Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
File: kwHqBZY8l1byjuLpi488xHncn1g.mft (raw, json)
Hash identifier: V2Idk8LlGX/ZiR8UAkq1dr2DAoHZ6erW7rrRwu1naQs=
Subject key identifier: CE:FD:99:74:8E:98:74:A6:C4:AC:FC:B1:BA:83:4C:51:26:E6:E7:EA
Authority key identifier: 93:01:EA:05:96:3C:97:56:F2:8E:E2:E9:8B:8F:3C:C4:79:DC:9F:58
Certificate issuer: /CN=9301ea05963c9756f28ee2e98b8f3cc479dc9f58
Certificate serial: 0199C4203D79B7BFF98E39F3571B2A9B375F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
Manifest number: 16C6
Signing time: Wed 08 Oct 2025 14:01:11 +0000
Manifest this update: Wed 08 Oct 2025 14:01:11 +0000
Manifest next update: Thu 09 Oct 2025 14:01:11 +0000
Files and hashes: 1: TVR9Wcx95L9uIbI7vmRK3_ppXuA.roa (hash: FBGg+DHw7jOc497O265+HPovAlPdSEs0qwJnAdItW6I=)
2: UvYnHc7rFlBw3j4tqyHKN3v104E.roa (hash: 6QDgTXlr47CFI8bSc1FSdC5Ii7Qu4oH4gM2ZxRc6gQc=)
3: bdOSuRKRee1uOsbVObRylNDB0a0.roa (hash: gjO8qJZwFaEvDikQnhsOULa/ARdOkiQLGR4fYx/iUVY=)
4: kwHqBZY8l1byjuLpi488xHncn1g.crl (hash: LYGPQXsDjCrQPsTND11RQEnY6S650IIyAaUlV/FejIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:20:3d:79:b7:bf:f9:8e:39:f3:57:1b:2a:9b:37:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9301ea05963c9756f28ee2e98b8f3cc479dc9f58
Validity
Not Before: Oct 8 14:01:11 2025 GMT
Not After : Oct 9 14:01:11 2025 GMT
Subject: CN=cefd99748e9874a6c4acfcb1ba834c5126e6e7ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f0:af:fe:3f:8d:51:66:7a:d1:0d:1b:73:d2:
a3:6c:95:f9:3c:ec:38:41:82:bc:cc:d1:f3:c0:4b:
5a:f6:96:c6:af:fb:05:af:fe:e0:54:54:8b:4e:4b:
71:52:04:f9:b1:9b:31:c5:1a:06:76:20:a4:3f:41:
0e:c2:4d:6c:04:8a:d0:e2:95:a6:64:5f:c5:fb:68:
ef:df:d1:2d:ee:7f:04:d7:e3:23:31:45:3e:09:fd:
7f:8e:4a:c9:73:77:21:de:4c:78:5b:58:94:e7:14:
98:e8:51:5f:cf:0f:43:f8:3e:7a:61:78:43:b1:2e:
6b:93:5d:17:c0:a0:7b:62:2a:b0:8e:3f:75:bb:6b:
b7:9b:c1:42:a7:b9:be:d4:20:4d:fe:4c:f5:42:54:
7d:28:f9:d4:55:bf:25:57:3b:a4:df:fe:95:fa:a6:
d5:ac:72:db:93:1f:d8:aa:5c:4b:56:5a:f9:6b:b2:
37:eb:8f:38:74:8a:95:26:4c:e8:22:fd:f6:a4:fd:
04:2c:4c:71:33:52:37:1b:bc:5c:bb:87:b8:0d:48:
1c:93:15:01:e0:cd:b2:4b:03:f9:72:ee:69:11:24:
d9:b3:a2:e7:a9:2f:5c:a9:8c:50:0f:5c:f5:e4:46:
54:aa:e1:30:65:e7:14:a8:c4:31:7f:08:50:52:40:
11:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:FD:99:74:8E:98:74:A6:C4:AC:FC:B1:BA:83:4C:51:26:E6:E7:EA
X509v3 Authority Key Identifier:
keyid:93:01:EA:05:96:3C:97:56:F2:8E:E2:E9:8B:8F:3C:C4:79:DC:9F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:b8:49:50:9d:77:6f:b9:70:d6:e6:43:83:74:3a:92:e2:44:
82:5a:84:8d:e6:68:1f:1f:fa:59:05:9c:70:26:10:fa:f2:30:
3f:82:67:90:0f:aa:2e:76:77:de:d4:57:dd:67:d7:5e:20:11:
57:7f:2e:4b:a2:70:5d:f5:6c:9f:90:e1:61:bc:a1:b3:64:1e:
dc:8b:88:b6:03:be:21:fa:82:8c:da:21:20:cb:f3:3d:46:58:
40:15:ed:14:0b:e2:d6:b1:75:cb:76:db:15:49:57:e7:82:ba:
74:76:7f:22:d9:7f:a0:bb:22:ff:d6:93:d8:cb:b2:db:2c:50:
47:bc:c7:93:11:21:51:cb:68:bc:ab:6f:e6:6f:54:b8:3e:44:
06:b9:7e:80:7f:7e:4e:35:29:d8:f6:0c:bf:46:89:14:e3:49:
de:ac:b1:f5:cb:d6:38:90:b9:34:68:4e:61:c1:76:54:39:53:
17:24:07:8d:67:7e:69:19:5c:10:c8:69:50:1a:49:31:0e:82:
d0:09:c0:f7:08:c6:eb:15:fa:e2:94:39:1e:44:1f:54:05:c3:
91:c2:f7:5f:d5:0a:bd:99:9c:c1:0b:bb:76:6b:64:a4:e3:57:
f9:0a:3a:ca:45:67:e1:34:2b:5f:cc:bd:02:1e:58:79:f6:de:
eb:25:f6:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:31:59 2025 by rpki-client