Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/58394a-8cf6-4b11-becb-3ba69131458b/1/kuwpVHbKHZNNsE0AJE_FB5ucl0g.mft
File: kuwpVHbKHZNNsE0AJE_FB5ucl0g.mft (raw, json)
Hash identifier: LBMD3P7Z7A52yt5QkfloxjaVBnkLGp6YczBCXE2tzSY=
Subject key identifier: C8:4F:61:56:7A:A0:A8:CF:59:74:6A:05:DC:24:04:4C:79:AC:42:2A
Authority key identifier: 92:EC:29:54:76:CA:1D:93:4D:B0:4D:00:24:4F:C5:07:9B:9C:97:48
Certificate issuer: /CN=92ec295476ca1d934db04d00244fc5079b9c9748
Certificate serial: 01975121D071AC558B6FE266725B1FAFA177
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kuwpVHbKHZNNsE0AJE_FB5ucl0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/58394a-8cf6-4b11-becb-3ba69131458b/1/kuwpVHbKHZNNsE0AJE_FB5ucl0g.mft
Manifest number: 1191
Signing time: Sun 08 Jun 2025 20:00:59 +0000
Manifest this update: Sun 08 Jun 2025 20:00:59 +0000
Manifest next update: Mon 09 Jun 2025 20:00:59 +0000
Files and hashes: 1: kuwpVHbKHZNNsE0AJE_FB5ucl0g.crl (hash: 5coBKc1OYP5N3VX29bAUEzVY1TFah3xFXg7gdVKaIHI=)
2: sZ85FeVfKS3RqKqG5NUDvn--qlo.roa (hash: gTaYc3X+G3Jkjg5kUdF0n9TPsOguK/WjYif95eZGzOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/58394a-8cf6-4b11-becb-3ba69131458b/1/kuwpVHbKHZNNsE0AJE_FB5ucl0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/58394a-8cf6-4b11-becb-3ba69131458b/1/kuwpVHbKHZNNsE0AJE_FB5ucl0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/kuwpVHbKHZNNsE0AJE_FB5ucl0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:21:d0:71:ac:55:8b:6f:e2:66:72:5b:1f:af:a1:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92ec295476ca1d934db04d00244fc5079b9c9748
Validity
Not Before: Jun 8 20:00:59 2025 GMT
Not After : Jun 9 20:00:59 2025 GMT
Subject: CN=c84f61567aa0a8cf59746a05dc24044c79ac422a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:23:05:b7:98:54:d8:58:f2:40:d5:fd:5a:c7:
9d:4f:d4:0f:9f:44:c0:8d:b3:7f:64:6d:c4:74:6f:
55:90:a2:09:51:3b:9a:9b:de:8a:5c:90:1d:1f:c0:
4a:e4:7d:3c:d1:25:24:5e:67:3b:ca:8f:7e:e9:b7:
a2:da:5c:3e:5b:e3:80:9a:5b:8b:6d:d7:9c:1e:2a:
98:52:12:06:bd:84:8d:16:26:3a:f0:95:df:9f:b8:
61:ce:2c:cc:66:0c:cc:77:7f:32:1e:af:aa:37:fe:
4c:3e:25:d0:3c:b3:5d:ac:bb:98:91:23:d8:74:43:
5d:f2:1b:df:71:50:fd:75:d3:cb:b1:c3:71:e7:fa:
ac:63:de:a8:8d:17:7c:1a:87:fc:dd:01:b1:c9:6b:
35:58:94:45:9a:5d:c5:2b:b9:ca:27:36:db:91:81:
f5:d9:ff:91:1d:d2:96:e1:61:fa:57:27:1f:24:6a:
cb:37:ba:92:fd:97:d6:44:0d:61:0d:50:65:63:14:
fb:f0:77:a1:95:e7:b3:e0:89:65:d3:ba:a3:3d:75:
c0:42:24:04:bc:91:f3:33:02:a2:9b:0b:59:b9:ca:
62:15:c3:38:da:fe:63:4b:62:04:6f:92:84:7f:55:
2f:b9:3e:85:23:ca:98:31:f2:73:c4:a2:ed:e7:d0:
8d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:4F:61:56:7A:A0:A8:CF:59:74:6A:05:DC:24:04:4C:79:AC:42:2A
X509v3 Authority Key Identifier:
keyid:92:EC:29:54:76:CA:1D:93:4D:B0:4D:00:24:4F:C5:07:9B:9C:97:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kuwpVHbKHZNNsE0AJE_FB5ucl0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/58394a-8cf6-4b11-becb-3ba69131458b/1/kuwpVHbKHZNNsE0AJE_FB5ucl0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/58394a-8cf6-4b11-becb-3ba69131458b/1/kuwpVHbKHZNNsE0AJE_FB5ucl0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:98:a2:9d:2c:11:94:ce:77:86:4d:ee:af:e6:7d:81:0f:e0:
9f:20:ba:5b:e2:c3:c6:56:e1:ea:67:33:20:05:f6:92:4f:e6:
67:cf:5d:54:c6:00:e6:a1:6f:5f:cd:b1:5f:f0:28:c7:3c:c7:
8d:d9:98:c3:3f:13:4c:00:c8:5b:e7:d0:f9:01:1b:83:99:0d:
8d:65:1c:2f:55:3f:a1:9e:c7:a0:1c:91:bc:b7:08:d2:d8:a8:
73:3f:c6:36:16:9e:ce:cd:97:20:d0:76:7f:5d:1f:75:85:4a:
1e:c1:ca:9b:e1:9a:31:30:2e:db:21:f2:78:27:a1:25:a5:07:
fd:78:a6:58:b6:fb:33:53:d5:11:38:83:a2:48:e0:cc:f8:9f:
b6:f8:b7:9c:96:b4:f6:85:55:ca:80:d9:99:30:26:23:9d:47:
e4:59:d7:11:44:5b:68:c3:64:66:1c:e7:f2:1c:66:61:41:75:
8f:9f:bc:65:5e:53:03:1f:fc:32:08:8b:e8:df:78:49:c7:e1:
ed:2b:ab:70:88:9d:74:01:e8:44:54:3b:a5:33:bd:ac:22:da:
b2:ba:ea:c0:b2:01:ca:95:a2:24:7d:bc:33:f2:77:de:17:cd:
fe:af:15:64:87:5f:3a:c7:25:ca:8b:44:15:1a:a8:24:8a:4d:
d6:df:a1:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:20:54 2025 by rpki-client