Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft
File: kwpXLBbQxE93Zlh9kth4ujBUHR4.mft (raw, json)
Hash identifier: rao+CHK6DSJRjUaOh2m3U2gFfu/ZgS3JTpOOus1ddHM=
Subject key identifier: C3:42:A7:D8:39:E2:E0:06:18:CF:FE:6A:94:CA:4E:4D:07:89:30:84
Authority key identifier: 93:0A:57:2C:16:D0:C4:4F:77:66:58:7D:92:D8:78:BA:30:54:1D:1E
Certificate issuer: /CN=930a572c16d0c44f7766587d92d878ba30541d1e
Certificate serial: 019873E3AC72756A5BCF8B7F06DDBCBCBC11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwpXLBbQxE93Zlh9kth4ujBUHR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft
Manifest number: 07ED
Signing time: Mon 04 Aug 2025 07:02:37 +0000
Manifest this update: Mon 04 Aug 2025 07:02:37 +0000
Manifest next update: Tue 05 Aug 2025 07:02:37 +0000
Files and hashes: 1: dDvbinURbnBhghcDsCWr8pNjL-Q.roa (hash: hUZbMhthMOHDXoT8VJO840vVSWFg65GOQ1Sk4GTZvhs=)
2: kwpXLBbQxE93Zlh9kth4ujBUHR4.crl (hash: 5h0kllUQu3RgGqHEf9+lZMEwU0RiSsKgrveBZjAXxpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwpXLBbQxE93Zlh9kth4ujBUHR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:ac:72:75:6a:5b:cf:8b:7f:06:dd:bc:bc:bc:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=930a572c16d0c44f7766587d92d878ba30541d1e
Validity
Not Before: Aug 4 07:02:37 2025 GMT
Not After : Aug 5 07:02:37 2025 GMT
Subject: CN=c342a7d839e2e00618cffe6a94ca4e4d07893084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a1:71:81:2a:79:72:a0:05:c3:d2:db:a1:20:
a6:9a:a4:82:f7:10:4c:f1:9d:1e:6d:1e:fc:da:9e:
79:18:bd:3a:2f:e2:b6:c1:e2:ec:d0:51:02:5f:a2:
94:d1:a1:8c:ef:f5:fb:44:b2:29:4d:cc:c4:27:f8:
d4:75:28:a8:31:91:f9:7e:f6:7f:ca:45:d1:54:1c:
0f:59:c0:15:72:d8:06:e3:91:f0:84:e4:6f:e4:6a:
b8:79:35:30:ff:64:e9:a1:2e:58:5e:b0:17:33:8e:
40:27:8e:82:1e:9e:ed:d9:c1:b2:c5:28:bd:d4:54:
0e:26:bc:c8:b3:65:09:c8:29:9f:bd:0b:fa:71:e5:
69:74:f2:99:3d:98:f4:c9:4d:55:95:65:61:7a:56:
72:b0:56:0d:f6:1a:e5:84:ed:94:f8:18:5a:bd:b8:
dc:cf:c1:7e:f8:42:ee:d9:df:2c:ac:4a:26:03:e1:
28:b6:59:eb:40:3f:85:38:ec:b2:54:89:bf:72:f2:
79:f4:6e:25:49:3c:64:cd:a3:9c:af:9d:a2:7b:3e:
ad:75:60:e7:41:7f:d6:8c:dc:6b:75:78:d9:e4:32:
35:6a:7d:5d:dd:b3:d2:44:21:57:c3:73:3d:d7:a1:
4d:f8:39:3b:64:ae:a8:fa:b4:10:28:c5:2a:f1:10:
f2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:42:A7:D8:39:E2:E0:06:18:CF:FE:6A:94:CA:4E:4D:07:89:30:84
X509v3 Authority Key Identifier:
keyid:93:0A:57:2C:16:D0:C4:4F:77:66:58:7D:92:D8:78:BA:30:54:1D:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwpXLBbQxE93Zlh9kth4ujBUHR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:87:ef:9e:11:ed:93:5a:05:24:62:20:26:22:62:3b:a3:ba:
13:fd:0d:19:ea:a6:47:49:2c:d1:f3:b9:03:af:2d:7f:d5:14:
9f:93:cd:09:29:5f:f6:09:86:74:f5:54:85:a9:9c:c0:37:9d:
ca:f8:b7:00:5c:69:21:75:fb:ff:67:ac:ac:8f:ba:37:6c:a3:
52:90:2c:f6:a4:ed:e7:e3:e1:01:dd:a4:46:0d:37:3a:6d:7c:
94:78:b4:dd:df:c4:0d:e8:aa:43:27:36:25:b9:6e:ca:2a:14:
ae:5c:b5:25:8c:38:de:25:28:11:b4:8e:8b:41:e8:dc:b6:53:
c3:2f:8a:e7:e5:d7:7b:c5:f6:1f:80:e6:85:99:f7:4a:d3:ce:
47:d7:95:71:86:f7:6f:9e:48:39:ae:58:f2:ee:d5:7c:31:fe:
8b:f3:e0:35:44:a0:2b:25:f6:42:fc:fa:f6:da:00:a7:84:63:
e2:c5:ad:31:1a:00:8d:d5:c9:ec:ce:88:a7:6e:61:78:31:85:
15:04:e4:bf:8c:bd:ad:07:55:bf:24:7d:6f:79:28:bb:87:25:
4d:fd:e4:4f:69:14:a8:3b:3c:d1:e4:6c:6b:f7:19:96:df:f0:
06:a3:14:24:cb:4e:2e:3e:4c:fb:ad:24:02:fd:ca:6d:88:15:
54:35:ee:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:05 2025 by rpki-client