Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
File: kwpGPWfktC2GOazfDRVCT4LxmmA.mft (raw, json)
Hash identifier: WmPEqLsZXDhjXIbvh7ZaeesGdj6wy6ACa0Bn2uExWpQ=
Subject key identifier: D5:D3:BE:84:9C:C0:32:FB:FB:76:0C:4C:FE:37:79:F6:97:C8:47:48
Authority key identifier: 93:0A:46:3D:67:E4:B4:2D:86:39:AC:DF:0D:15:42:4F:82:F1:9A:60
Certificate issuer: /CN=930a463d67e4b42d8639acdf0d15424f82f19a60
Certificate serial: 01984A413B1C774E2EA67ED7741924BDBB7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
Manifest number: 1595
Signing time: Sun 27 Jul 2025 05:00:45 +0000
Manifest this update: Sun 27 Jul 2025 05:00:45 +0000
Manifest next update: Mon 28 Jul 2025 05:00:45 +0000
Files and hashes: 1: j7F-n5BAS7IAV1hUz2AdgLUxWgs.roa (hash: j/qcNW3gwv3EvcvTrR1cViv4t/1AN5TOvaoTXIrqHig=)
2: kwpGPWfktC2GOazfDRVCT4LxmmA.crl (hash: g2iqfNwey+a8fWhGw5BurSpKOArQLTtM5YqcI5JGbho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:3b:1c:77:4e:2e:a6:7e:d7:74:19:24:bd:bb:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=930a463d67e4b42d8639acdf0d15424f82f19a60
Validity
Not Before: Jul 27 05:00:45 2025 GMT
Not After : Jul 28 05:00:45 2025 GMT
Subject: CN=d5d3be849cc032fbfb760c4cfe3779f697c84748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b8:fe:ee:97:e5:7e:a7:7a:c0:09:7b:c3:67:
9f:26:0b:d0:25:3c:5a:38:11:7f:7c:37:b6:7b:d4:
6a:cf:1f:88:d6:31:c2:85:5e:5e:c5:d9:e3:0b:a0:
1b:b6:86:a6:a9:6f:6f:5e:46:9e:76:b8:58:b6:a7:
06:48:9e:d9:15:3b:c6:33:0c:e8:97:39:2d:a2:28:
f1:d6:bb:76:39:87:4d:a8:f7:1c:d6:60:f1:7a:10:
b3:3a:e0:61:71:4e:14:14:01:96:44:e4:20:90:2b:
01:c0:9a:80:ba:b8:5a:27:01:19:b7:64:76:4c:2f:
00:13:5a:76:df:a7:2d:6f:5d:0f:0e:f9:29:27:22:
96:43:e6:5b:af:02:bd:50:30:63:dc:e9:c2:4a:17:
f9:dc:e0:e7:6e:d4:ee:f6:e0:38:4c:90:29:fd:ea:
7f:06:2f:ae:92:01:0d:02:8b:4c:bf:60:73:4c:0e:
55:a9:d4:04:96:68:25:aa:b9:d4:4f:95:88:79:c9:
59:f2:d9:8f:82:89:be:85:3d:81:1f:07:de:81:33:
aa:cd:f9:6c:d9:40:bb:8b:a2:1c:b7:d4:b2:16:12:
09:32:56:ad:e2:1a:26:b8:c3:dd:9f:c9:31:0a:21:
ec:91:7b:8e:a2:a9:91:57:09:62:0e:20:28:32:60:
b7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D3:BE:84:9C:C0:32:FB:FB:76:0C:4C:FE:37:79:F6:97:C8:47:48
X509v3 Authority Key Identifier:
keyid:93:0A:46:3D:67:E4:B4:2D:86:39:AC:DF:0D:15:42:4F:82:F1:9A:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:b7:df:d8:8f:b0:a6:83:0d:bd:25:cb:44:69:66:ef:21:05:
1c:56:41:87:63:94:ae:b4:7c:40:dc:12:fa:22:36:82:c3:b2:
a6:a1:c5:2f:e0:3e:12:9a:61:a7:cf:58:5e:5e:97:e5:b4:f5:
4c:af:09:f2:83:49:2d:3e:79:41:bd:91:db:ba:31:7c:16:0a:
cd:33:2b:4b:33:69:d4:fe:be:f8:a8:19:c3:3d:71:0a:c9:99:
04:81:ca:67:22:5a:3a:48:57:54:f2:40:68:c2:08:03:52:f8:
ab:1b:ba:02:64:3c:c1:21:8a:ad:2a:84:31:c1:6c:27:26:7d:
21:df:2c:69:4b:d4:97:d3:3e:89:5c:09:59:da:1f:3f:df:3a:
77:b3:a8:e4:4c:a0:3c:8d:86:2d:d6:2e:5b:c8:5b:1f:fb:c2:
48:2b:ef:a3:2b:93:7a:4a:b7:d1:fd:eb:41:8e:b9:c4:d7:fc:
b2:84:3e:6b:37:ee:c9:5e:f3:61:fa:db:41:96:01:f8:06:28:
dc:31:9a:81:4a:7f:a5:1d:d5:c3:83:65:09:2f:e1:97:09:ad:
2f:bd:46:66:82:f6:5a:55:ba:cf:0b:92:10:2b:eb:1d:da:11:
60:73:a2:0a:cc:3f:ad:f4:62:94:99:20:15:17:12:2f:df:49:
2f:0b:9f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:32:20 2025 by rpki-client