Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/b35c9a-8495-4169-8c50-3692f7841619/1/kNWCLTx7v3q1QE3aiP2dqSE43iE.mft
File: kNWCLTx7v3q1QE3aiP2dqSE43iE.mft (raw, json)
Hash identifier: MXCEKoHSv5rMm+nyUQfHiDsZeR0SeL2gXpOWku3Vc30=
Subject key identifier: 26:DD:E3:0E:34:55:49:70:8E:5C:28:77:11:57:28:BB:CC:41:1E:53
Authority key identifier: 90:D5:82:2D:3C:7B:BF:7A:B5:40:4D:DA:88:FD:9D:A9:21:38:DE:21
Certificate issuer: /CN=90d5822d3c7bbf7ab5404dda88fd9da92138de21
Certificate serial: 019A72264BAC8257F810FD2EBD2A5665CAD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kNWCLTx7v3q1QE3aiP2dqSE43iE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/b35c9a-8495-4169-8c50-3692f7841619/1/kNWCLTx7v3q1QE3aiP2dqSE43iE.mft
Manifest number: 07DC
Signing time: Tue 11 Nov 2025 09:01:43 +0000
Manifest this update: Tue 11 Nov 2025 09:01:43 +0000
Manifest next update: Wed 12 Nov 2025 09:01:43 +0000
Files and hashes: 1: kNWCLTx7v3q1QE3aiP2dqSE43iE.crl (hash: 9S+pRkT1Xy6REK8UM2kCPvPORn+5wWxux2Uk8choFj4=)
2: wd_UoJqlC6X8mKMfS7O-YEGVRuo.roa (hash: xFPdoUnkz2JIkzmQ5taq1hUGjTFKvPuKX93R37CXGQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/b35c9a-8495-4169-8c50-3692f7841619/1/kNWCLTx7v3q1QE3aiP2dqSE43iE.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/b35c9a-8495-4169-8c50-3692f7841619/1/kNWCLTx7v3q1QE3aiP2dqSE43iE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kNWCLTx7v3q1QE3aiP2dqSE43iE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:4b:ac:82:57:f8:10:fd:2e:bd:2a:56:65:ca:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90d5822d3c7bbf7ab5404dda88fd9da92138de21
Validity
Not Before: Nov 11 09:01:43 2025 GMT
Not After : Nov 12 09:01:43 2025 GMT
Subject: CN=26dde30e345549708e5c2877115728bbcc411e53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:66:a8:da:5f:9e:d5:b7:8a:78:b7:32:23:74:
6b:cf:17:79:09:d5:cb:8b:7b:4f:88:91:d2:19:31:
29:8f:09:bc:39:de:b8:90:8a:db:0a:24:af:8d:1e:
e8:50:41:1c:ed:d8:31:c3:13:33:a2:4d:fd:0b:2d:
60:f7:53:0a:8f:68:8c:72:c6:92:9e:22:1d:42:6b:
e8:f3:be:71:1d:e7:01:bf:4d:73:f3:26:b4:68:43:
1b:56:ed:d0:5e:03:81:5b:5c:09:2c:31:1c:33:52:
3d:5b:fd:07:e2:e1:39:4e:cc:c9:56:50:10:40:50:
a2:47:71:39:5d:b2:34:01:b7:db:98:8a:d6:54:d6:
8f:fd:9e:5e:6f:99:19:13:b2:d9:91:b6:ee:50:f1:
7b:47:06:38:b0:8b:f4:00:b7:10:8f:fd:fe:84:cc:
86:e1:4a:cd:f3:5b:a2:66:6a:94:1c:22:f7:47:00:
54:60:9a:66:9f:35:eb:a6:d3:ef:2f:6e:27:e0:de:
5a:a6:40:16:b4:39:2b:57:b4:a3:b3:e6:93:54:a5:
f2:b0:47:c0:b6:59:70:d5:2c:a7:b3:23:33:55:ea:
47:e8:01:55:51:c1:bb:53:ef:38:9b:17:62:7e:c2:
a7:7f:51:f4:16:76:29:f7:92:90:c6:d5:d5:4b:c1:
4f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:DD:E3:0E:34:55:49:70:8E:5C:28:77:11:57:28:BB:CC:41:1E:53
X509v3 Authority Key Identifier:
keyid:90:D5:82:2D:3C:7B:BF:7A:B5:40:4D:DA:88:FD:9D:A9:21:38:DE:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kNWCLTx7v3q1QE3aiP2dqSE43iE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b35c9a-8495-4169-8c50-3692f7841619/1/kNWCLTx7v3q1QE3aiP2dqSE43iE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b35c9a-8495-4169-8c50-3692f7841619/1/kNWCLTx7v3q1QE3aiP2dqSE43iE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:cc:6e:b0:9c:d0:60:e5:c6:ed:f4:25:8c:12:bf:94:24:ac:
bb:c8:02:d7:87:c9:cf:3c:dc:5c:eb:59:3f:bf:88:da:17:54:
52:52:ec:04:fb:ef:d6:b0:67:73:4d:e2:4e:77:94:bd:21:c2:
73:99:c9:4f:d2:25:74:2c:bc:43:b2:aa:70:93:5c:5d:ef:04:
92:0e:42:d1:f2:e9:e6:4a:0a:3d:96:de:7c:47:80:0e:1a:24:
50:e0:cd:95:f9:a5:2c:3e:22:88:13:dd:8c:84:cf:f1:59:cc:
4d:4f:d3:48:66:60:b1:e9:3c:bd:a5:65:d8:bd:40:41:0a:2e:
f8:77:61:b8:b8:1a:72:5e:cd:26:dd:b9:0b:4e:10:6a:b2:43:
ef:a0:ed:bc:09:c2:30:73:7c:4d:46:69:4a:76:99:71:a2:ec:
99:ad:29:87:9f:e5:ea:b2:3e:44:39:85:fd:ce:fa:8a:58:3a:
92:2a:91:38:0f:a2:a8:18:88:c2:7d:74:49:28:5b:41:ed:7e:
15:d7:07:f9:55:a1:78:c8:b2:d6:b5:85:ed:79:9e:4b:60:7c:
28:5d:24:d3:84:57:4a:d8:1f:00:65:9d:6a:1e:85:51:6f:39:
b6:3e:6f:b7:3d:e0:64:67:aa:bd:bc:a0:2c:87:67:55:37:08:
80:e0:f5:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:14 2025 by rpki-client