Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.mft
File: KwA-WDvbJRH_V6t6MvznQTNLNDs.mft (raw, json)
Hash identifier: lg89ebA/sYqGNQNJeJmCfBIqfhWxWytEsEP+wgrvDBI=
Subject key identifier: DB:F3:C3:9D:5A:2F:EB:FF:FA:5A:9F:EE:F2:B4:A8:54:46:E7:CB:CB
Authority key identifier: 2B:00:3E:58:3B:DB:25:11:FF:57:AB:7A:32:FC:E7:41:33:4B:34:3B
Certificate issuer: /CN=2b003e583bdb2511ff57ab7a32fce741334b343b
Certificate serial: 01984A414C83E251CE23B8C189F746FDD32B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KwA-WDvbJRH_V6t6MvznQTNLNDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 05:00:49 +0000
Manifest this update: Sun 27 Jul 2025 05:00:49 +0000
Manifest next update: Mon 28 Jul 2025 05:00:49 +0000
Files and hashes: 1: 0NCBB1EVTJYHifgmM7E7rBOVhWE.roa (hash: xXtvRZ+O4A6Lgj7z0RgWOmE79cvAliXW5idwtaE71is=)
2: KwA-WDvbJRH_V6t6MvznQTNLNDs.crl (hash: hx2VIyZB5ToRyMplhutwlh05Zc9A3y6mAYwKXs9zodg=)
3: NhsPqOKPZlSrioMLr9lpaOYtrkc.roa (hash: V+PG/h3YDAOvt0v7a2x6UYLDP619SNg1ngThHlkwZTQ=)
4: rrcNnyYoHhtYzKs3plgNVsgCnq0.roa (hash: U0CZhyWrF/GWPNXT51c8u412LDB2x6JjdiyBKZ4mr/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/KwA-WDvbJRH_V6t6MvznQTNLNDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:4c:83:e2:51:ce:23:b8:c1:89:f7:46:fd:d3:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b003e583bdb2511ff57ab7a32fce741334b343b
Validity
Not Before: Jul 27 05:00:49 2025 GMT
Not After : Jul 28 05:00:49 2025 GMT
Subject: CN=dbf3c39d5a2febfffa5a9feef2b4a85446e7cbcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:83:2f:b7:4f:c9:fb:41:09:88:13:dc:7b:d8:
76:a5:90:c6:63:2e:5f:80:20:a0:c6:0c:98:ee:9d:
87:ad:d4:5c:41:f9:63:4d:41:99:b5:19:1a:6f:19:
f1:1c:05:31:c1:93:cc:85:d6:9f:c4:f7:1a:f1:a6:
9e:ff:9a:e2:b2:05:ed:f2:ed:68:67:e9:1d:98:c9:
44:25:19:52:3d:82:a1:d3:10:f7:5f:1d:7b:93:22:
79:97:f6:30:5f:03:79:de:a6:3d:c0:92:05:e6:dd:
d0:d8:39:ec:7f:ca:62:50:92:44:ec:ae:46:e8:ae:
8c:ee:4c:68:73:d1:41:ac:96:d5:a0:c3:0a:31:4e:
b4:a1:9a:04:53:51:f9:ea:59:38:90:3f:c3:35:d5:
e7:df:a1:f1:2b:64:78:c0:9a:3b:14:89:b8:e4:dd:
23:a0:28:7e:96:1e:38:1d:e8:93:6e:6d:fd:aa:94:
aa:b9:6e:25:34:2e:60:71:a7:6c:fa:76:16:9c:a5:
aa:32:08:82:3a:c2:93:64:3f:70:cd:cb:c1:e3:b7:
eb:7e:33:29:21:72:bb:27:21:f6:1d:a6:33:7b:18:
55:93:a6:df:af:06:3e:36:4a:d8:3e:a5:c6:ff:72:
54:46:0e:3f:34:7e:7e:3a:66:4b:53:46:5f:4b:72:
de:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:F3:C3:9D:5A:2F:EB:FF:FA:5A:9F:EE:F2:B4:A8:54:46:E7:CB:CB
X509v3 Authority Key Identifier:
keyid:2B:00:3E:58:3B:DB:25:11:FF:57:AB:7A:32:FC:E7:41:33:4B:34:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwA-WDvbJRH_V6t6MvznQTNLNDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:57:79:19:a7:10:9b:06:3c:23:82:3a:41:33:f8:88:9f:72:
f4:c8:1d:17:19:cc:58:27:8a:3f:2d:3e:14:d0:d8:17:31:91:
26:58:f6:ad:14:5e:56:93:82:f7:ad:9e:a9:30:71:ed:e2:9c:
a1:2f:59:0d:b7:8f:aa:78:4a:80:be:aa:8a:6d:09:59:29:47:
18:8c:25:7b:65:93:2a:cb:ed:ae:ee:bc:30:62:c9:bf:93:1e:
e7:d6:5e:bc:a7:1d:0d:b3:b4:26:f2:6b:c9:e4:39:56:9c:cc:
eb:87:5c:75:57:45:70:13:17:d4:f3:4a:38:fe:79:31:49:35:
4d:51:b9:ef:ce:60:f6:66:67:ff:a2:33:b2:72:32:b4:55:b4:
6e:42:ab:aa:85:63:8d:d9:e6:31:39:a9:36:b0:92:62:b7:c3:
5b:d4:cd:be:1c:bd:1b:0d:dc:0e:38:fd:5c:14:d9:5d:9a:68:
a6:56:aa:36:07:e1:db:5e:24:29:01:aa:ed:20:b5:5f:cb:5f:
af:cf:ec:ba:4f:90:48:f2:b1:6b:5f:5e:ca:d1:64:e6:f2:9d:
96:93:50:50:7a:c3:d5:0d:3c:39:20:a1:32:6c:e2:e8:b3:71:
6f:28:d3:05:da:2e:8b:9a:c4:f9:bc:a1:f3:d9:53:44:94:82:
40:57:8f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:55:56 2025 by rpki-client