Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.mft
File: kTW-jvDc6dHmcHGrfLB89Q1T9hc.mft (raw, json)
Hash identifier: 2c9BDKav8JThpm++bKjTSVV+Pw2SfOl6+1dE4nSLTG4=
Subject key identifier: 3A:8B:B5:2B:D9:FF:C7:12:A5:FE:1F:13:41:14:CF:6F:31:90:74:8F
Authority key identifier: 91:35:BE:8E:F0:DC:E9:D1:E6:70:71:AB:7C:B0:7C:F5:0D:53:F6:17
Certificate issuer: /CN=9135be8ef0dce9d1e67071ab7cb07cf50d53f617
Certificate serial: 01974BC442EB8F9A0C81C941A29A801E719A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTW-jvDc6dHmcHGrfLB89Q1T9hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.mft
Manifest number: 0833
Signing time: Sat 07 Jun 2025 19:00:42 +0000
Manifest this update: Sat 07 Jun 2025 19:00:42 +0000
Manifest next update: Sun 08 Jun 2025 19:00:42 +0000
Files and hashes: 1: PREVDyEb408mqa9BxzP0AsRzJeg.roa (hash: aYqJv67l6Fq1t+h1omQ5wjXrKiL4xcndOuCQgkoKKGY=)
2: kTW-jvDc6dHmcHGrfLB89Q1T9hc.crl (hash: pFYdMhW7NjQbhahLuiKCrLTKNiUGhIC+Yxpl8fPpjP8=)
3: p4jWyPdIBFSOhKsOHJbFsDe7R3Y.roa (hash: jnU5hIXXGhayItcaB6AV8Aoaha2Knjux2sAEHQkirvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTW-jvDc6dHmcHGrfLB89Q1T9hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:c4:42:eb:8f:9a:0c:81:c9:41:a2:9a:80:1e:71:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9135be8ef0dce9d1e67071ab7cb07cf50d53f617
Validity
Not Before: Jun 7 19:00:42 2025 GMT
Not After : Jun 8 19:00:42 2025 GMT
Subject: CN=3a8bb52bd9ffc712a5fe1f134114cf6f3190748f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:af:47:58:e6:dc:f5:a7:2a:25:c7:8a:01:13:
09:73:f5:2d:52:31:b7:2a:2b:0b:e9:93:4a:0d:b3:
27:0b:cc:fd:f1:2f:d5:f7:e7:c7:a6:f6:de:d2:4a:
8f:48:64:d7:e5:15:78:18:27:74:1c:03:60:ef:be:
6c:d1:52:69:52:29:4e:9b:d6:8e:92:a6:fa:88:fe:
93:98:39:7e:78:f5:46:9c:22:f4:b4:60:c8:c6:36:
8c:79:a6:6a:5b:57:e2:00:32:6e:53:8b:29:aa:a1:
14:4e:83:ff:34:fc:70:76:3e:48:59:3a:21:a9:28:
33:56:a0:ac:82:26:8a:f8:b4:73:65:75:28:9a:90:
b0:40:a4:1a:ab:e9:74:4d:95:05:8e:16:c1:63:4c:
48:99:1a:22:5a:39:4a:23:4d:0b:0c:1f:12:c5:b2:
6c:52:60:7e:3e:d0:b8:7e:4a:22:80:31:b0:0b:5c:
4b:15:8a:ad:42:b2:d5:e9:2c:09:ef:c6:ac:02:db:
f5:ab:da:d7:95:23:3e:0b:38:04:9f:a8:86:1c:8a:
80:e5:24:07:8c:2b:71:41:3e:e0:92:5a:c9:ec:55:
e0:89:a5:f0:e7:cc:25:ce:69:a5:c5:e9:72:a9:be:
7c:9c:20:70:f4:b8:3f:15:f0:59:af:6d:09:fe:68:
e0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:8B:B5:2B:D9:FF:C7:12:A5:FE:1F:13:41:14:CF:6F:31:90:74:8F
X509v3 Authority Key Identifier:
keyid:91:35:BE:8E:F0:DC:E9:D1:E6:70:71:AB:7C:B0:7C:F5:0D:53:F6:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTW-jvDc6dHmcHGrfLB89Q1T9hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:7f:88:4b:65:ac:5f:7d:d3:33:2c:65:f3:f3:a5:b2:fa:46:
9e:e7:be:f6:5f:74:b4:36:f5:73:07:95:72:4a:6a:ee:92:04:
f5:1c:3e:a7:8b:21:dd:f4:00:91:c5:3f:30:a2:7b:db:e7:67:
b8:3d:8f:9e:7a:4e:36:df:93:a2:b9:24:95:1f:64:00:ce:a2:
f0:d1:cf:52:2a:ba:b2:b9:5e:ca:13:e0:da:1f:ce:55:2e:13:
af:7c:bd:e7:61:63:30:30:07:0a:df:8a:d2:72:79:e0:85:69:
14:29:2f:d8:92:71:02:8c:b1:58:82:57:8c:09:3e:88:91:52:
a8:eb:48:92:5d:af:7e:c6:7d:18:a6:02:79:1d:c0:2d:b1:37:
fd:60:ae:6d:7a:ce:8a:6a:51:99:fc:a1:6d:8c:9e:14:fc:18:
77:47:5f:21:5e:e8:f5:09:6d:68:ee:39:88:f8:74:06:41:09:
e7:5b:b5:fc:e3:13:86:55:c4:c6:cf:e2:85:5c:be:29:45:78:
e0:a3:fa:68:62:c8:da:a2:11:19:c1:c6:86:d7:69:95:1e:b8:
86:67:ac:9e:85:0a:91:5d:e8:89:5b:92:fc:30:90:74:1f:08:
f2:95:dd:ee:ac:79:ed:f2:83:ef:d1:39:9d:b5:5e:bb:f9:48:
5a:60:66:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:42:12 2025 by rpki-client