Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.mft
File: KAWFe6e9XcggxhYmxjNJ47f6p9M.mft (raw, json)
Hash identifier: n19yO0oTnwccXB6g4aPkOFLuJnQk0IQ8cRRsiamqAoo=
Subject key identifier: 62:8A:4D:F9:D6:F7:16:1B:42:A7:DC:AF:85:EC:D7:D4:A3:39:12:FA
Authority key identifier: 28:05:85:7B:A7:BD:5D:C8:20:C6:16:26:C6:33:49:E3:B7:FA:A7:D3
Certificate issuer: /CN=2805857ba7bd5dc820c61626c63349e3b7faa7d3
Certificate serial: 01974BFB4FD0D47C12B92E8177684A32A58F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KAWFe6e9XcggxhYmxjNJ47f6p9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.mft
Manifest number: 0E11
Signing time: Sat 07 Jun 2025 20:00:50 +0000
Manifest this update: Sat 07 Jun 2025 20:00:50 +0000
Manifest next update: Sun 08 Jun 2025 20:00:50 +0000
Files and hashes: 1: KAWFe6e9XcggxhYmxjNJ47f6p9M.crl (hash: 5sD/k8prhgEozDSfN/jnyGJ0GZV/6x9CrkaJ/1ZkF1o=)
2: QKHWtvbYs2bFm7Yqz1D-noGUUCg.roa (hash: ZmlSUpfzL4PQUwk4jtXCzAOTz3/AO/19cZEbT2JXoOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/KAWFe6e9XcggxhYmxjNJ47f6p9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:fb:4f:d0:d4:7c:12:b9:2e:81:77:68:4a:32:a5:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2805857ba7bd5dc820c61626c63349e3b7faa7d3
Validity
Not Before: Jun 7 20:00:50 2025 GMT
Not After : Jun 8 20:00:50 2025 GMT
Subject: CN=628a4df9d6f7161b42a7dcaf85ecd7d4a33912fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:93:1d:5e:96:4e:53:00:e6:47:a5:63:4a:0b:
d9:8e:ba:f0:9d:e5:ee:2f:20:58:21:c5:96:e3:20:
fa:6a:44:aa:24:b1:2a:0b:81:b5:e5:ce:05:4f:65:
aa:86:be:49:60:7e:eb:91:3a:da:0f:17:b0:00:7f:
d9:28:1b:82:81:47:c0:cc:53:a7:48:f6:39:1e:86:
ff:0d:0f:21:ff:2d:eb:80:4d:98:c0:37:30:7b:f0:
89:3d:ff:f5:64:fc:e2:9f:1e:01:29:ea:08:b1:c6:
e3:88:66:0b:90:60:41:c3:88:0e:fe:0c:74:81:06:
61:6d:e4:f1:de:3a:40:a4:3d:b0:61:19:ed:43:b2:
88:39:5e:56:3b:f1:88:f7:38:1e:da:b9:78:6d:27:
84:cd:60:fb:5e:9b:0f:b8:85:a5:8a:a9:fc:c4:33:
6c:d6:ad:3f:a3:0c:0e:59:ba:7d:9e:50:68:87:e7:
47:e8:4e:95:6b:25:0b:2a:ae:f9:6a:77:ff:05:75:
6e:d0:32:12:05:8b:da:fe:30:bc:36:6b:e7:52:fb:
a3:eb:37:f7:37:f9:0e:64:ae:23:4a:19:30:fa:25:
4f:31:eb:41:a5:c9:f4:b5:41:46:15:b0:40:03:d6:
8d:de:f7:d8:43:76:cc:09:05:af:8f:11:c7:d4:55:
37:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:8A:4D:F9:D6:F7:16:1B:42:A7:DC:AF:85:EC:D7:D4:A3:39:12:FA
X509v3 Authority Key Identifier:
keyid:28:05:85:7B:A7:BD:5D:C8:20:C6:16:26:C6:33:49:E3:B7:FA:A7:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAWFe6e9XcggxhYmxjNJ47f6p9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:64:fd:f0:78:d6:d4:4c:07:09:40:a3:5b:21:0b:53:de:0b:
22:59:89:aa:cf:1d:6f:07:49:a0:86:e1:f3:99:38:8e:d3:f1:
6d:d3:50:7a:39:c2:9a:a1:37:67:22:df:6c:73:44:7a:c4:dd:
19:eb:0f:5d:d7:7b:ae:69:b7:d4:9c:05:15:b2:4a:a7:eb:9a:
20:3d:bd:d3:c6:a9:69:e1:19:63:8d:69:83:93:ca:f6:58:9c:
22:62:e6:00:03:9f:d2:5b:6d:05:dc:8c:04:da:2f:96:4f:05:
80:a6:e2:40:dd:09:71:4e:4e:30:3a:b8:aa:34:e4:07:00:57:
13:d4:52:e3:bc:75:11:44:6b:91:f4:d7:3c:d6:68:6c:13:31:
8e:db:cf:d2:7b:4a:5a:71:da:46:3a:0d:4f:d7:e2:0d:af:24:
bb:5d:d8:e5:28:e2:73:1d:80:72:0b:ec:76:72:f5:f8:6e:c4:
4a:89:af:b9:f7:28:1b:22:99:8e:f8:53:48:32:76:4b:52:73:
58:c2:dd:0e:ba:30:bc:04:a6:fb:e6:30:77:57:72:d9:54:f5:
b4:67:ce:66:d2:dd:a9:5e:4c:9e:f4:53:6b:a4:22:bc:3f:09:
5f:82:21:95:09:f3:9d:7a:f5:3a:a6:5c:c5:2e:48:3f:ff:48:
67:a8:66:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:56:52 2025 by rpki-client