Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.mft
File: KAWFe6e9XcggxhYmxjNJ47f6p9M.mft (raw, json)
Hash identifier: S4qCLAtK25UpSQaza55DZQIopP1AzOd5WW7O7BTOpqM=
Subject key identifier: 38:E4:A8:55:0F:D0:4B:0F:2F:A3:C9:D0:4C:82:35:3A:16:D0:09:EA
Authority key identifier: 28:05:85:7B:A7:BD:5D:C8:20:C6:16:26:C6:33:49:E3:B7:FA:A7:D3
Certificate issuer: /CN=2805857ba7bd5dc820c61626c63349e3b7faa7d3
Certificate serial: 019848F741D7FD263D485AC034E57AA67CFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KAWFe6e9XcggxhYmxjNJ47f6p9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.mft
Manifest number: 0E94
Signing time: Sat 26 Jul 2025 23:00:20 +0000
Manifest this update: Sat 26 Jul 2025 23:00:20 +0000
Manifest next update: Sun 27 Jul 2025 23:00:20 +0000
Files and hashes: 1: KAWFe6e9XcggxhYmxjNJ47f6p9M.crl (hash: buig2d2gFYHLTV3YV2vLw0np9F2jADl/ybL1IZ3GO5Q=)
2: QKHWtvbYs2bFm7Yqz1D-noGUUCg.roa (hash: ZmlSUpfzL4PQUwk4jtXCzAOTz3/AO/19cZEbT2JXoOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/KAWFe6e9XcggxhYmxjNJ47f6p9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:41:d7:fd:26:3d:48:5a:c0:34:e5:7a:a6:7c:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2805857ba7bd5dc820c61626c63349e3b7faa7d3
Validity
Not Before: Jul 26 23:00:20 2025 GMT
Not After : Jul 27 23:00:20 2025 GMT
Subject: CN=38e4a8550fd04b0f2fa3c9d04c82353a16d009ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:19:df:fa:7b:f3:7d:6e:b2:97:37:d4:00:00:
11:07:63:94:43:38:0b:a9:70:3e:54:37:42:ed:95:
7b:f9:99:35:fb:6f:13:39:07:18:72:4c:c0:c9:0f:
4f:e0:9e:f9:2b:3d:1a:eb:57:58:f0:bf:3b:56:c6:
5f:b2:94:d0:56:23:a4:c6:9c:fe:04:47:1b:df:1c:
a0:d1:9d:81:18:5d:b8:65:17:b7:d9:07:6f:f3:fb:
da:d0:a8:c3:bd:3e:ab:b1:43:76:da:2b:bd:c1:94:
7f:2f:fe:90:fb:2e:c5:d1:a4:4a:10:7a:dd:fd:79:
90:5f:6a:b6:1d:bd:fb:4a:9d:55:43:af:43:86:6e:
3e:56:69:ed:c6:76:28:7d:05:59:f0:d0:fb:5b:18:
23:2b:e3:f4:9c:bf:4f:8c:70:e8:ef:05:ba:1e:81:
50:79:67:9f:76:21:a9:da:eb:f6:ec:21:e5:e6:51:
8e:03:30:5a:6c:fb:7a:41:85:cd:59:ac:ee:79:52:
93:37:9a:56:5d:91:0c:a9:d7:6a:88:d7:e4:16:aa:
b7:33:bc:df:e5:c0:01:85:53:ed:e0:db:7e:4e:4a:
b8:e2:ee:64:61:73:79:dd:4c:08:62:10:3b:f9:9f:
b6:dd:77:1e:f0:5c:a6:33:9a:0a:bf:4b:20:6d:6f:
2f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E4:A8:55:0F:D0:4B:0F:2F:A3:C9:D0:4C:82:35:3A:16:D0:09:EA
X509v3 Authority Key Identifier:
keyid:28:05:85:7B:A7:BD:5D:C8:20:C6:16:26:C6:33:49:E3:B7:FA:A7:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAWFe6e9XcggxhYmxjNJ47f6p9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:cd:22:79:e1:fd:16:fe:c9:5c:68:04:42:d2:10:85:b5:a7:
