Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.mft
File: kwy6S0MwS1HEvd-9QzF4KtkRAso.mft (raw, json)
Hash identifier: D0QgfRYKU1mdNZaNgYlLhJWs4NJkMtz2eLLUPvfnVY0=
Subject key identifier: 2B:7C:AF:36:B8:C9:D5:2B:69:43:48:2E:90:46:84:97:96:9D:E5:19
Authority key identifier: 93:0C:BA:4B:43:30:4B:51:C4:BD:DF:BD:43:31:78:2A:D9:11:02:CA
Certificate issuer: /CN=930cba4b43304b51c4bddfbd4331782ad91102ca
Certificate serial: 019933B6B14DDF9811BF0483B6D502564CC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwy6S0MwS1HEvd-9QzF4KtkRAso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.mft
Manifest number: 0393
Signing time: Wed 10 Sep 2025 13:00:34 +0000
Manifest this update: Wed 10 Sep 2025 13:00:34 +0000
Manifest next update: Thu 11 Sep 2025 13:00:34 +0000
Files and hashes: 1: kwy6S0MwS1HEvd-9QzF4KtkRAso.crl (hash: TMAw+3xM8yjTJYv5n04ePI9F8nTjJbSaZ6292TidrNQ=)
2: uxtuL63qPRDpKVk1ikR7XA0jVWo.roa (hash: MOBvDlpT4Tx/Y9+52ugnxgyKuM5ZQrSPEm8NwRXVQVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwy6S0MwS1HEvd-9QzF4KtkRAso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:b6:b1:4d:df:98:11:bf:04:83:b6:d5:02:56:4c:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=930cba4b43304b51c4bddfbd4331782ad91102ca
Validity
Not Before: Sep 10 13:00:34 2025 GMT
Not After : Sep 11 13:00:34 2025 GMT
Subject: CN=2b7caf36b8c9d52b6943482e90468497969de519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ec:cb:33:19:ae:89:aa:55:e9:e2:d9:82:d4:
44:f4:8f:fd:68:06:9b:6b:8b:f7:55:82:92:52:dc:
26:1d:6d:11:a0:d0:7b:1d:07:39:7b:f0:84:4c:ca:
cc:9d:d2:90:17:13:a8:3a:41:76:cc:19:fc:d1:21:
96:4f:7b:ae:81:82:20:a7:18:a1:76:03:6a:d1:ba:
bb:e9:8f:9c:81:39:47:a9:91:7c:0e:32:7f:9f:cf:
d7:83:43:c8:c7:2e:2c:94:c7:cf:f9:e8:3c:b5:ad:
b9:8e:3e:fb:b8:8b:f9:dd:85:ec:63:fd:e1:63:ca:
09:c0:6b:ba:96:9b:3c:79:1d:9b:97:07:4f:ad:e0:
99:81:b1:91:af:c1:88:ff:b0:e1:f4:f5:a5:3c:59:
d8:17:76:34:bf:4e:5a:8d:01:3a:66:c4:4e:ab:7c:
b2:95:f0:37:e5:b2:ad:00:8e:3c:a8:e4:12:23:08:
70:70:63:eb:81:44:8b:9f:b5:43:8e:15:c0:43:00:
5e:1a:13:c9:98:15:bb:5e:a6:aa:60:48:54:7e:c4:
c0:f9:2b:21:07:31:08:e9:b5:d6:ac:9a:46:77:08:
1e:f5:73:49:bf:89:ef:0e:75:ac:11:a8:9a:08:aa:
eb:bc:7d:f0:52:72:89:2c:04:a7:ed:1b:24:2b:b5:
95:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:7C:AF:36:B8:C9:D5:2B:69:43:48:2E:90:46:84:97:96:9D:E5:19
X509v3 Authority Key Identifier:
keyid:93:0C:BA:4B:43:30:4B:51:C4:BD:DF:BD:43:31:78:2A:D9:11:02:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwy6S0MwS1HEvd-9QzF4KtkRAso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:f4:2a:c5:ec:36:95:98:3d:80:e3:ed:a1:0b:b3:ad:a8:23:
5b:16:33:82:54:71:1b:34:a4:ce:67:06:86:da:b4:34:ce:0d:
6d:96:21:76:00:38:cf:93:4e:95:b8:52:0b:76:0a:c1:e8:3a:
b8:ca:db:21:76:af:eb:3f:00:ed:76:19:76:b2:07:29:f4:c9:
a7:cd:57:e8:42:41:30:9a:f2:41:00:f0:e0:ff:bf:a6:92:04:
93:83:ae:d1:1a:89:04:3c:9e:fc:c3:33:f0:c9:e1:5b:69:c0:
21:92:b6:8f:f9:90:f5:65:61:d3:98:62:0d:5f:74:2b:02:56:
0c:f6:e0:c7:aa:1d:bb:82:c1:62:f1:70:bc:58:0e:d9:de:2c:
4e:59:2f:b9:a4:b8:97:d9:a6:f0:ae:fd:49:19:c1:bd:dd:2b:
76:c7:c3:f3:f6:3a:30:18:41:48:c1:c0:b1:d0:bd:f3:ba:f4:
f7:0d:a6:18:5d:91:b4:32:e3:b8:c5:69:a8:03:4c:7a:79:99:
48:26:66:65:81:36:30:a4:31:23:e3:1f:14:67:ff:46:87:ea:
6b:6c:e9:22:8d:bb:0c:fa:a2:84:44:9a:77:94:15:b9:bc:5c:
59:58:8f:ab:18:77:ff:d9:04:68:5b:40:54:cc:79:4d:5c:a1:
0b:d9:bd:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 14:28:04 2025 by rpki-client