Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.mft
File: KwA-WDvbJRH_V6t6MvznQTNLNDs.mft (raw, json)
Hash identifier: UciBdhOv4RRMi8JP1V7a5buEW7Ayt540uM0btLOTQVc=
Subject key identifier: 50:E5:74:28:CE:EE:C4:08:AB:3E:32:7A:41:F2:16:94:FD:86:07:FF
Authority key identifier: 2B:00:3E:58:3B:DB:25:11:FF:57:AB:7A:32:FC:E7:41:33:4B:34:3B
Certificate issuer: /CN=2b003e583bdb2511ff57ab7a32fce741334b343b
Certificate serial: 019A2B1F118DFE8E67BD21CA07BB3438C5A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KwA-WDvbJRH_V6t6MvznQTNLNDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.mft
Manifest number: 16FC
Signing time: Tue 28 Oct 2025 14:00:47 +0000
Manifest this update: Tue 28 Oct 2025 14:00:47 +0000
Manifest next update: Wed 29 Oct 2025 14:00:47 +0000
Files and hashes: 1: 0NCBB1EVTJYHifgmM7E7rBOVhWE.roa (hash: xXtvRZ+O4A6Lgj7z0RgWOmE79cvAliXW5idwtaE71is=)
2: KwA-WDvbJRH_V6t6MvznQTNLNDs.crl (hash: 2YrvWZ3HQ123cESEwS6w/TSmpHLVGvHURnTbpbgEgAg=)
3: NhsPqOKPZlSrioMLr9lpaOYtrkc.roa (hash: V+PG/h3YDAOvt0v7a2x6UYLDP619SNg1ngThHlkwZTQ=)
4: rrcNnyYoHhtYzKs3plgNVsgCnq0.roa (hash: U0CZhyWrF/GWPNXT51c8u412LDB2x6JjdiyBKZ4mr/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/KwA-WDvbJRH_V6t6MvznQTNLNDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 14:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2b:1f:11:8d:fe:8e:67:bd:21:ca:07:bb:34:38:c5:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b003e583bdb2511ff57ab7a32fce741334b343b
Validity
Not Before: Oct 28 14:00:47 2025 GMT
Not After : Oct 29 14:00:47 2025 GMT
Subject: CN=50e57428ceeec408ab3e327a41f21694fd8607ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4c:b4:3b:88:9c:43:2f:0a:72:8c:2e:48:6b:
96:c0:3a:8f:c3:56:4c:5c:98:97:85:40:9b:35:55:
f6:2a:9c:81:59:22:06:31:72:45:97:44:6a:46:d7:
26:3f:6a:08:f0:24:64:2d:19:4c:d4:17:b9:50:c7:
66:77:bb:16:2c:8d:90:da:96:85:61:ee:01:40:ce:
0b:dc:ab:d2:09:71:58:f3:6d:98:ef:f9:02:56:4b:
d8:4a:5f:15:77:27:8d:5b:3f:13:1a:0c:13:79:d1:
fa:c8:20:07:cc:e0:17:39:15:17:79:02:75:8e:9f:
55:07:a8:50:6b:2e:96:59:36:8e:b3:c5:0e:e3:ad:
8d:12:42:dd:01:41:2a:7e:38:2c:c1:1c:ae:8e:da:
29:e5:84:71:07:c8:ef:72:61:cc:e8:67:26:55:53:
0d:70:20:e6:23:e5:9c:9a:e8:33:d7:d3:be:f3:00:
1b:ed:e1:69:28:47:99:39:e5:c4:49:89:4a:fb:fc:
64:79:0a:fb:da:75:a0:15:45:43:3b:01:3c:52:27:
e2:9d:6c:71:19:10:73:15:40:00:9f:d2:1f:5a:40:
d7:f2:fa:51:fd:c0:ab:c2:7c:5f:9f:a7:39:0a:91:
7e:8b:29:bf:9d:11:9a:80:4b:4b:49:c2:7f:ac:c6:
43:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:E5:74:28:CE:EE:C4:08:AB:3E:32:7A:41:F2:16:94:FD:86:07:FF
X509v3 Authority Key Identifier:
keyid:2B:00:3E:58:3B:DB:25:11:FF:57:AB:7A:32:FC:E7:41:33:4B:34:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwA-WDvbJRH_V6t6MvznQTNLNDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:d5:d9:97:b9:9e:d8:62:d4:1f:11:6d:ce:a9:3f:66:64:f8:
c9:dc:50:dd:30:f9:b0:c5:7a:3e:0d:2f:ad:5d:3d:a7:02:c4:
e5:ea:4f:29:71:99:98:64:04:98:80:15:b0:75:42:7c:a5:e0:
0e:23:1d:50:a0:60:5e:5a:50:22:36:09:6f:f2:70:40:6f:a6:
12:07:d3:5e:b9:59:c4:74:5d:6d:80:e6:df:f8:8d:ea:d2:84:
c4:55:03:67:80:cf:cf:73:2f:5e:5a:10:09:fc:b6:1e:c4:af:
89:e0:87:85:38:ed:bc:3e:43:01:1b:a0:e9:67:a6:f4:e8:b2:
0a:9d:d4:cd:dc:7e:dd:34:4f:cf:a8:26:97:be:8c:16:be:e8:
65:42:ca:5e:4f:f0:46:e8:d8:41:fb:ea:6d:6a:53:85:d1:8d:
3e:0a:89:0e:19:1e:31:97:ec:83:b1:bd:0f:a8:b8:6f:80:3e:
3a:d8:9b:96:26:cc:a9:bb:31:d2:be:15:84:1a:d0:9c:32:58:
e2:4d:de:3d:0d:a5:4f:d4:4e:18:e1:59:6d:19:59:d6:c1:49:
9d:d5:b7:41:89:41:3c:3d:cf:af:9e:8b:f6:21:e4:39:78:9a:
bf:18:80:1f:7d:43:9e:5c:e0:bb:0f:9d:a2:82:97:a5:de:46:
a5:5b:98:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 21:47:26 2025 by rpki-client