Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft
File: kwpXLBbQxE93Zlh9kth4ujBUHR4.mft (raw, json)
Hash identifier: AUiDVhBuZ0qDtKQWsCQf+PYtyl4ez17PYP9+9cyVAaA=
Subject key identifier: B0:49:F7:B6:DE:48:64:5A:43:F0:69:FC:55:1E:63:04:99:B3:1E:B3
Authority key identifier: 93:0A:57:2C:16:D0:C4:4F:77:66:58:7D:92:D8:78:BA:30:54:1D:1E
Certificate issuer: /CN=930a572c16d0c44f7766587d92d878ba30541d1e
Certificate serial: 019938DFF554AE86732076A4B989864902AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwpXLBbQxE93Zlh9kth4ujBUHR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft
Manifest number: 0853
Signing time: Thu 11 Sep 2025 13:03:45 +0000
Manifest this update: Thu 11 Sep 2025 13:03:45 +0000
Manifest next update: Fri 12 Sep 2025 13:03:45 +0000
Files and hashes: 1: dDvbinURbnBhghcDsCWr8pNjL-Q.roa (hash: hUZbMhthMOHDXoT8VJO840vVSWFg65GOQ1Sk4GTZvhs=)
2: kwpXLBbQxE93Zlh9kth4ujBUHR4.crl (hash: wdsxrLG6AsCsZW2gA4Sa/Q89lRDJKNljtYzt+5rYNcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwpXLBbQxE93Zlh9kth4ujBUHR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:df:f5:54:ae:86:73:20:76:a4:b9:89:86:49:02:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=930a572c16d0c44f7766587d92d878ba30541d1e
Validity
Not Before: Sep 11 13:03:45 2025 GMT
Not After : Sep 12 13:03:45 2025 GMT
Subject: CN=b049f7b6de48645a43f069fc551e630499b31eb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8f:37:e8:91:60:bf:07:60:7d:bb:3b:06:23:
a9:04:28:b3:18:27:6e:fb:c6:ec:4b:b2:cf:31:86:
93:42:2c:96:88:8f:7b:a3:ca:02:ef:f0:4c:c6:0b:
b1:df:b5:49:31:3f:ea:6f:98:51:71:24:18:60:8e:
b4:d5:57:d5:d0:62:d5:d5:40:c7:0f:51:6f:75:97:
2b:3f:c1:24:4c:98:ca:7a:4b:88:73:5e:02:9f:cc:
bd:49:93:09:75:a1:e1:e3:a5:18:5f:d4:9f:9c:22:
9e:44:08:0a:48:bb:63:d7:bf:cc:83:50:fc:0b:6b:
28:e8:58:46:48:00:79:d7:f8:d0:01:4e:e5:31:65:
c4:4b:df:fe:1a:7d:48:ca:f1:7a:84:fa:9d:7f:8e:
63:7a:48:1a:6c:39:d5:47:8e:8d:99:7e:0c:bb:2d:
b9:cd:75:7f:15:79:e8:27:eb:d5:61:93:1a:32:78:
7c:fd:80:83:c8:a6:a5:a8:ed:91:38:94:2b:03:5e:
a6:53:27:f6:42:a2:7d:06:d9:d0:33:70:b9:03:80:
5d:16:9c:2a:71:28:e2:26:ea:e5:60:2f:47:e3:15:
da:29:95:52:04:0f:80:a2:45:2a:ad:26:38:63:4e:
3a:45:24:fe:39:73:ba:62:5d:97:68:f2:2d:94:49:
c6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:49:F7:B6:DE:48:64:5A:43:F0:69:FC:55:1E:63:04:99:B3:1E:B3
X509v3 Authority Key Identifier:
keyid:93:0A:57:2C:16:D0:C4:4F:77:66:58:7D:92:D8:78:BA:30:54:1D:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwpXLBbQxE93Zlh9kth4ujBUHR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:d4:59:ca:d4:fe:9e:c4:0b:b5:ee:92:f4:5e:90:3f:ab:a4:
66:94:cf:c9:dc:cf:bb:5f:43:f9:47:64:be:58:5a:29:80:49:
90:e2:b6:05:04:b8:d7:47:58:1f:8a:99:26:cd:b3:cf:e0:c4:
ed:e4:a3:62:25:3b:dc:de:96:20:81:f7:c3:f9:21:07:fc:72:
96:15:b1:25:0b:9b:8e:ba:50:bf:c6:3c:ac:6e:49:a5:f7:9f:
49:42:84:69:cc:9b:1a:44:fb:0f:de:3f:36:6e:56:6a:cd:cd:
b2:53:32:73:3a:b3:dd:86:b1:61:58:65:eb:bf:38:b6:2e:bd:
66:f2:90:50:72:72:ff:91:62:36:b0:b0:ff:7c:c3:58:00:57:
ce:8b:d6:56:0d:ab:8b:af:90:87:16:19:4b:a6:d1:3f:6e:44:
db:c6:ab:57:43:df:80:53:11:c0:78:32:33:54:b7:66:3c:69:
e6:0f:f9:46:60:47:f8:23:32:3b:8a:7b:c9:24:85:2c:0a:71:
db:02:fa:aa:09:15:3c:3b:36:e2:ae:9f:90:36:4b:42:50:0b:
25:a5:c9:59:b7:99:78:23:4c:95:72:d7:cb:71:6c:88:c6:49:
85:a3:8a:04:66:8f:42:3a:31:6d:c3:2c:dc:3d:7d:a0:e7:a9:
ef:e9:ad:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 14:28:28 2025 by rpki-client