Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.mft
File: KWAWrWTCJgCs8wSfh1j1PrseV8Q.mft (raw, json)
Hash identifier: 9PQ4Egjx2+0Dssa/67SPWJTAuJoYs6faahTwE7gH8Tk=
Subject key identifier: 56:42:09:62:AE:A3:FC:C1:56:B1:01:02:B9:D2:D0:05:C9:5D:B7:BD
Authority key identifier: 29:60:16:AD:64:C2:26:00:AC:F3:04:9F:87:58:F5:3E:BB:1E:57:C4
Certificate issuer: /CN=296016ad64c22600acf3049f8758f53ebb1e57c4
Certificate serial: 019A4EBD418C9F79CA880FEC74A99C3BC82E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWAWrWTCJgCs8wSfh1j1PrseV8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.mft
Manifest number: 04C4
Signing time: Tue 04 Nov 2025 12:00:17 +0000
Manifest this update: Tue 04 Nov 2025 12:00:17 +0000
Manifest next update: Wed 05 Nov 2025 12:00:17 +0000
Files and hashes: 1: IoK2zTe-OC_dDY_734EVd48qQJ8.roa (hash: OV/EhbwqGxvFaPc6Pz7o/yEGyZxODTXrHQIagp84Afg=)
2: KWAWrWTCJgCs8wSfh1j1PrseV8Q.crl (hash: wG1i6dNRtgW23iwjuKOk9r8U1Lp9RxE2NDUCqzOCBNI=)
3: ZRdLYDl7hpyDg6YsYK-Wdw4baMc.roa (hash: 5DTIP8T8IUMMx2MqkILNMeW793Ol6SuU7VuRgBULAp4=)
4: ht_JyDW5SHb_fGBhQyUDtshRG0E.roa (hash: Z6WBdYQ46aWUfuhec+LPbx2Hp5R+pjpCIAS0/BT2vi4=)
5: r_GgOOrK8Ih9MzmtnCA_DxxC0BY.roa (hash: lJ1n4OTRsjhQ2vj+G2gNkyHqsFIRt5AG3VU9W6pXzHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWAWrWTCJgCs8wSfh1j1PrseV8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:bd:41:8c:9f:79:ca:88:0f:ec:74:a9:9c:3b:c8:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296016ad64c22600acf3049f8758f53ebb1e57c4
Validity
Not Before: Nov 4 12:00:17 2025 GMT
Not After : Nov 5 12:00:17 2025 GMT
Subject: CN=56420962aea3fcc156b10102b9d2d005c95db7bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b1:06:15:bc:7c:03:42:43:fb:25:8c:87:8d:
1b:61:25:5e:6d:c6:13:85:c1:40:42:f1:b3:40:a0:
d4:65:a7:b5:02:1d:16:59:60:21:38:62:5c:ca:8b:
aa:93:6d:ac:5e:7f:49:ce:06:47:b7:fd:75:0c:c2:
c7:90:23:a8:b5:d3:c3:4d:e2:d0:4a:b1:db:99:53:
62:c3:f9:11:16:73:4d:f9:32:78:24:51:41:28:74:
36:f2:47:52:0f:71:28:d9:df:3c:ec:be:67:86:e8:
5f:35:3e:92:f3:4f:9c:c3:d0:e4:82:4a:fd:53:68:
a4:52:a0:5f:6f:03:61:cf:4d:09:ee:80:0c:92:f5:
ef:f6:71:d0:ec:b1:55:48:3c:ac:c3:e7:09:ad:03:
d2:81:24:ea:86:f8:c9:43:80:eb:9f:a8:dd:26:60:
14:ec:28:29:df:b5:3a:13:7e:fd:3a:b4:dc:aa:03:
db:67:2b:b8:5c:e8:d8:6d:3b:04:ca:fc:91:ef:0a:
1b:71:e3:06:84:03:68:63:5f:06:29:2f:b6:17:90:
eb:7d:c3:9a:72:f8:6a:6d:03:92:b8:95:66:fb:0c:
26:60:b1:38:ce:7f:2b:78:69:9f:ba:e9:da:bb:50:
1d:8a:be:14:f8:30:40:8e:0e:41:e9:a4:5b:36:e3:
32:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:42:09:62:AE:A3:FC:C1:56:B1:01:02:B9:D2:D0:05:C9:5D:B7:BD
X509v3 Authority Key Identifier:
keyid:29:60:16:AD:64:C2:26:00:AC:F3:04:9F:87:58:F5:3E:BB:1E:57:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWAWrWTCJgCs8wSfh1j1PrseV8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:3b:26:5a:ba:24:ce:43:99:e9:bf:ce:70:2a:95:97:75:0e:
7f:9b:27:ee:c8:bd:aa:da:0f:5a:a2:e6:c7:32:6f:b9:0f:8f:
e0:2e:9c:9f:da:25:9f:62:67:76:0b:0b:3e:0a:3b:9c:30:4f:
6f:0d:ea:f8:7b:fd:7e:e7:fe:b9:72:8e:93:a6:dc:5a:e1:79:
ea:82:f7:97:0b:f9:04:b0:0e:67:09:d0:29:d8:d4:a6:dc:48:
b3:0c:64:9e:4e:f3:21:75:54:4c:64:9d:f2:ad:c5:9a:ac:54:
3c:49:bb:fa:cd:95:80:1c:9c:ab:c6:18:84:79:05:ed:d8:47:
be:63:9e:24:3c:31:f2:bd:02:e9:39:c4:86:0c:27:db:00:c4:
2c:09:52:91:7e:0a:e8:38:a6:60:68:c4:ac:7d:bf:b1:b5:e4:
ec:b4:e5:ba:7d:22:81:88:8a:f7:61:1b:99:b2:a1:c0:3d:8c:
c3:0b:33:3a:04:86:ac:14:64:a4:4f:93:0a:67:ce:20:5c:bd:
5c:54:6b:e0:99:5b:a5:43:07:f7:fd:1e:4b:40:a0:c9:5e:90:
15:64:e8:e9:01:94:13:c6:a6:a4:a3:89:19:3b:8a:ca:ee:3b:
4b:15:f7:7f:68:7e:7e:7e:23:38:aa:e3:4d:da:a0:8d:4d:93:
7c:a1:79:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:50:05 2025 by rpki-client