Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.mft
File: kWAz3VV0R5Zb2u-LRySl5308Ba4.mft (raw, json)
Hash identifier: zsugyXdsBdcI7ljKOvXt3PN3/7qA2fr9HeGkyHyxCF4=
Subject key identifier: 77:DF:81:1E:99:FF:D5:DA:04:39:F9:09:70:B8:5D:47:1A:AB:0D:4B
Authority key identifier: 91:60:33:DD:55:74:47:96:5B:DA:EF:8B:47:24:A5:E7:7D:3C:05:AE
Certificate issuer: /CN=916033dd557447965bdaef8b4724a5e77d3c05ae
Certificate serial: 019A50AB96FCAE14CFD90AFF7A9AEAF6B368
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kWAz3VV0R5Zb2u-LRySl5308Ba4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.mft
Manifest number: 0977
Signing time: Tue 04 Nov 2025 21:00:13 +0000
Manifest this update: Tue 04 Nov 2025 21:00:13 +0000
Manifest next update: Wed 05 Nov 2025 21:00:13 +0000
Files and hashes: 1: H9X8h-Jo2ED93QCRffXvwdj9Wvo.roa (hash: 12jQO6dfQb4ZiHwe3922CE3yIwiEA5iTvy+mpgxA/Kk=)
2: kWAz3VV0R5Zb2u-LRySl5308Ba4.crl (hash: a95LDVQgyJ1jA//HZ9HhLq8d0wlfvwTti0qhZxO2xWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kWAz3VV0R5Zb2u-LRySl5308Ba4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:ab:96:fc:ae:14:cf:d9:0a:ff:7a:9a:ea:f6:b3:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=916033dd557447965bdaef8b4724a5e77d3c05ae
Validity
Not Before: Nov 4 21:00:13 2025 GMT
Not After : Nov 5 21:00:13 2025 GMT
Subject: CN=77df811e99ffd5da0439f90970b85d471aab0d4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:20:db:80:b3:75:39:68:b9:fa:4b:36:dd:2a:
e9:13:85:e6:34:22:0a:bc:52:0b:54:3b:6f:66:f1:
f9:f9:05:49:79:5f:6d:7e:80:c0:b6:8f:74:a5:c5:
00:9f:bd:bd:36:36:02:77:71:02:e5:0f:5d:62:ee:
2c:2e:5e:45:b8:de:f3:53:95:de:ea:2d:e3:71:b5:
d1:94:c4:71:7b:7a:f9:25:67:df:fe:81:e4:e3:d9:
2b:b6:3d:d8:e0:2e:00:1e:29:be:c1:eb:0b:8b:ee:
b6:f6:47:4a:f8:13:15:df:8e:99:73:e0:d7:9d:d7:
64:20:20:04:26:87:3c:1f:9c:03:e7:4a:aa:46:31:
ec:91:2e:cb:41:ac:73:20:09:b3:38:ac:10:5c:b6:
a0:a1:38:33:53:72:86:86:a3:65:cb:4c:99:a5:00:
1a:fb:71:c0:a0:ba:ab:e3:25:a7:da:35:7b:89:9a:
93:29:6f:81:6e:24:b2:62:ed:ea:15:17:ef:60:ac:
dd:8e:38:12:3a:07:3a:02:35:7c:7c:df:4f:f8:f9:
f8:84:ee:40:53:e7:73:a8:8a:fa:73:da:44:e5:10:
28:fa:cb:99:c3:ac:8d:3d:a9:64:53:14:1a:5f:52:
24:b2:14:5a:e0:b4:9a:6a:a4:82:f3:d3:8a:38:fb:
a4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:DF:81:1E:99:FF:D5:DA:04:39:F9:09:70:B8:5D:47:1A:AB:0D:4B
X509v3 Authority Key Identifier:
keyid:91:60:33:DD:55:74:47:96:5B:DA:EF:8B:47:24:A5:E7:7D:3C:05:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kWAz3VV0R5Zb2u-LRySl5308Ba4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:83:8b:68:0c:d8:3e:75:af:de:f8:f9:23:e0:26:71:fd:3f:
64:fb:68:62:b8:7d:19:5a:df:4a:96:c3:28:49:1d:5a:cc:68:
4d:b5:cd:9f:de:23:af:af:ad:9a:d7:2d:1e:5d:db:a6:a9:43:
f4:67:f7:3e:bd:7c:85:a1:77:15:63:5a:2c:9b:b6:80:14:b3:
8f:1f:ef:6c:55:4e:2a:3d:ec:b5:66:21:11:d2:f6:fd:5a:92:
28:af:96:e6:aa:02:1a:4b:f7:eb:fa:e6:12:91:47:55:7b:c6:
a1:29:b4:fb:70:9d:03:6f:60:46:df:3b:d3:dc:34:37:e4:19:
a1:cb:cd:e7:a9:06:32:52:5f:bc:bc:44:23:9a:f4:2d:57:7d:
ed:fd:ce:50:c6:53:e4:86:fe:cd:f9:01:b8:1a:89:99:00:6b:
5c:96:83:bc:c8:f3:77:0d:3b:61:ee:10:99:1c:24:e9:ac:0b:
bf:35:7f:36:90:16:d6:44:b5:6e:14:04:27:e1:e1:fb:66:ee:
b3:7b:29:e7:cb:9a:55:f2:ad:06:cb:b0:b1:e1:99:bd:01:99:
ed:e1:ef:9b:d7:c4:29:ad:93:ee:b7:6b:c5:1c:6c:7f:82:49:
02:3b:4a:dc:ce:e6:ff:62:65:d8:2b:68:10:a5:a2:02:40:89:
70:4c:12:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:42:15 2025 by rpki-client