Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.mft
File: KwviJiMNQJnO6gpKbPTti5AgE1A.mft (raw, json)
Hash identifier: D7IJHQp2PwjFfSiOR+7npMLw/yGh5KsRB3MBJCgs6mc=
Subject key identifier: C7:E2:A8:83:00:85:2B:8A:19:E0:4B:26:9C:0D:A4:0E:9F:00:53:14
Authority key identifier: 2B:0B:E2:26:23:0D:40:99:CE:EA:0A:4A:6C:F4:ED:8B:90:20:13:50
Certificate issuer: /CN=2b0be226230d4099ceea0a4a6cf4ed8b90201350
Certificate serial: 019A1CBFD4683ADB18ECE114622ADD629E4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KwviJiMNQJnO6gpKbPTti5AgE1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.mft
Manifest number: 0B00
Signing time: Sat 25 Oct 2025 19:02:05 +0000
Manifest this update: Sat 25 Oct 2025 19:02:05 +0000
Manifest next update: Sun 26 Oct 2025 19:02:05 +0000
Files and hashes: 1: 1-QazRIRPg7ctmvpySXX90ZpNvVs.roa (hash: /R5NiKNiflnBoSvWiTSdWTvgCke/+xxLiQtRLSd2PN8=)
2: KwviJiMNQJnO6gpKbPTti5AgE1A.crl (hash: WH4Y5UTFFtBZ/UqwUrfqXxygUjJMD/qziTIVsOc+Y7Q=)
3: qi0ZqRW6bWCGCBOudyRc_ZU33PM.roa (hash: Y/jI82xosnyON1Rhfs7vCWE2E/8RN3XifMYZrXwc2DQ=)
4: st8xnj4jJi6Xuwa7MiNbU3-F0wo.roa (hash: H2Z+tAqzPpLr9TIzWhq27NXaGhJV330iUQnoQkRKlKo=)
5: ymk3s2uYAjIifXFebx0Gs2GCpZg.roa (hash: 1iZB8mSVVI0xWBNNoWKTn+58QXVIuSn2YESYam7CY+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/KwviJiMNQJnO6gpKbPTti5AgE1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:bf:d4:68:3a:db:18:ec:e1:14:62:2a:dd:62:9e:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b0be226230d4099ceea0a4a6cf4ed8b90201350
Validity
Not Before: Oct 25 19:02:05 2025 GMT
Not After : Oct 26 19:02:05 2025 GMT
Subject: CN=c7e2a88300852b8a19e04b269c0da40e9f005314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4e:fb:e8:4c:b3:b5:1f:61:41:45:f3:53:9e:
54:7d:c6:44:c7:6e:4a:d6:ab:ac:c9:de:3c:90:47:
f6:17:d7:02:1b:ad:2b:a8:6e:fb:df:e7:2d:6a:45:
53:12:38:c8:bf:02:d7:d2:2c:43:84:87:1f:6d:d2:
48:e6:9d:5f:d5:76:8c:38:38:34:a9:fc:4c:75:65:
4b:36:31:44:ab:a3:08:59:fa:e2:44:c2:07:88:bd:
c6:3f:e9:5a:c2:35:50:92:9a:8d:3f:e6:19:f4:31:
ea:ca:8d:fe:45:f2:31:6d:49:5a:f3:bc:da:ef:ab:
8e:3d:9b:4a:7e:a3:6e:9d:0c:98:95:f0:b9:07:7c:
f7:40:4d:d5:a2:fc:f1:f2:f8:4e:73:50:3d:bf:84:
10:54:58:cc:4b:09:09:f8:21:40:05:f9:15:a9:6d:
f4:7c:ba:af:b1:2d:f5:b7:d2:ee:29:2b:76:9a:4b:
f5:d2:b7:4c:7c:fc:1c:c6:78:d1:89:b6:b6:8d:2c:
41:bc:6c:1f:45:95:b4:fa:82:ba:58:0d:3a:b2:0a:
5f:3a:60:bb:31:24:40:f1:96:d7:30:24:fd:1a:a8:
b0:6c:2c:1a:93:9c:1d:ca:42:aa:0d:55:09:45:37:
e3:f4:2e:ed:5c:f2:2f:1f:06:ed:cf:40:1f:d3:ba:
63:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E2:A8:83:00:85:2B:8A:19:E0:4B:26:9C:0D:A4:0E:9F:00:53:14
X509v3 Authority Key Identifier:
keyid:2B:0B:E2:26:23:0D:40:99:CE:EA:0A:4A:6C:F4:ED:8B:90:20:13:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwviJiMNQJnO6gpKbPTti5AgE1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:4c:3c:96:36:e5:7d:d3:1e:8f:11:32:0f:59:eb:9d:dd:3e:
62:83:a7:60:b8:9a:60:30:2c:8c:76:87:88:9c:09:1b:ef:e4:
9b:20:da:35:ec:f7:40:92:51:0c:46:0e:ee:b1:50:40:eb:bd:
95:c3:e1:42:27:30:ae:e7:b2:94:9f:2d:2d:da:b0:47:66:32:
a4:16:5d:dc:2f:9c:85:a2:7c:00:64:cc:a0:25:ab:f7:e2:46:
38:a5:b7:65:4b:3f:34:57:fc:30:15:31:7f:65:19:24:4a:85:
05:5c:86:76:66:fc:5b:88:fd:ac:46:c2:a6:a8:61:6c:50:2a:
15:cb:88:26:96:7a:a7:d8:3d:6f:86:d0:67:69:c1:c9:03:51:
4a:46:a1:45:dc:10:6f:c8:8c:13:aa:b1:1d:1c:32:4c:b9:9a:
24:f0:b0:d7:8a:f1:ef:a9:02:26:1e:9a:e6:e1:1c:99:23:04:
6f:eb:4e:bf:c2:f0:6c:c4:2d:4b:a2:15:27:8c:4b:dc:4e:0e:
1d:42:59:6c:3c:af:3b:d4:43:2f:af:87:de:d1:f9:5c:57:a3:
0e:e1:e4:d3:64:73:a7:a1:be:60:85:3d:1c:75:f2:43:c3:52:
30:8f:50:26:48:9b:6a:b0:7e:4d:76:46:84:86:b8:86:ff:47:
cf:75:81:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 04:28:46 2025 by rpki-client