Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft
File: Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft (raw, json)
Hash identifier: y7aBnJmp2tQSNEBaPDGtFcC1tJcoMjqGixIU6HW38nc=
Subject key identifier: 5F:AF:B2:9D:F1:6F:1D:5A:5E:A5:A9:F2:66:8F:A1:4E:05:D3:99:1E
Authority key identifier: 2B:0E:6A:7B:DB:11:C4:FF:D7:77:18:08:15:10:C9:14:31:17:8C:DB
Certificate issuer: /CN=2b0e6a7bdb11c4ffd77718081510c91431178cdb
Certificate serial: 0199C7C62748B3D978CEEDA3E72ABCE11A80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft
Manifest number: 16C8
Signing time: Thu 09 Oct 2025 07:01:16 +0000
Manifest this update: Thu 09 Oct 2025 07:01:16 +0000
Manifest next update: Fri 10 Oct 2025 07:01:16 +0000
Files and hashes: 1: HF_iZrXdVvTKE2NYXNHiTyOcQ64.roa (hash: WVml14eDTh4qN4FFOa9q4K+T7+9z6Qbi8JZGS0EECf0=)
2: Kw5qe9sRxP_XdxgIFRDJFDEXjNs.crl (hash: Y/GUNJMKLKKPrp1KlK/mHX3Ml9pbZ6oN8SDfHZtF9i8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Oct 2025 07:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c7:c6:27:48:b3:d9:78:ce:ed:a3:e7:2a:bc:e1:1a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b0e6a7bdb11c4ffd77718081510c91431178cdb
Validity
Not Before: Oct 9 07:01:16 2025 GMT
Not After : Oct 10 07:01:16 2025 GMT
Subject: CN=5fafb29df16f1d5a5ea5a9f2668fa14e05d3991e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2d:a2:0d:61:a3:e3:a6:a8:24:31:f6:28:a0:
be:7e:da:73:f2:fa:51:40:f2:91:96:94:cd:d1:13:
b3:39:ef:cf:ad:25:b5:48:0e:c1:fe:dd:42:15:d2:
f6:95:ac:38:bd:7e:b6:55:f6:6a:bf:5c:24:7c:63:
30:ff:78:b0:b2:72:61:86:2b:f5:0e:5a:b7:2e:dc:
c9:0d:ce:a5:0c:2e:ca:a7:b0:ab:7e:ea:23:31:21:
2b:60:a9:f5:73:e4:fa:75:5a:34:a2:60:54:14:18:
1f:a8:16:c1:55:6b:48:00:d3:8b:c1:7d:26:e6:e9:
78:ef:e7:b0:50:65:3c:aa:38:44:fe:be:0b:6e:c8:
ac:2c:1c:9f:0d:75:50:f0:86:01:20:76:60:47:a0:
df:9d:30:2a:f9:ca:cc:81:be:7c:87:55:d5:71:6b:
0f:0b:cc:f2:1b:29:69:32:0c:4b:05:28:e6:22:9c:
81:8e:8b:9b:fb:74:8e:85:cb:7e:68:ee:0f:d0:9f:
3b:40:1a:c7:81:b7:b6:9b:13:1d:0b:60:dc:de:2f:
89:88:f2:39:b0:36:3a:07:8f:c3:20:13:80:af:39:
37:76:5e:50:96:66:53:04:f3:87:45:82:12:39:dd:
19:61:7a:8f:9e:bf:1a:ac:74:b1:86:05:d5:17:3b:
29:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:AF:B2:9D:F1:6F:1D:5A:5E:A5:A9:F2:66:8F:A1:4E:05:D3:99:1E
X509v3 Authority Key Identifier:
keyid:2B:0E:6A:7B:DB:11:C4:FF:D7:77:18:08:15:10:C9:14:31:17:8C:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:b4:85:86:32:26:b2:a0:6e:2e:41:18:45:64:9e:79:62:10:
06:00:e2:57:be:a6:bb:e9:8d:ca:ce:9f:93:92:50:68:a9:18:
de:e3:e8:01:70:f9:38:17:6d:ad:a7:b1:eb:7f:e0:f8:fe:1c:
d5:1e:fe:41:bf:ba:a7:01:c4:5d:06:e2:ca:b7:95:70:e4:f9:
e8:1d:44:3b:78:c2:94:63:8a:53:e8:8a:81:6e:07:6a:5f:40:
11:22:63:a5:a8:ff:a5:38:45:4a:7c:36:01:eb:a8:2c:d5:57:
af:3c:1d:d1:e6:c7:ad:8d:b9:48:46:1f:1f:40:48:22:cf:39:
f5:14:59:ee:e5:8e:0e:8f:ca:e7:9b:bd:84:0f:37:cd:2f:39:
f8:3f:cf:47:e0:ff:78:29:db:06:36:51:a0:11:17:46:46:45:
87:73:21:6b:5a:d7:3b:0c:17:16:04:8f:14:35:93:e3:3c:72:
a5:b9:2b:3b:54:52:41:9a:92:ce:15:60:c2:6c:cd:99:e8:c1:
b7:62:27:d6:4d:65:7b:8e:41:08:eb:8f:db:d2:9b:44:ce:0b:
1d:f9:40:a7:12:2f:9c:b1:f5:8a:be:04:0d:a7:3c:7e:ba:32:
21:0d:bf:a9:7e:28:3b:15:7c:77:fb:09:ee:85:e3:ea:08:6f:
5e:5e:40:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 09:00:03 2025 by rpki-client