Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.mft
File: KWJHhUnYzCZMLMV9znGQXRdvuIo.mft (raw, json)
Hash identifier: l1/UVxx2qp+B7FdvLW4YPAIAJkdp0kUYUplLxcSpWps=
Subject key identifier: 99:93:E5:21:04:F9:E4:33:6D:AC:48:5A:50:93:76:18:2E:7B:7E:9C
Authority key identifier: 29:62:47:85:49:D8:CC:26:4C:2C:C5:7D:CE:71:90:5D:17:6F:B8:8A
Certificate issuer: /CN=2962478549d8cc264c2cc57dce71905d176fb88a
Certificate serial: 019A4E4FF874122D460D111D24990287854B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWJHhUnYzCZMLMV9znGQXRdvuIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.mft
Manifest number: 169D
Signing time: Tue 04 Nov 2025 10:00:54 +0000
Manifest this update: Tue 04 Nov 2025 10:00:54 +0000
Manifest next update: Wed 05 Nov 2025 10:00:54 +0000
Files and hashes: 1: Db4cgvqb5UOgeQz4JyUwJf6Q1lU.roa (hash: zvZMT/bbatMS4tl05cs3bvS/uoQt4c5U4AeQiIO1dXo=)
2: KWJHhUnYzCZMLMV9znGQXRdvuIo.crl (hash: HPHFeywWg9OJ9cKS3DkFvRvngCFGyVX3jLNu4O/lsaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWJHhUnYzCZMLMV9znGQXRdvuIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:f8:74:12:2d:46:0d:11:1d:24:99:02:87:85:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2962478549d8cc264c2cc57dce71905d176fb88a
Validity
Not Before: Nov 4 10:00:54 2025 GMT
Not After : Nov 5 10:00:54 2025 GMT
Subject: CN=9993e52104f9e4336dac485a509376182e7b7e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:cb:d6:d2:34:1c:3f:a5:8b:83:3f:23:c5:d1:
19:46:ab:69:c4:22:27:61:0f:01:46:f0:0c:01:24:
f6:f5:d9:67:dc:37:6e:04:5c:18:d9:82:36:42:46:
23:98:0f:ab:4d:7b:37:3c:94:27:65:3c:f8:08:fe:
49:96:53:ce:48:f7:49:4d:97:cf:c7:b1:9d:34:99:
f3:ec:ef:79:5c:be:bf:d7:d9:c4:46:de:08:7c:89:
49:97:6a:46:64:be:e6:94:ea:2a:7d:ef:dc:87:82:
22:1d:fb:f2:c2:65:ed:5e:cf:d7:ed:f5:9c:55:55:
61:40:81:6c:4b:86:c4:1b:62:90:01:b8:5d:97:b3:
ad:a9:13:3c:89:e2:75:49:94:cf:71:c3:ce:06:d8:
9d:66:8f:37:7f:cb:63:35:66:c3:22:6a:0b:1c:d6:
81:11:25:2a:c5:0f:cc:25:1e:04:b5:9c:0a:35:2a:
4d:63:9d:1d:37:68:11:46:46:d3:e3:8b:4d:cf:c6:
39:de:ac:f5:2f:ea:0b:35:fb:21:78:44:36:1e:67:
23:9c:ee:58:9a:dc:52:3a:c5:72:cf:ad:8e:81:7b:
df:ce:d4:52:92:f9:ee:f7:3d:fd:f9:69:8f:9b:99:
08:02:c6:76:55:b8:76:ba:d7:61:8a:2f:a8:3c:49:
02:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:93:E5:21:04:F9:E4:33:6D:AC:48:5A:50:93:76:18:2E:7B:7E:9C
X509v3 Authority Key Identifier:
keyid:29:62:47:85:49:D8:CC:26:4C:2C:C5:7D:CE:71:90:5D:17:6F:B8:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWJHhUnYzCZMLMV9znGQXRdvuIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:4b:53:1c:54:ee:2c:12:47:9e:92:56:a9:0e:c1:8e:df:e1:
8f:03:4e:1b:2e:88:59:1b:2c:b6:3b:fc:a0:65:b7:3a:9f:28:
34:12:10:a8:46:dc:a1:1f:b9:41:f0:29:c6:ef:50:fa:82:c9:
01:f8:ec:29:e3:a1:de:96:02:ed:b2:51:3e:9f:ee:05:1e:e8:
2d:19:bc:7d:37:ba:9b:e9:0a:61:1f:4a:0a:26:14:7f:6f:82:
cb:78:d3:e0:1f:f0:0f:cd:3f:9d:ed:f7:fe:c0:91:7c:e0:5d:
bc:5a:2c:62:f0:2d:55:eb:78:1b:b9:ad:0e:5e:d9:12:46:c1:
cb:f0:24:5a:4b:c4:1a:b4:bc:3e:5c:66:a0:e6:40:97:9c:44:
58:a2:12:f1:d2:62:8e:83:31:28:12:c0:3b:a2:ef:d9:ca:3c:
e6:ff:e9:b1:d2:f0:97:dc:ab:8e:3d:85:12:1a:8b:68:7d:ef:
7d:d7:9c:25:e4:0c:31:37:9c:38:4a:f2:ef:4a:2c:f6:35:a1:
7a:33:27:1c:29:23:82:82:d1:63:ca:92:a6:c1:a3:19:99:f8:
1e:9b:1e:14:01:8c:95:8a:a6:b6:95:03:96:29:63:11:c3:4c:
3e:63:85:dc:ec:95:e6:cf:b6:1b:68:63:85:17:95:b7:0a:45:
86:d3:47:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:36:18 2025 by rpki-client