Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.mft
File: kwy6S0MwS1HEvd-9QzF4KtkRAso.mft (raw, json)
Hash identifier: NOfiFD2HveCUvf8WhUtlUwMBuKq7oKGwjKU6qQjfljI=
Subject key identifier: A7:34:CF:D5:0E:82:87:80:3D:67:7B:CE:3B:9A:51:68:A4:F4:F7:9E
Authority key identifier: 93:0C:BA:4B:43:30:4B:51:C4:BD:DF:BD:43:31:78:2A:D9:11:02:CA
Certificate issuer: /CN=930cba4b43304b51c4bddfbd4331782ad91102ca
Certificate serial: 01975E6F18B08A6490AB9BB965EBEE37D0CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwy6S0MwS1HEvd-9QzF4KtkRAso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.mft
Manifest number: 02A0
Signing time: Wed 11 Jun 2025 10:00:28 +0000
Manifest this update: Wed 11 Jun 2025 10:00:28 +0000
Manifest next update: Thu 12 Jun 2025 10:00:28 +0000
Files and hashes: 1: kwy6S0MwS1HEvd-9QzF4KtkRAso.crl (hash: 7WXsTeBbF8RMGazwnUiTDmuDXK9uMKH2IJYWsKfBKRo=)
2: uxtuL63qPRDpKVk1ikR7XA0jVWo.roa (hash: MOBvDlpT4Tx/Y9+52ugnxgyKuM5ZQrSPEm8NwRXVQVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwy6S0MwS1HEvd-9QzF4KtkRAso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 10:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:6f:18:b0:8a:64:90:ab:9b:b9:65:eb:ee:37:d0:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=930cba4b43304b51c4bddfbd4331782ad91102ca
Validity
Not Before: Jun 11 10:00:28 2025 GMT
Not After : Jun 12 10:00:28 2025 GMT
Subject: CN=a734cfd50e8287803d677bce3b9a5168a4f4f79e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e2:e9:b1:87:29:11:3e:d3:0d:82:81:c8:05:
22:02:86:8f:09:1a:01:dc:53:e1:31:6b:49:f4:c5:
26:c3:ca:fb:4e:0d:27:9e:81:66:3e:65:93:5c:17:
c4:78:b8:04:bd:5d:c1:cd:f0:ac:0c:e8:15:29:15:
f8:df:5e:55:ef:b7:89:fa:4b:c9:db:95:0d:6a:84:
b7:d8:52:2e:78:89:dc:a5:56:40:77:74:79:3e:43:
ac:95:0a:05:13:72:75:28:26:b0:7a:4f:0e:42:36:
b9:ff:90:3b:20:90:4e:1d:5a:8e:31:b3:e0:68:07:
fb:2d:2e:d4:94:8f:e4:7e:05:94:30:b1:fe:d2:9e:
9e:1c:64:be:cb:e1:8c:ca:8b:08:32:d9:fb:32:76:
da:18:4f:9a:e1:05:e5:1b:6e:f8:52:cf:2a:86:35:
da:47:a6:d9:c8:6d:3c:9a:11:cc:36:fc:c0:6b:84:
3d:26:7a:fb:16:a1:20:59:9c:62:07:76:d8:b8:45:
c5:d3:69:87:05:fd:5b:af:24:9f:30:d4:3e:82:f1:
d0:2a:17:39:70:f9:a6:0b:82:6b:c6:dc:55:96:10:
f2:31:90:54:3f:23:23:08:e8:26:50:c3:d5:67:dc:
1e:ed:47:36:30:84:2d:c1:73:01:bb:b0:1c:ea:7a:
bc:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:34:CF:D5:0E:82:87:80:3D:67:7B:CE:3B:9A:51:68:A4:F4:F7:9E
X509v3 Authority Key Identifier:
keyid:93:0C:BA:4B:43:30:4B:51:C4:BD:DF:BD:43:31:78:2A:D9:11:02:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwy6S0MwS1HEvd-9QzF4KtkRAso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:06:55:40:9f:05:9e:c5:88:0c:f0:5c:45:c6:d1:b5:e0:66:
ad:36:66:ee:11:42:63:f4:71:d6:6a:67:1a:74:2f:03:10:9e:
b6:82:ce:81:e8:e5:61:f1:e3:dd:b6:1f:ba:80:ea:92:b9:29:
bf:57:10:79:6d:5a:57:f2:91:99:38:ec:bc:58:5a:71:88:91:
1f:8d:f1:77:4f:b2:22:44:ad:ea:92:76:d9:aa:54:aa:fd:9d:
84:2f:35:b1:e3:a3:bb:de:cf:a2:a4:03:f3:7a:e0:b3:73:9a:
59:a6:f1:e7:86:2f:2a:7c:9b:27:31:8b:3e:4e:31:13:99:f8:
ef:21:2e:b3:0c:68:a6:2d:c6:95:9d:58:a3:df:d8:e8:23:87:
66:13:b1:c9:b0:63:ae:75:22:ee:6f:7f:ce:48:bd:b5:e5:6c:
2f:82:dc:25:de:49:57:af:dc:f4:89:d3:2a:d1:bd:e6:cd:7a:
65:4f:cf:fb:a1:7f:d4:94:99:ab:84:d6:25:68:8a:76:ea:da:
d1:ec:17:22:1a:d3:a6:3a:35:ae:c0:cf:f7:c0:8f:a9:84:2f:
c0:1d:35:eb:71:86:bf:33:aa:cc:e5:46:d6:22:36:97:83:89:
55:77:ca:21:96:ce:34:44:5d:51:38:9d:7a:40:c0:a2:c1:c3:
51:0c:fe:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 20:46:42 2025 by rpki-client