Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft
File: kwpXLBbQxE93Zlh9kth4ujBUHR4.mft (raw, json)
Hash identifier: 280hbcjgOiAvZKYWjPN8oiXwiCc6AltmcivBonK3/Lo=
Subject key identifier: 17:E3:9B:7B:AA:6A:5F:43:B2:8E:69:43:6A:D6:1C:F0:12:3F:24:B8
Authority key identifier: 93:0A:57:2C:16:D0:C4:4F:77:66:58:7D:92:D8:78:BA:30:54:1D:1E
Certificate issuer: /CN=930a572c16d0c44f7766587d92d878ba30541d1e
Certificate serial: 019A228964F2CEAC0C993221290DF901B314
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwpXLBbQxE93Zlh9kth4ujBUHR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft
Manifest number: 08CC
Signing time: Sun 26 Oct 2025 22:00:20 +0000
Manifest this update: Sun 26 Oct 2025 22:00:20 +0000
Manifest next update: Mon 27 Oct 2025 22:00:20 +0000
Files and hashes: 1: dDvbinURbnBhghcDsCWr8pNjL-Q.roa (hash: hUZbMhthMOHDXoT8VJO840vVSWFg65GOQ1Sk4GTZvhs=)
2: kwpXLBbQxE93Zlh9kth4ujBUHR4.crl (hash: k1TENOq5WuGe6nC5/DNRq2YkSLHir1GVM1avj7N30Uc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwpXLBbQxE93Zlh9kth4ujBUHR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:89:64:f2:ce:ac:0c:99:32:21:29:0d:f9:01:b3:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=930a572c16d0c44f7766587d92d878ba30541d1e
Validity
Not Before: Oct 26 22:00:20 2025 GMT
Not After : Oct 27 22:00:20 2025 GMT
Subject: CN=17e39b7baa6a5f43b28e69436ad61cf0123f24b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:38:dc:42:d2:cd:25:a5:2b:b7:80:a1:94:22:
6f:20:64:a6:46:15:7f:22:fd:98:e9:e8:58:74:be:
42:ff:09:fd:e7:a8:32:bb:cf:99:99:92:0d:94:37:
49:27:8b:e5:3d:72:b4:c3:5b:2a:0e:68:79:ca:c6:
be:fc:3e:8c:6d:10:9a:ec:de:6f:8d:0a:34:25:ef:
8f:d9:59:9d:f2:b9:ae:f0:19:8f:83:d6:ee:69:e1:
bb:62:f7:5c:40:64:8a:56:97:e8:c5:96:f0:7e:e8:
cb:65:d2:85:21:8b:31:e9:9f:e4:2f:ab:91:49:e2:
04:2c:cc:ed:e3:1d:25:90:b6:eb:a4:df:ad:5c:a8:
7b:02:57:68:55:ed:dc:46:a6:d9:f8:10:da:bf:cc:
90:5f:63:6b:46:c3:a1:70:0a:0d:39:a0:88:c8:88:
d1:e0:53:98:14:16:14:34:58:f3:c7:cc:fd:ab:2f:
00:e7:5c:f5:e5:0d:d8:08:4b:9b:e5:9e:90:a4:89:
ff:c5:f7:b5:6c:f1:8d:3a:91:7c:83:6f:e3:81:2e:
b7:00:a3:36:87:41:e5:74:5d:ed:a9:46:d7:97:51:
e2:90:c6:84:dc:85:aa:f3:a5:f4:a3:77:01:ae:d7:
22:9d:6d:19:b5:5b:cd:27:28:7d:02:7a:1c:12:e1:
c8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E3:9B:7B:AA:6A:5F:43:B2:8E:69:43:6A:D6:1C:F0:12:3F:24:B8
X509v3 Authority Key Identifier:
keyid:93:0A:57:2C:16:D0:C4:4F:77:66:58:7D:92:D8:78:BA:30:54:1D:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwpXLBbQxE93Zlh9kth4ujBUHR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:85:66:0c:31:f6:6c:72:0b:2f:89:1d:68:f4:2c:a9:b2:71:
