Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.mft
File: KWJHhUnYzCZMLMV9znGQXRdvuIo.mft (raw, json)
Hash identifier: bzSxu2Pwy3E4BqTtXq+51O1+jS4lI1EJOb8Ntc5Wp/0=
Subject key identifier: 20:23:3F:E2:42:97:C6:DA:5F:11:E9:6D:77:14:95:61:91:3B:DB:D6
Authority key identifier: 29:62:47:85:49:D8:CC:26:4C:2C:C5:7D:CE:71:90:5D:17:6F:B8:8A
Certificate issuer: /CN=2962478549d8cc264c2cc57dce71905d176fb88a
Certificate serial: 019A23D3994E5CDB59F4FF9B162FA232B4A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWJHhUnYzCZMLMV9znGQXRdvuIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.mft
Manifest number: 1687
Signing time: Mon 27 Oct 2025 04:01:01 +0000
Manifest this update: Mon 27 Oct 2025 04:01:01 +0000
Manifest next update: Tue 28 Oct 2025 04:01:01 +0000
Files and hashes: 1: Db4cgvqb5UOgeQz4JyUwJf6Q1lU.roa (hash: zvZMT/bbatMS4tl05cs3bvS/uoQt4c5U4AeQiIO1dXo=)
2: KWJHhUnYzCZMLMV9znGQXRdvuIo.crl (hash: mgS9u9CZfJlaSH0FqwZ2Pi57JvHIN5MszEepDZOMqs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWJHhUnYzCZMLMV9znGQXRdvuIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 04:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:d3:99:4e:5c:db:59:f4:ff:9b:16:2f:a2:32:b4:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2962478549d8cc264c2cc57dce71905d176fb88a
Validity
Not Before: Oct 27 04:01:01 2025 GMT
Not After : Oct 28 04:01:01 2025 GMT
Subject: CN=20233fe24297c6da5f11e96d77149561913bdbd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:42:d7:1b:8b:75:dc:d7:fd:03:76:a6:c9:31:
2a:06:fe:bd:67:7b:12:5a:8a:d9:26:75:b3:4e:05:
dd:20:21:2e:9e:4c:3b:b4:5c:26:bb:42:79:e0:a1:
d9:82:67:0c:2b:11:c6:7a:9f:35:da:9f:59:09:27:
d2:df:bc:89:3c:d4:16:ef:53:d2:f5:42:38:3e:10:
93:ed:9b:1c:2e:a7:ab:31:bb:fb:88:09:c7:2d:11:
d4:63:46:8e:e6:f1:aa:db:6d:ff:66:88:36:41:66:
5d:b3:f5:3f:e5:5e:30:7f:14:db:66:26:fd:1b:7a:
85:c4:a0:04:89:7d:d6:f8:7a:e3:9e:59:92:73:d0:
8d:7b:65:81:a8:71:53:21:1c:92:e4:22:2f:70:e0:
3f:f0:b6:77:79:52:e5:af:8c:7a:32:d3:af:e2:9b:
2b:c7:93:2d:8f:04:07:b2:c0:1e:b9:fd:77:7b:4f:
5c:69:43:30:08:95:97:2c:3b:9a:d7:10:9a:aa:24:
f7:bc:9f:02:a5:eb:73:60:78:05:da:a6:50:dc:36:
44:d4:28:54:c4:44:ea:3a:58:2a:60:a2:a6:b0:bf:
5f:9e:61:30:77:7b:e9:10:28:90:ca:ea:fe:dd:59:
30:64:df:c4:db:d6:da:d6:25:56:a9:3a:1a:bd:42:
f0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:23:3F:E2:42:97:C6:DA:5F:11:E9:6D:77:14:95:61:91:3B:DB:D6
X509v3 Authority Key Identifier:
keyid:29:62:47:85:49:D8:CC:26:4C:2C:C5:7D:CE:71:90:5D:17:6F:B8:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWJHhUnYzCZMLMV9znGQXRdvuIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:47:1d:4b:4a:79:64:45:4b:35:fe:d2:a5:53:2d:fc:cb:31:
c1:73:82:ac:01:a1:e6:84:e7:f4:3f:16:05:b9:3f:16:a2:5b:
0b:aa:e2:76:dc:d6:ef:7a:7f:e5:af:60:60:04:dc:02:e3:b4:
54:d8:fd:1c:85:d8:a9:fd:88:28:c4:5a:99:fd:4d:d7:d7:6c:
c4:e4:7b:4a:cc:20:d3:b8:3c:42:28:fa:ba:8f:d9:75:da:0e:
c4:c5:82:1f:c8:fb:2c:a3:4e:02:10:ed:db:ae:72:c3:72:e7:
77:15:37:1f:3e:2e:2a:3e:2f:75:3f:e5:c4:0b:db:06:dd:55:
2f:0e:4e:06:fd:35:4e:6e:50:d6:3c:86:1d:a8:43:d4:d5:ce:
ff:1a:03:eb:58:93:b7:9f:d2:97:aa:71:f3:2c:bb:40:89:4d:
91:a5:ff:c9:e7:70:db:10:82:9d:76:79:2b:b5:f6:57:c6:9b:
7f:a3:d9:3a:c9:81:66:40:2a:80:ee:81:e2:34:ed:29:3c:6a:
dc:af:6a:36:3d:f8:10:45:2c:ad:6a:60:9d:e9:fa:39:86:86:
e8:d3:28:34:3c:d8:08:6b:2b:8f:84:e0:ea:12:a1:73:1b:2d:
2e:38:34:45:d6:db:71:83:a4:b9:f6:0b:35:bb:97:1f:50:37:
71:ad:08:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:23:59 2025 by rpki-client