Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft
File: KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft (raw, json)
Hash identifier: yNrfNhw7HJZPyJQaK3I20wOot/aSpd5YWHPW2mNiZ8A=
Subject key identifier: 98:9D:35:37:EE:0A:CB:6F:EA:16:0C:91:3D:93:F6:0B:FC:3D:E3:4B
Authority key identifier: 2B:04:D5:55:76:3F:BA:A0:94:DC:A7:A9:3D:AA:A7:8F:D4:00:85:54
Certificate issuer: /CN=2b04d555763fbaa094dca7a93daaa78fd4008554
Certificate serial: 019A4E868596E416CAA7063CF864E90A6C1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KwTVVXY_uqCU3KepPaqnj9QAhVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft
Manifest number: 05D6
Signing time: Tue 04 Nov 2025 11:00:30 +0000
Manifest this update: Tue 04 Nov 2025 11:00:30 +0000
Manifest next update: Wed 05 Nov 2025 11:00:30 +0000
Files and hashes: 1: 3Vh4V2QgqmooTGsNFJzabIkkGuM.roa (hash: pE5OL1gfqKCShXk+oFUj+oL3mmpNWjZD2zCOccDVAJo=)
2: KwTVVXY_uqCU3KepPaqnj9QAhVQ.crl (hash: 1FZJEPWu3D5SKTN7EyOijlrGbbpFWyQFm4yWGlrm67g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KwTVVXY_uqCU3KepPaqnj9QAhVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 11:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:85:96:e4:16:ca:a7:06:3c:f8:64:e9:0a:6c:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b04d555763fbaa094dca7a93daaa78fd4008554
Validity
Not Before: Nov 4 11:00:30 2025 GMT
Not After : Nov 5 11:00:30 2025 GMT
Subject: CN=989d3537ee0acb6fea160c913d93f60bfc3de34b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ee:1b:ca:83:05:82:82:dc:07:1c:89:f7:a8:
1a:b8:b5:90:e2:57:9a:8b:7a:ad:41:93:41:ee:14:
93:bd:ab:9a:f3:c4:5a:43:a8:63:8b:c7:86:b0:fa:
bf:07:e6:87:11:bd:64:c8:e1:89:eb:33:89:6c:f2:
7e:75:7c:f2:27:44:68:f0:c0:86:82:5f:51:cf:43:
76:4e:2e:3d:75:f9:39:e6:bc:08:a0:67:09:41:76:
83:99:f9:d9:d3:6b:13:d0:ed:87:b6:04:83:88:ee:
06:54:e0:3f:43:3b:8d:19:bc:43:ce:bf:76:c6:57:
c7:96:62:da:4b:09:08:b3:85:d6:d3:39:1d:7e:ea:
f5:ff:ad:74:e5:6d:8c:87:87:41:cc:01:33:89:83:
3d:d0:14:01:20:d0:61:74:2a:ab:53:54:f8:e7:e6:
90:f6:d5:c0:aa:c1:39:79:b7:03:26:43:e1:01:fc:
f3:78:e8:ae:72:d0:dc:04:b4:48:db:71:f5:57:90:
77:7d:e1:98:a6:5e:3f:58:7a:1a:18:86:e2:f5:bf:
82:e6:a7:36:f9:31:3a:9f:c6:ad:45:a1:c2:df:6d:
d7:b1:04:88:33:52:3e:39:e5:77:26:5a:bc:53:29:
a1:20:4d:3f:cc:09:4a:ae:4a:95:11:9d:5e:3a:89:
fb:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:9D:35:37:EE:0A:CB:6F:EA:16:0C:91:3D:93:F6:0B:FC:3D:E3:4B
X509v3 Authority Key Identifier:
keyid:2B:04:D5:55:76:3F:BA:A0:94:DC:A7:A9:3D:AA:A7:8F:D4:00:85:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwTVVXY_uqCU3KepPaqnj9QAhVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:83:c3:97:61:54:3f:f1:17:9a:d7:97:af:ae:23:38:78:e9:
c6:a1:d6:e4:81:ce:9f:84:56:5d:16:68:fa:59:b4:32:27:23:
13:d8:1b:0e:1c:ee:b0:12:f7:7f:5f:15:77:e1:00:9b:54:d0:
51:78:e3:e2:03:bc:bb:e3:9d:df:c2:06:98:73:f6:d6:d2:13:
d5:ce:b0:84:3b:8a:d6:7e:c3:54:25:42:73:fa:82:86:0e:2c:
70:23:3c:7f:8a:96:77:1e:44:d5:b6:8e:34:35:68:77:5e:0b:
b0:12:56:2d:b4:03:7c:11:91:ad:9c:d2:73:3c:9e:9e:bf:a2:
14:99:2d:84:56:a1:86:c3:e2:89:47:2d:7c:d5:16:f3:52:fe:
74:5e:59:7b:d2:c2:98:6d:dc:5f:64:7c:9e:4a:b0:dd:29:19:
b6:ed:22:a6:e2:f8:d2:f8:58:56:35:2b:0f:20:71:8c:46:4a:
46:6d:a5:38:2b:aa:dc:91:6c:ba:12:68:a4:38:b1:55:92:a1:
00:98:90:8a:e1:af:a6:c5:b9:e7:bd:9d:5c:22:b0:7c:a5:bc:
4c:ff:f5:81:05:43:bf:c8:f4:7b:87:78:7a:2b:f0:a4:90:51:
75:b4:18:41:aa:2f:d5:af:e1:1d:78:59:9d:01:a1:2a:db:db:
d2:43:be:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:44:15 2025 by rpki-client