Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.mft
File: KwUe8jBg61G_2MeXlfak2vSKOqA.mft (raw, json)
Hash identifier: b6Sk2ex6mzo2MQ1h65OIwro2Frvv5ypVhCeBOdFSkuU=
Subject key identifier: BB:AC:AB:23:06:20:57:D9:75:A4:B5:A6:03:03:A9:8C:82:CD:06:B7
Authority key identifier: 2B:05:1E:F2:30:60:EB:51:BF:D8:C7:97:95:F6:A4:DA:F4:8A:3A:A0
Certificate issuer: /CN=2b051ef23060eb51bfd8c79795f6a4daf48a3aa0
Certificate serial: 019A1B06B16A0B7EC4B14E39BE4E03F34825
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KwUe8jBg61G_2MeXlfak2vSKOqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.mft
Manifest number: 0B25
Signing time: Sat 25 Oct 2025 11:00:14 +0000
Manifest this update: Sat 25 Oct 2025 11:00:14 +0000
Manifest next update: Sun 26 Oct 2025 11:00:14 +0000
Files and hashes: 1: HJo0Q6u7BHPf7uGGtOh1Cm5Rgr4.roa (hash: KO4VFFsczF64WfUlIBm0orog3QT9gcqLspybHYHoxis=)
2: KwUe8jBg61G_2MeXlfak2vSKOqA.crl (hash: MI1OsC25bVPmjmz8lZ8028BeK4QFTjoQGXARqgBS4Zs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KwUe8jBg61G_2MeXlfak2vSKOqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 11:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1b:06:b1:6a:0b:7e:c4:b1:4e:39:be:4e:03:f3:48:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b051ef23060eb51bfd8c79795f6a4daf48a3aa0
Validity
Not Before: Oct 25 11:00:14 2025 GMT
Not After : Oct 26 11:00:14 2025 GMT
Subject: CN=bbacab23062057d975a4b5a60303a98c82cd06b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7c:10:bf:0e:12:5c:d6:46:a1:ba:b8:d8:a2:
b0:dd:22:3e:3d:ad:d3:ea:91:f4:ca:f2:4a:fb:00:
31:44:3e:bd:6c:65:a2:b8:8f:88:95:ea:7e:29:a7:
c4:3e:4f:2a:45:77:bc:b0:ac:69:f0:76:2e:08:ec:
59:6a:28:b1:df:2f:9f:df:27:9a:88:f5:dd:d8:ae:
c9:58:b8:a3:bf:1f:ab:65:84:2b:0a:8e:11:95:42:
fa:d5:4a:0a:4a:79:ac:a3:83:09:e6:85:88:75:5c:
38:43:61:82:56:85:28:23:aa:b5:91:d7:1c:7c:c7:
63:b4:d6:d6:04:4d:1e:57:e0:17:04:5c:27:06:f0:
40:ea:7c:5c:81:43:85:61:ca:2e:d6:87:e9:54:00:
8b:19:d6:0e:4e:e9:0a:59:14:cc:27:2c:83:af:ad:
ae:9d:10:4b:7d:52:c2:4d:b4:54:77:9b:9d:64:d7:
3a:69:ab:e1:e9:78:4c:e6:90:e2:43:28:da:34:b2:
c7:63:10:bb:4e:fa:7c:91:47:75:c5:b2:fd:aa:41:
b4:9b:74:dc:23:2d:f8:08:aa:13:08:25:7c:d6:4a:
cd:d6:f5:e3:75:b5:1c:1f:93:5d:62:13:20:c2:1c:
97:30:a0:4c:a7:ea:83:28:df:a0:c4:6d:98:46:09:
ae:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:AC:AB:23:06:20:57:D9:75:A4:B5:A6:03:03:A9:8C:82:CD:06:B7
X509v3 Authority Key Identifier:
keyid:2B:05:1E:F2:30:60:EB:51:BF:D8:C7:97:95:F6:A4:DA:F4:8A:3A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwUe8jBg61G_2MeXlfak2vSKOqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:a4:b5:7d:cc:30:be:78:13:b0:94:18:b6:18:e9:18:5a:a2:
6c:00:f1:27:d2:b8:7c:b2:2a:2a:5f:21:90:ac:c2:c8:77:a5:
b5:af:9e:87:41:e0:45:5e:70:e0:45:10:15:3c:04:70:f3:79:
06:6a:f5:53:c5:0c:f4:2f:ac:3f:2b:f6:f3:c3:1b:c6:9e:6c:
0a:1a:2d:2f:d8:89:e1:3b:94:04:ff:79:c6:04:d4:0f:37:a2:
88:c8:ab:99:06:fd:4c:34:4b:0f:1f:c2:87:0e:0a:56:6e:ca:
5c:88:af:b5:ae:17:c2:0e:c8:f3:92:0d:11:85:c0:1d:dc:79:
51:1b:2c:e8:25:94:d6:02:79:72:a1:f9:40:76:3b:7e:4d:8a:
6b:43:4d:78:40:02:8b:d5:69:42:6d:d9:cd:2f:46:41:13:c4:
67:5a:31:8c:39:1b:38:74:57:62:2c:8b:df:8d:9c:c2:53:ee:
c7:57:29:8b:eb:b2:28:92:79:4d:1a:cc:e8:56:21:f9:bc:9d:
ae:ac:89:76:04:ad:9b:cd:6b:53:2b:cd:2b:c4:61:9e:00:18:
5f:8d:e4:f2:a4:21:aa:e0:31:3e:5b:6b:b6:eb:d8:3b:fa:8a:
4f:a0:8b:12:a6:05:e0:23:4d:d4:dd:b8:f0:89:ec:15:05:88:
3b:98:ac:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 20:01:16 2025 by rpki-client