Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft
File: KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft (raw, json)
Hash identifier: arVws/aKhGi6zNegjwf8xk7J+zDTTggkaoEbjA4p9oI=
Subject key identifier: 60:0C:00:DE:85:27:B8:46:72:86:FD:FE:14:63:64:CA:53:57:C4:38
Authority key identifier: 2B:04:D5:55:76:3F:BA:A0:94:DC:A7:A9:3D:AA:A7:8F:D4:00:85:54
Certificate issuer: /CN=2b04d555763fbaa094dca7a93daaa78fd4008554
Certificate serial: 019A7149A30264751FAD3BF5C90ECB59FC55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KwTVVXY_uqCU3KepPaqnj9QAhVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft
Manifest number: 05E8
Signing time: Tue 11 Nov 2025 05:00:42 +0000
Manifest this update: Tue 11 Nov 2025 05:00:42 +0000
Manifest next update: Wed 12 Nov 2025 05:00:42 +0000
Files and hashes: 1: 3Vh4V2QgqmooTGsNFJzabIkkGuM.roa (hash: pE5OL1gfqKCShXk+oFUj+oL3mmpNWjZD2zCOccDVAJo=)
2: KwTVVXY_uqCU3KepPaqnj9QAhVQ.crl (hash: g4qcb7qMyugdmmHV8IRZMgJVmaR3oaIWd/ktxDadPcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KwTVVXY_uqCU3KepPaqnj9QAhVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:a3:02:64:75:1f:ad:3b:f5:c9:0e:cb:59:fc:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b04d555763fbaa094dca7a93daaa78fd4008554
Validity
Not Before: Nov 11 05:00:42 2025 GMT
Not After : Nov 12 05:00:42 2025 GMT
Subject: CN=600c00de8527b8467286fdfe146364ca5357c438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c8:6c:3c:b1:3b:b0:b9:1c:1d:f5:86:22:07:
89:67:25:0f:a9:28:38:38:04:ac:32:48:db:0a:af:
4b:e3:c6:05:cc:d2:3f:1f:0f:62:20:8f:5e:6d:e0:
2f:53:ea:03:97:12:73:ca:c7:7d:f2:f5:fe:6f:50:
aa:62:ea:9f:20:1d:f4:4c:67:01:4f:e6:0a:ca:ba:
36:7e:ad:34:db:4e:ed:b7:d4:45:97:4f:8d:d1:8b:
7a:1f:5d:9a:6f:6f:ec:1e:7e:6d:90:79:e2:50:e3:
03:3a:aa:8f:fe:81:30:ef:19:ff:d7:5a:74:33:06:
b5:a3:ef:4e:6e:bf:2b:fe:dd:fb:e3:89:86:19:c3:
10:b9:58:ac:5c:80:c3:db:0e:dc:c0:42:6c:1a:c9:
19:5a:34:36:2a:b3:35:9d:b2:5a:3e:5f:c9:46:f5:
11:5c:85:4a:11:c2:f8:0c:6b:bc:f9:64:d0:e1:c2:
cf:11:3a:78:e8:d0:e6:76:51:89:7f:ad:3d:95:bb:
f4:1d:f5:da:e1:f8:c2:e8:f6:40:44:60:35:46:bf:
32:0c:fd:2d:ae:56:34:51:ed:b0:66:19:da:23:1a:
c4:0e:c8:a8:10:34:05:e3:3a:d4:02:f8:f7:a6:07:
af:90:0e:32:f0:58:85:8a:bd:a0:af:4f:58:7c:c8:
b2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:0C:00:DE:85:27:B8:46:72:86:FD:FE:14:63:64:CA:53:57:C4:38
X509v3 Authority Key Identifier:
keyid:2B:04:D5:55:76:3F:BA:A0:94:DC:A7:A9:3D:AA:A7:8F:D4:00:85:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwTVVXY_uqCU3KepPaqnj9QAhVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:d6:d8:4e:31:65:29:58:8c:16:09:5f:db:d2:c5:60:ae:06:
97:29:26:0f:9b:da:be:77:88:f6:08:96:7d:e8:99:0d:57:d2:
ec:73:4d:5c:72:10:01:d2:cc:19:e4:6a:ae:84:5a:9a:9c:2f:
12:1c:20:88:be:68:dd:9f:e3:41:fc:0e:a5:83:77:30:21:69:
09:e6:bc:40:99:e4:64:85:bf:b1:00:49:1d:5e:28:49:8d:aa:
a3:31:0b:73:4a:49:22:dd:ac:a4:09:7d:4c:80:06:59:1c:3e:
f6:34:9f:90:e4:52:62:16:5c:80:ac:62:ab:b7:15:e4:ae:9d:
30:11:5c:8d:5e:2d:9d:61:88:13:16:2d:96:4e:f0:fd:94:01:
27:36:e6:34:1f:fa:a5:03:fa:06:b7:df:c3:9e:69:d4:e2:ce:
c2:3e:5c:e4:da:25:a1:d0:6f:f7:63:09:13:43:1c:fc:33:df:
a0:f0:6d:af:ea:ac:b7:ac:5f:74:6c:60:ab:c8:6c:94:14:07:
a2:dc:9a:92:9b:b5:09:3b:b1:77:f3:ee:02:99:e5:5a:5e:f5:
51:f6:b2:af:35:10:50:2f:90:87:bc:23:cc:b2:3e:bb:b7:32:
45:bb:8a:0a:c9:20:81:f3:0d:75:88:06:ea:41:04:9b:1b:15:
0d:ea:fd:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:13 2025 by rpki-client