee:73:2e:83:ec:65:b0:06:0a:f1:3f:f0:ab:b9:5b:
f7:58:ab:d2:a5:eb:d3:7b:c8:3a:53:9e:f5:34:4c:95:2b:e4:
ab:c7:5c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:15:23 2025 by rpki-client