c3:74:c1:06:e5:5c:d7:0d:63:ab:32:e8:f2:24:e2:52:56:7a:
98:57:aa:cc:b4:fa:ec:a7:16:0e:62:dc:6e:65:20:dd:bb:c9:
25:46:37:11:bd:07:ac:73:19:15:d0:93:10:ad:7d:35:9c:13:
af:d4:86:88:c4:a5:ca:ab:56:ae:71:ab:3c:73:65:8c:e3:32:
b4:59:09:16:69:9d:30:6e:57:93:5f:4b:1a:a7:fb:27:86:8a:
8b:61:6e:87:53:12:4b:22:78:a1:34:00:12:26:f7:7f:d1:bb:
03:c5:bc:73:62:2a:bb:ca:14:f4:30:76:9c:03:2a:19:fc:d2:
8c:58:96:93:a3:50:e1:65:e1:4b:9a:af:be:ef:56:66:fe:ac:
50:4d:dc:94:11:4b:b6:12:20:28:c5:75:1e:05:63:d3:8a:0b:
20:1c:31:a9:8c:92:78:9c:3c:95:0a:a3:1d:1e:d7:b0:9c:e9:
ba:65:82:35:1b:11:f1:2c:8e:a3:8e:74:8d:48:ee:28:c8:59:
ff:b3:cf:25:8f:ae:48:73:a9:21:85:4b:ea:c0:5e:bb:24:72:
59:3d:be:0d:e4:9c:23:2d:61:4c:58:4f:e1:29:74:72:d6:e2:
50:bc:24:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhI90HX/SY9SFrANOV6pnz+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4MDU4NTdiYTdiZDVkYzgyMGM2MTYyNmM2MzM0OWUzYjdm
YWE3ZDMwHhcNMjUwNzI2MjMwMDIwWhcNMjUwNzI3MjMwMDIwWjAzMTEwLwYDVQQD
EygzOGU0YTg1NTBmZDA0YjBmMmZhM2M5ZDA0YzgyMzUzYTE2ZDAwOWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5hnf+nvzfW6ylzfUAAARB2OUQzgL
qXA+VDdC7ZV7+Zk1+28TOQcYckzAyQ9P4J75Kz0a61dY8L87VsZfspTQViOkxpz+
BEcb3xyg0Z2BGF24ZRe32Qdv8/va0KjDvT6rsUN22iu9wZR/L/6Q+y7F0aRKEHrd
/XmQX2q2Hb37Sp1VQ69Dhm4+VmntxnYofQVZ8ND7WxgjK+P0nL9PjHDo7wW6HoFQ
eWefdiGp2uv27CHl5lGOAzBabPt6QYXNWazueVKTN5pWXZEMqddqiNfkFqq3M7zf
5cABhVPt4Nt+Tkq44u5kYXN53UwIYhA7+Z+23Xce8FymM5oKv0sgbW8vywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDjkqFUP0EsPL6PJ0EyCNToW0AnqMB8GA1UdIwQY
MBaAFCgFhXunvV3IIMYWJsYzSeO3+qfTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0FXRmU2ZTlYY2dneGhZbXhqTko0N2Y2cDlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8zNWExOWUtZWRhYi00NGM5LTkxNmEt
MTZiNWViZGQyMDQwLzEvS0FXRmU2ZTlYY2dneGhZbXhqTko0N2Y2cDlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS8zNWExOWUtZWRhYi00NGM5LTkxNmEtMTZiNWViZGQyMDQw
LzEvS0FXRmU2ZTlYY2dneGhZbXhqTko0N2Y2cDlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhs0ieeH9
Fv7JXGgEQtIQhbWnw3TBBuVc1w1jqzLo8iTiUlZ6mFeqzLT67KcWDmLcbmUg3bvJ
JUY3Eb0HrHMZFdCTEK19NZwTr9SGiMSlyqtWrnGrPHNljOMytFkJFmmdMG5Xk19L
Gqf7J4aKi2Fuh1MSSyJ4oTQAEib3f9G7A8W8c2Iqu8oU9DB2nAMqGfzSjFiWk6NQ
4WXhS5qvvu9WZv6sUE3clBFLthIgKMV1HgVj04oLIBwxqYySeJw8lQqjHR7XsJzp
umWCNRsR8SyOo450jUjuKMhZ/7PPJY+uSHOpIYVL6sBeuyRyWT2+DeScIy1hTFhP
4Sl0ctbiULwkTg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 02:30:50 2025 by rpki-client