Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
File: kwTroql6CcmzsIz_g9-0dxQbwcs.mft (raw, json)
Hash identifier: g7LVZfb1DaERZvvMSUhXKr8aTz+xiUHpKG9AEFonOaM=
Subject key identifier: 7B:98:7C:E2:46:CE:A4:B4:D0:27:37:E1:3C:B9:77:B0:BB:1A:02:8B
Authority key identifier: 93:04:EB:A2:A9:7A:09:C9:B3:B0:8C:FF:83:DF:B4:77:14:1B:C1:CB
Certificate issuer: /CN=9304eba2a97a09c9b3b08cff83dfb477141bc1cb
Certificate serial: 019A50752027F49536584C8F6703A481FF45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 20:00:44 +0000
Manifest this update: Tue 04 Nov 2025 20:00:44 +0000
Manifest next update: Wed 05 Nov 2025 20:00:44 +0000
Files and hashes: 1: kwTroql6CcmzsIz_g9-0dxQbwcs.crl (hash: MVQxCW9H/IW5n5iAYpvSunHr2IZEjavDxb62QEJOuY8=)
2: veklkDiCqI48H1uQ5ixFAlK84NY.roa (hash: KUIRIFDZrVheg1iXYyW8LsCjhDrH33Kf+Op6ybMvK2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:75:20:27:f4:95:36:58:4c:8f:67:03:a4:81:ff:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9304eba2a97a09c9b3b08cff83dfb477141bc1cb
Validity
Not Before: Nov 4 20:00:44 2025 GMT
Not After : Nov 5 20:00:44 2025 GMT
Subject: CN=7b987ce246cea4b4d02737e13cb977b0bb1a028b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a7:14:30:86:53:f0:78:9c:e1:ed:af:25:d2:
9c:66:52:f0:4b:fa:01:61:1f:24:22:b3:2b:51:5c:
8a:5e:82:fa:98:18:14:b8:15:2a:d0:ce:9f:58:ba:
ac:dd:69:ac:68:3c:a6:15:58:4a:25:29:1c:65:d8:
a7:f7:b1:2b:90:63:aa:20:eb:cd:4c:9a:c2:db:51:
94:b4:5b:1e:45:fd:f6:55:62:f5:e2:1a:7c:e3:79:
97:d6:ab:21:9d:66:64:c3:00:ef:d2:8d:b2:d1:d4:
54:d6:dd:80:fb:f1:88:bc:36:fe:43:3f:3d:bc:33:
6b:70:74:f2:a9:e7:9d:50:b4:62:6d:1a:0d:d0:a3:
65:95:21:ba:da:a9:92:ae:ae:d7:87:be:38:01:20:
40:59:c5:6d:ef:29:93:e1:d4:6f:f5:8c:a6:e0:73:
aa:56:24:60:a6:77:00:c4:3b:dd:c7:a9:59:d9:8e:
9b:50:9d:49:9e:07:05:2c:78:c1:58:69:6e:89:57:
83:5f:0e:b9:91:36:26:bd:7d:42:4d:c5:df:06:0b:
78:b7:dc:3e:9e:36:de:46:2d:3d:02:8e:55:de:0c:
b5:83:b4:f4:ec:78:fa:a9:bb:09:95:b0:1b:0e:ea:
e2:42:76:f0:7f:84:91:3c:3c:16:d9:5e:36:bc:c8:
b8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:98:7C:E2:46:CE:A4:B4:D0:27:37:E1:3C:B9:77:B0:BB:1A:02:8B
X509v3 Authority Key Identifier:
keyid:93:04:EB:A2:A9:7A:09:C9:B3:B0:8C:FF:83:DF:B4:77:14:1B:C1:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:89:ba:36:03:09:2a:26:a2:3a:63:9e:6d:3e:7e:cd:bc:d1:
50:fc:97:e5:0f:cb:ce:31:5f:49:3c:cd:3d:a5:e1:c0:10:2c:
e4:09:04:d6:ff:3a:46:7e:cd:0e:be:8d:4c:9b:13:a3:4b:d5:
15:9e:0d:33:02:28:ec:21:b1:2d:a1:bb:70:b8:de:3f:06:3b:
a1:34:20:47:8c:09:fc:fb:49:14:54:58:7d:c6:7a:18:e8:fc:
3d:19:f9:91:03:6d:a7:2b:2b:03:c0:7e:ef:86:5d:26:e6:8d:
45:a9:e7:c0:2c:77:1e:18:de:7f:8d:c1:73:c4:ab:02:c8:2a:
11:ba:a2:4e:cb:2f:fb:b5:2e:42:36:4e:c2:a8:3a:7d:7b:2e:
b0:3f:5d:e7:df:4c:47:bc:50:dc:3c:23:8a:6f:c0:69:c4:9d:
84:4a:59:c0:be:31:0a:3b:9c:75:46:65:82:ab:f0:1d:d8:66:
22:c6:6c:c7:4e:25:12:82:a6:cc:30:e0:3c:64:3d:bf:6d:be:
b0:54:70:42:72:ff:2f:59:38:9b:4b:d6:5a:ee:94:a8:69:83:
02:87:4c:71:80:b5:e5:fc:b9:6f:e8:fc:30:c3:23:06:c2:6b:
72:bb:4b:37:9c:f9:6b:00:95:2a:e7:c3:82:61:7b:87:ec:ef:
32:3a:68:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:52:42 2025 by rpki-client