Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.mft
File: KAWFe6e9XcggxhYmxjNJ47f6p9M.mft (raw, json)
Hash identifier: alwpdYm8AOYKtA3jc3hJnVkwSz8iUzwG4GAaJt31zmU=
Subject key identifier: 34:50:0D:03:D8:75:3C:F7:12:0A:26:08:92:C2:19:58:4C:2E:B5:10
Authority key identifier: 28:05:85:7B:A7:BD:5D:C8:20:C6:16:26:C6:33:49:E3:B7:FA:A7:D3
Certificate issuer: /CN=2805857ba7bd5dc820c61626c63349e3b7faa7d3
Certificate serial: 019A7149F04CA1F48DC2E0EC16EB2271130C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KAWFe6e9XcggxhYmxjNJ47f6p9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.mft
Manifest number: 0FB2
Signing time: Tue 11 Nov 2025 05:01:02 +0000
Manifest this update: Tue 11 Nov 2025 05:01:02 +0000
Manifest next update: Wed 12 Nov 2025 05:01:02 +0000
Files and hashes: 1: KAWFe6e9XcggxhYmxjNJ47f6p9M.crl (hash: zUAyHX1O7v2hk3HtjxEIEN/id97HlZ5YgIm3t1Ft4ug=)
2: QKHWtvbYs2bFm7Yqz1D-noGUUCg.roa (hash: ZmlSUpfzL4PQUwk4jtXCzAOTz3/AO/19cZEbT2JXoOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/KAWFe6e9XcggxhYmxjNJ47f6p9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:f0:4c:a1:f4:8d:c2:e0:ec:16:eb:22:71:13:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2805857ba7bd5dc820c61626c63349e3b7faa7d3
Validity
Not Before: Nov 11 05:01:02 2025 GMT
Not After : Nov 12 05:01:02 2025 GMT
Subject: CN=34500d03d8753cf7120a260892c219584c2eb510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fc:48:e3:45:17:3f:12:74:3b:11:1d:26:11:
d9:db:84:5a:1e:40:26:aa:2c:68:f6:51:de:de:55:
b1:10:65:7b:92:3f:9b:3f:64:fc:71:fb:4f:5e:4b:
05:2c:ff:28:c0:67:23:34:98:7d:b8:68:48:68:c8:
19:9c:7a:61:53:4f:91:01:d4:f0:6c:b8:73:91:c5:
80:e0:e2:fa:1e:cf:cc:8b:24:37:ca:8b:ae:83:ed:
83:3f:58:5f:94:31:4a:0f:25:26:66:d4:a0:0f:88:
df:f8:c8:97:f2:f0:8d:65:32:5a:d3:57:e5:fb:2e:
fc:94:90:c9:5f:f2:98:6a:bf:37:e8:27:6a:d8:e7:
ee:21:f5:05:3a:7f:39:35:16:45:6d:51:b2:35:bf:
d1:8d:78:00:60:e8:d7:f4:13:6d:d6:bc:c8:dd:b8:
2b:7d:13:ff:45:7d:44:c4:cc:67:41:1c:62:51:a4:
b0:23:e7:2b:f6:21:34:3e:65:69:fb:90:79:70:2a:
b0:5c:1a:db:ae:d5:29:01:fa:2f:d8:79:24:1b:d0:
c8:23:dd:b7:79:92:4b:a2:6a:4f:e8:c0:c2:17:2f:
be:b3:37:a6:ec:ff:43:c6:ee:f4:cb:c9:31:1a:8b:
98:1d:3b:6e:fd:dd:aa:20:95:bb:c3:57:9a:bd:b9:
fb:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:50:0D:03:D8:75:3C:F7:12:0A:26:08:92:C2:19:58:4C:2E:B5:10
X509v3 Authority Key Identifier:
keyid:28:05:85:7B:A7:BD:5D:C8:20:C6:16:26:C6:33:49:E3:B7:FA:A7:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAWFe6e9XcggxhYmxjNJ47f6p9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:e0:82:4b:a2:ee:77:a3:ce:5f:92:48:9e:32:ba:d7:60:f9:
7e:67:f0:02:68:46:31:18:00:25:53:11:94:87:12:26:56:c4:
e4:45:c2:d9:81:4b:2b:47:d3:a3:d5:c5:b3:82:c7:e6:0b:e3:
54:2c:2b:95:f1:d2:1c:ea:42:88:e2:03:06:b8:b4:db:20:1e:
af:97:38:3f:0c:57:8b:4f:81:be:74:92:c8:c4:e0:e4:9b:22:
26:f6:a4:b4:49:7d:de:a7:89:9a:bf:90:6a:4b:71:0e:da:3d:
0f:e1:6b:ac:7f:0a:41:94:2a:15:cc:ef:85:bc:b6:37:68:1b:
45:72:1b:10:aa:78:3b:a8:93:0c:28:7a:ce:e5:85:5e:5f:99:
c7:0d:28:a0:3e:a7:91:15:7a:f0:6f:e2:12:38:2d:a7:b8:9a:
c0:c7:d6:a6:0e:df:0e:ef:59:d8:26:e9:0d:c0:40:3e:7a:6b:
77:43:f6:fc:7d:84:f8:75:19:9b:c6:ac:d2:55:35:36:71:8a:
eb:1a:20:f7:3a:4b:d5:97:69:de:43:39:42:a5:8b:99:82:14:
ca:d9:ef:e1:a4:96:84:35:7d:95:c3:17:3b:f9:dd:87:f3:b6:
56:a7:12:37:cd:f8:56:73:e8:47:ab:c3:51:51:35:31:6f:5a:
d8:d7:d1:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:16:55 2025 by rpki-client