Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft
File: kwpXLBbQxE93Zlh9kth4ujBUHR4.mft (raw, json)
Hash identifier: ox8yS6N2Phc1aSLqRClllsAFm+zxqsQ+3kpjQwmKHxg=
Subject key identifier: 9F:FD:17:95:09:6B:FC:93:29:A2:D8:BD:F4:44:E4:C7:62:F2:C7:BE
Authority key identifier: 93:0A:57:2C:16:D0:C4:4F:77:66:58:7D:92:D8:78:BA:30:54:1D:1E
Certificate issuer: /CN=930a572c16d0c44f7766587d92d878ba30541d1e
Certificate serial: 01984776FED5F173287847FF177DA697BAFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwpXLBbQxE93Zlh9kth4ujBUHR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft
Manifest number: 07D6
Signing time: Sat 26 Jul 2025 16:00:37 +0000
Manifest this update: Sat 26 Jul 2025 16:00:37 +0000
Manifest next update: Sun 27 Jul 2025 16:00:37 +0000
Files and hashes: 1: dDvbinURbnBhghcDsCWr8pNjL-Q.roa (hash: hUZbMhthMOHDXoT8VJO840vVSWFg65GOQ1Sk4GTZvhs=)
2: kwpXLBbQxE93Zlh9kth4ujBUHR4.crl (hash: chRRiPiaCIEAQn9fCaX/blR2O2lLMYsWup5CxbGm6A4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwpXLBbQxE93Zlh9kth4ujBUHR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:76:fe:d5:f1:73:28:78:47:ff:17:7d:a6:97:ba:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=930a572c16d0c44f7766587d92d878ba30541d1e
Validity
Not Before: Jul 26 16:00:37 2025 GMT
Not After : Jul 27 16:00:37 2025 GMT
Subject: CN=9ffd1795096bfc9329a2d8bdf444e4c762f2c7be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1e:c9:ab:24:d6:50:91:8c:7d:c0:48:54:56:
e7:d1:a3:95:be:7f:71:ba:e7:9c:ae:0f:04:68:5e:
68:94:32:1a:85:da:a8:66:78:85:d5:c8:33:ce:42:
7a:80:53:1b:ae:8c:55:e2:54:c8:ca:46:62:6b:e0:
cc:38:c7:ee:75:79:6e:b6:07:63:2b:1d:0b:19:59:
85:cb:4f:a7:86:2f:98:f9:ab:2d:f7:e0:9f:70:5a:
14:37:ca:ac:f7:2d:c4:11:1f:77:0d:22:40:f3:57:
e3:4b:2c:ab:39:36:03:95:12:ab:e2:96:fb:1c:c1:
c4:64:d8:fd:bd:11:39:a8:2b:a8:aa:4c:74:eb:92:
b5:fd:d9:8a:93:6e:94:11:b1:af:81:1b:f4:0b:69:
4b:5b:b9:69:e4:b1:57:08:03:62:7c:fe:82:79:11:
73:9c:0f:09:d3:f1:7c:89:41:3d:15:69:c1:eb:2a:
9b:09:6e:24:28:3d:9a:76:5f:bf:34:e5:a5:3c:fb:
15:c7:d4:3c:a3:84:43:9d:93:0e:f6:13:82:8c:8f:
e8:0c:85:b7:c4:1b:fa:99:0d:5a:14:0b:16:35:9d:
f5:05:c2:77:f8:22:84:5f:55:8c:1a:44:19:5b:aa:
94:3a:02:0c:2f:db:88:ee:25:7e:e1:b5:78:ff:1f:
76:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:FD:17:95:09:6B:FC:93:29:A2:D8:BD:F4:44:E4:C7:62:F2:C7:BE
X509v3 Authority Key Identifier:
keyid:93:0A:57:2C:16:D0:C4:4F:77:66:58:7D:92:D8:78:BA:30:54:1D:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwpXLBbQxE93Zlh9kth4ujBUHR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:81:eb:ee:83:28:70:11:97:36:52:9b:d2:bd:88:a7:d5:e8:
21:4a:ef:6b:d6:68:5c:b6:49:2d:d4:26:b4:00:06:c1:0f:4e:
d8:5e:80:d5:a1:d9:f9:b2:89:39:13:0e:b3:9a:f2:82:6c:ae:
da:d0:61:a6:85:f7:37:f4:89:32:f9:53:25:c6:1d:fc:a8:68:
e4:1d:34:ac:61:8b:fd:00:c4:d8:2e:c1:3b:42:fe:bc:51:39:
4b:e5:e2:bb:73:8b:ac:64:f5:cd:07:ad:bb:89:d4:e8:24:9b:
fe:21:56:98:2a:f1:66:50:cc:da:4c:b8:e9:99:8d:98:f7:66:
61:62:df:82:73:dc:96:d6:ca:75:07:4f:ae:f1:1c:93:0a:e8:
de:11:c1:af:5c:70:33:24:30:84:a4:f2:93:26:2e:2e:c2:f1:
db:57:9b:00:59:03:10:5f:c8:6c:ab:bf:7f:26:7e:c3:34:f7:
49:c3:66:c8:f4:ab:b1:33:ba:f0:83:c5:de:7b:c3:69:f6:4e:
88:db:5b:f2:79:e0:e5:3f:44:a9:dd:4a:d2:81:4e:aa:3c:fa:
c6:8e:e3:6d:71:c4:64:ae:c8:76:de:a7:a1:5e:e1:be:24:68:
b4:46:5a:8f:0f:4d:f5:58:a5:76:ca:4e:03:b3:4e:e7:0c:fd:
0b:7d:d4:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:51:11 2025 by rpki-client