Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.mft
File: KZWUToTcN7pqQtaLseK5pEIehKQ.mft (raw, json)
Hash identifier: ldw1vBhnpql1nhY6GuMzQjvcmP/sY8UJyIDSDiPXHdk=
Subject key identifier: FE:DB:1C:80:44:CD:EA:EC:00:80:8C:9F:F1:18:F7:DA:60:E9:F5:18
Authority key identifier: 29:95:94:4E:84:DC:37:BA:6A:42:D6:8B:B1:E2:B9:A4:42:1E:84:A4
Certificate issuer: /CN=2995944e84dc37ba6a42d68bb1e2b9a4421e84a4
Certificate serial: 0199C569CE5096A9EDAE8F2EDE8131E61F80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KZWUToTcN7pqQtaLseK5pEIehKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.mft
Manifest number: 16C5
Signing time: Wed 08 Oct 2025 20:01:09 +0000
Manifest this update: Wed 08 Oct 2025 20:01:09 +0000
Manifest next update: Thu 09 Oct 2025 20:01:09 +0000
Files and hashes: 1: 5zGonyGbziYUvusSh8Q5DC8llVk.roa (hash: S1qJmZBpZMGg2baTrfrvnMFHCPji28boUDCTeMahmcM=)
2: Iy-azWAI6KWrOd6xINfWkQK0mmo.roa (hash: WW8+TBzRLpV7fj0dmKJQYyc2cjZjFlGMNCS3c3X42Q8=)
3: KZWUToTcN7pqQtaLseK5pEIehKQ.crl (hash: LxZyE6EaBt3Fq1sJXFVjEktsVYX7jodXMB+8TZRGUqc=)
4: SkUUShcqahf4Ud48xHWiKU08GtI.roa (hash: FRMGmcPu5n4tT7AA3DByB+9obpA4BvNTbGm4L5aAqOY=)
5: k-lfK2Nu0bBTBeFW46-yt6JkICk.roa (hash: muqDHPsC+eweSCrdqAGPB3SXVNwkzBd2weVA2/7oxMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KZWUToTcN7pqQtaLseK5pEIehKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 20:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c5:69:ce:50:96:a9:ed:ae:8f:2e:de:81:31:e6:1f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2995944e84dc37ba6a42d68bb1e2b9a4421e84a4
Validity
Not Before: Oct 8 20:01:09 2025 GMT
Not After : Oct 9 20:01:09 2025 GMT
Subject: CN=fedb1c8044cdeaec00808c9ff118f7da60e9f518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:85:2d:bd:3b:f4:59:c1:08:be:8a:5d:5b:b0:
2a:4c:e5:0a:0e:17:71:b6:3d:3c:07:b4:c7:f0:99:
93:b7:f3:2e:ad:13:38:c0:81:e7:9f:a4:0f:59:f2:
77:10:b2:7b:a2:45:08:74:08:8b:87:1e:7f:b2:98:
53:12:c7:bd:a6:1e:aa:d0:33:41:5e:a6:89:4c:3c:
30:fb:a8:ff:2d:1a:12:73:78:5b:85:9b:eb:0b:ef:
bc:f5:7d:b9:27:5b:5f:3a:c5:3f:53:76:e0:83:4c:
c5:54:0f:b9:67:ad:39:db:1a:90:80:42:20:ed:ae:
a9:1b:8c:97:9b:50:99:36:d4:c2:23:e9:7a:e6:e9:
35:96:77:cb:d0:55:8a:78:91:9f:ae:3c:f0:0a:93:
34:84:a5:20:b8:28:e4:14:40:94:5d:21:f6:35:7a:
8c:dd:47:0c:d4:9a:da:64:2a:8c:e5:97:e4:c5:dd:
19:8a:1b:09:25:10:09:6f:58:c5:05:21:55:21:d5:
80:ee:ed:68:ce:b9:35:9b:c4:04:f5:3f:f7:55:7c:
bf:8a:56:a3:9b:44:ad:9a:17:be:dd:5a:a1:29:da:
74:87:ee:4d:df:5b:cc:54:cd:76:7f:f8:29:e8:d0:
1e:19:67:21:bc:79:2c:3f:01:33:33:b3:3a:e3:b0:
5d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:DB:1C:80:44:CD:EA:EC:00:80:8C:9F:F1:18:F7:DA:60:E9:F5:18
X509v3 Authority Key Identifier:
keyid:29:95:94:4E:84:DC:37:BA:6A:42:D6:8B:B1:E2:B9:A4:42:1E:84:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZWUToTcN7pqQtaLseK5pEIehKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:17:03:00:ab:84:38:e0:31:03:e3:6f:2e:a3:bc:11:1a:44:
d8:8c:c5:1d:24:c4:0b:66:b5:f6:88:7a:1a:6f:74:19:27:93:
50:f1:38:a4:61:47:51:80:df:91:95:9d:1a:d4:3c:5c:4b:91:
ff:ae:6b:1f:a1:81:66:68:c6:23:1f:d4:60:98:cf:2c:46:6c:
6f:27:a9:98:c8:af:d5:0c:ac:7c:66:28:f0:69:21:4c:6b:fc:
ee:1e:f6:66:75:1e:f8:8c:42:1f:a7:28:13:4e:e0:64:3a:6f:
17:02:21:34:6d:b0:cf:a8:18:90:03:58:3e:8d:1d:96:ec:b2:
a5:12:b6:32:b1:59:e2:bf:d5:68:7c:db:82:a2:1a:9d:d7:4c:
70:d9:25:3f:f3:fe:2e:41:d6:86:67:97:b1:b7:dc:7f:8f:0a:
36:5c:b2:7e:62:f8:db:bc:4b:c9:f8:57:e1:c3:87:46:fc:e4:
4b:b5:d7:66:96:9d:3e:1a:e2:ae:89:fe:69:f9:58:de:99:a8:
72:9a:37:f1:c0:28:80:cd:54:78:cd:83:0a:9b:cf:25:6b:71:
04:a2:75:0a:2e:2f:e7:da:db:37:66:10:13:4f:ca:00:e1:aa:
09:69:bb:53:82:9f:58:72:d4:c8:2e:37:59:41:7f:8d:3c:ad:
1d:79:81:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 03:52:58 2025 by rpki-client