94:9d:92:8d:56:f3:da:4c:bd:71:60:c8:1b:73:8c:d6:20:39:
40:0b:bb:28:91:40:30:ab:18:a5:cf:d4:fc:89:34:19:c0:33:
58:0c:86:fb:73:38:fa:06:4d:9d:88:b3:ac:d0:85:41:40:0f:
8e:e8:d4:d7:62:31:50:7b:ab:a5:22:2a:5d:e6:1f:4e:d0:96:
7f:9c:39:d3:7d:c3:c9:ea:03:e4:b8:c5:22:28:bd:b4:9b:d3:
df:4c:c9:fc:69:f0:3c:32:c8:c3:c3:c3:4a:9d:d5:ee:e9:f1:
c8:c7:3a:f5:85:eb:1a:5b:de:c2:d7:f2:11:3d:61:f2:dd:32:
83:50:3c:d6:e8:8c:ff:c8:2b:69:3b:6c:9e:4b:fe:6b:66:9a:
bf:d5:03:5e:71:ff:ae:cc:20:2d:e3:bb:60:ee:ae:6c:f6:e9:
99:61:21:d0:42:c7:80:1e:8a:46:69:1e:38:ce:c3:7a:54:e1:
bc:5e:ae:e8:b6:ef:cd:6e:8a:b2:78:92:81:57:d5:63:91:77:
e6:79:22:d5:6c:37:e4:46:a9:63:b1:ee:4f:59:ff:cf:ca:02:
b5:98:49:c0:98:b1:35:d1:fe:08:79:30:69:0c:d3:70:aa:bb:
55:f1:83:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoiiWTyzqwMmTIhKQ35AbMUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzMGE1NzJjMTZkMGM0NGY3NzY2NTg3ZDkyZDg3OGJhMzA1
NDFkMWUwHhcNMjUxMDI2MjIwMDIwWhcNMjUxMDI3MjIwMDIwWjAzMTEwLwYDVQQD
EygxN2UzOWI3YmFhNmE1ZjQzYjI4ZTY5NDM2YWQ2MWNmMDEyM2YyNGI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTjcQtLNJaUrt4ChlCJvIGSmRhV/
Iv2Y6ehYdL5C/wn956gyu8+ZmZINlDdJJ4vlPXK0w1sqDmh5ysa+/D6MbRCa7N5v
jQo0Je+P2Vmd8rmu8BmPg9buaeG7YvdcQGSKVpfoxZbwfujLZdKFIYsx6Z/kL6uR
SeIELMzt4x0lkLbrpN+tXKh7AldoVe3cRqbZ+BDav8yQX2NrRsOhcAoNOaCIyIjR
4FOYFBYUNFjzx8z9qy8A51z15Q3YCEub5Z6QpIn/xfe1bPGNOpF8g2/jgS63AKM2
h0HldF3tqUbXl1HikMaE3IWq86X0o3cBrtcinW0ZtVvNJyh9AnocEuHIlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBfjm3uqal9Dso5pQ2rWHPASPyS4MB8GA1UdIwQY
MBaAFJMKVywW0MRPd2ZYfZLYeLowVB0eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3dwWExCYlF4RTkzWmxoOWt0aDR1akJVSFI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9hYTU1YTItZTMzZS00ZGMwLTlkODct
OGNjNjU3OTQxNWRhLzEva3dwWExCYlF4RTkzWmxoOWt0aDR1akJVSFI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi9hYTU1YTItZTMzZS00ZGMwLTlkODctOGNjNjU3OTQxNWRh
LzEva3dwWExCYlF4RTkzWmxoOWt0aDR1akJVSFI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVoVmDDH2
bHILL4kdaPQsqbJxlJ2SjVbz2ky9cWDIG3OM1iA5QAu7KJFAMKsYpc/U/Ik0GcAz
WAyG+3M4+gZNnYizrNCFQUAPjujU12IxUHurpSIqXeYfTtCWf5w5033DyeoD5LjF
Iii9tJvT30zJ/GnwPDLIw8PDSp3V7unxyMc69YXrGlvewtfyET1h8t0yg1A81uiM
/8graTtsnkv+a2aav9UDXnH/rswgLeO7YO6ubPbpmWEh0ELHgB6KRmkeOM7DelTh
vF6u6LbvzW6KsniSgVfVY5F35nki1Ww35EapY7HuT1n/z8oCtZhJwJixNdH+CHkw
aQzTcKq7VfGDNQ==
-----END CERTIFICATE-----
Generated at Mon Oct 27 01:31:59 2025 by rpki-client