Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/89c3e4-b613-49ec-ae25-2e75228f9261/1/KwFArTlBTE6rAqxVQitEFj7TSw8.mft
File: KwFArTlBTE6rAqxVQitEFj7TSw8.mft (raw, json)
Hash identifier: Q/iWFQcLeT/Wv5y216gypuaZSNMuf/h8XTAL/z8CyNY=
Subject key identifier: DE:C9:91:BB:91:85:18:B4:BA:B5:83:F3:5C:98:1E:A4:AC:08:13:DC
Authority key identifier: 2B:01:40:AD:39:41:4C:4E:AB:02:AC:55:42:2B:44:16:3E:D3:4B:0F
Certificate issuer: /CN=2b0140ad39414c4eab02ac55422b44163ed34b0f
Certificate serial: 0198567C7EDBC4A2DD824D7DC2CCE655EE31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KwFArTlBTE6rAqxVQitEFj7TSw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/89c3e4-b613-49ec-ae25-2e75228f9261/1/KwFArTlBTE6rAqxVQitEFj7TSw8.mft
Manifest number: 035E
Signing time: Tue 29 Jul 2025 14:00:56 +0000
Manifest this update: Tue 29 Jul 2025 14:00:56 +0000
Manifest next update: Wed 30 Jul 2025 14:00:56 +0000
Files and hashes: 1: KwFArTlBTE6rAqxVQitEFj7TSw8.crl (hash: r3blZqPsWY3YtTSYZqK7gt4NhR1VIu4EW7mx9zth9CU=)
2: OsS2avf_SCsvTL1pRqTL_5n-su8.roa (hash: q2VY8Sbvggao2o4h3H+VtLne6bMzXujw9hwcUuBVuOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/89c3e4-b613-49ec-ae25-2e75228f9261/1/KwFArTlBTE6rAqxVQitEFj7TSw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/89c3e4-b613-49ec-ae25-2e75228f9261/1/KwFArTlBTE6rAqxVQitEFj7TSw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KwFArTlBTE6rAqxVQitEFj7TSw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:56:7c:7e:db:c4:a2:dd:82:4d:7d:c2:cc:e6:55:ee:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b0140ad39414c4eab02ac55422b44163ed34b0f
Validity
Not Before: Jul 29 14:00:56 2025 GMT
Not After : Jul 30 14:00:56 2025 GMT
Subject: CN=dec991bb918518b4bab583f35c981ea4ac0813dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:56:5e:9e:77:c3:e2:8c:e5:b5:95:b5:ec:7b:
13:c7:7b:ac:5c:65:b2:fd:f8:17:30:96:38:96:94:
b9:1d:7d:6e:7e:5c:1b:97:4f:3c:31:6b:1a:9b:f3:
ae:85:f7:e6:a3:57:2d:6a:e8:02:e7:2a:7d:11:74:
60:c2:bc:16:f0:22:5d:a3:f8:54:14:f2:fc:5e:5d:
e5:54:03:88:ab:35:d6:36:c8:a3:3f:8e:0b:1a:6e:
9f:e0:68:6c:44:e4:79:3c:40:18:7c:ab:7f:1c:bb:
0b:a6:b6:20:db:be:4f:0b:a8:8d:8e:d7:66:d0:91:
5a:3b:92:5f:a3:75:bf:45:1d:6b:a0:02:3b:ab:db:
b5:df:d9:69:f4:4e:4e:f9:08:38:94:9e:da:66:fe:
70:42:ea:bf:9c:1e:88:c2:fc:74:ed:67:19:a9:76:
08:ee:31:ae:68:06:90:66:54:05:a5:d4:13:6b:f5:
f9:5c:06:08:07:95:51:d4:53:77:44:6d:6e:7e:27:
e4:e9:6f:a3:ae:ba:f9:0f:f7:2f:2c:15:65:4d:76:
2c:7c:7a:c0:23:8a:7d:9a:45:14:f3:5e:10:11:f6:
35:89:0a:e3:5b:a5:9d:10:f4:0b:c6:10:b5:c1:64:
69:d0:e7:16:1c:16:86:57:b7:76:bc:65:b4:8b:ba:
c7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C9:91:BB:91:85:18:B4:BA:B5:83:F3:5C:98:1E:A4:AC:08:13:DC
X509v3 Authority Key Identifier:
keyid:2B:01:40:AD:39:41:4C:4E:AB:02:AC:55:42:2B:44:16:3E:D3:4B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwFArTlBTE6rAqxVQitEFj7TSw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/89c3e4-b613-49ec-ae25-2e75228f9261/1/KwFArTlBTE6rAqxVQitEFj7TSw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/89c3e4-b613-49ec-ae25-2e75228f9261/1/KwFArTlBTE6rAqxVQitEFj7TSw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:82:cb:60:cb:a6:46:b8:4d:28:3f:13:a7:d6:c5:53:97:75:
fb:d8:e4:07:f3:55:db:31:c1:77:85:da:f2:9e:15:29:60:2b:
d5:b3:ed:d9:09:6a:08:a0:80:b1:90:80:4e:72:e5:4f:19:88:
8a:7c:fe:d4:87:d3:b4:9a:bd:f0:3f:29:4d:a2:f2:01:db:0b:
f5:14:b3:ca:43:43:45:0f:00:49:46:83:1b:96:73:48:78:5c:
d9:0e:bf:cb:26:f5:d0:f5:9a:33:a9:5a:20:dd:eb:b3:3c:5d:
c9:0d:0e:2b:49:dd:e2:7a:c6:b6:ab:5e:eb:fb:e8:0c:c0:10:
66:4f:95:c6:b7:de:63:8e:aa:b4:b9:20:8c:46:f0:c0:37:dd:
62:1f:90:de:7f:74:ec:f0:5d:ae:cc:24:27:43:6a:ca:df:0c:
b9:6e:95:bf:8b:8f:15:0a:72:7a:44:d1:96:33:f5:83:1e:a3:
ba:bc:b9:8c:cd:73:0f:ad:18:e2:3f:e4:6a:ba:0c:c3:54:f7:
85:88:f7:cb:77:19:df:0e:0e:94:6b:b8:0f:39:e2:bf:63:15:
52:c6:fd:ae:ef:0f:2b:42:b1:64:43:26:54:08:59:7a:35:c5:
aa:9b:8a:d6:b7:1a:f3:70:12:39:bd:ac:be:20:c1:87:74:fd:
a6:48:42:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 00:07:59 2025 by rpki-client