Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.mft
File: kwy6S0MwS1HEvd-9QzF4KtkRAso.mft (raw, json)
Hash identifier: pp/eEDwsh2zDWJlawrTh+pP6E7cH2Z92k7zcNAT9lyY=
Subject key identifier: C7:2F:48:B5:E7:23:09:3D:70:77:01:44:83:E1:6A:85:75:E4:2F:01
Authority key identifier: 93:0C:BA:4B:43:30:4B:51:C4:BD:DF:BD:43:31:78:2A:D9:11:02:CA
Certificate issuer: /CN=930cba4b43304b51c4bddfbd4331782ad91102ca
Certificate serial: 01975C80B41C638384454CB6A485C98E7A80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwy6S0MwS1HEvd-9QzF4KtkRAso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.mft
Manifest number: 029F
Signing time: Wed 11 Jun 2025 01:00:27 +0000
Manifest this update: Wed 11 Jun 2025 01:00:27 +0000
Manifest next update: Thu 12 Jun 2025 01:00:27 +0000
Files and hashes: 1: kwy6S0MwS1HEvd-9QzF4KtkRAso.crl (hash: XBQe7SsrDSUaK8mVF8qAq7js8n65c503cfpTR5EjnKI=)
2: uxtuL63qPRDpKVk1ikR7XA0jVWo.roa (hash: MOBvDlpT4Tx/Y9+52ugnxgyKuM5ZQrSPEm8NwRXVQVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwy6S0MwS1HEvd-9QzF4KtkRAso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 20:45:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:80:b4:1c:63:83:84:45:4c:b6:a4:85:c9:8e:7a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=930cba4b43304b51c4bddfbd4331782ad91102ca
Validity
Not Before: Jun 11 01:00:27 2025 GMT
Not After : Jun 12 01:00:27 2025 GMT
Subject: CN=c72f48b5e723093d7077014483e16a8575e42f01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ec:ba:00:c2:16:90:aa:25:03:9f:a2:9f:c1:
a6:a3:a2:df:5d:cf:4f:f8:c5:7d:53:f3:b6:7d:8a:
c0:40:22:75:7f:e2:79:55:b3:c7:7b:be:65:34:41:
7e:19:94:17:09:bc:c7:59:38:fb:65:53:13:22:21:
df:d4:f4:ac:23:be:88:1d:19:62:ea:85:21:17:a1:
fb:ac:90:c2:3b:fa:35:99:aa:b5:3e:a4:29:e6:ad:
47:65:b1:44:1f:a5:68:0e:b4:da:b8:fc:43:75:c4:
07:63:0f:87:4d:c4:a1:02:0f:54:2a:f4:24:c2:15:
1a:f4:93:d3:4d:92:39:90:5d:d8:ee:ff:1d:c0:30:
ee:aa:75:7d:d5:a1:b5:65:44:aa:42:9d:d6:b5:dd:
ea:93:b4:18:58:4b:82:3d:54:66:06:a3:79:15:5a:
d6:e0:df:9e:69:56:07:e0:13:98:ad:16:af:ec:48:
d8:58:c2:76:16:d0:ca:09:e1:ac:06:04:bb:e0:ce:
d8:ad:2c:a6:0f:b5:cb:5a:f8:84:e8:fb:f1:3e:af:
7d:f8:be:51:b0:be:58:4f:65:8e:63:c7:c4:10:da:
8b:58:87:4f:57:15:19:e5:b9:e7:6c:3f:f0:09:b7:
96:bc:2e:ce:4d:f5:14:5e:9e:ca:3d:9d:4f:18:f4:
21:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:2F:48:B5:E7:23:09:3D:70:77:01:44:83:E1:6A:85:75:E4:2F:01
X509v3 Authority Key Identifier:
keyid:93:0C:BA:4B:43:30:4B:51:C4:BD:DF:BD:43:31:78:2A:D9:11:02:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwy6S0MwS1HEvd-9QzF4KtkRAso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:f5:60:1b:e2:f3:d8:e9:22:3f:b9:43:ff:86:fb:d7:12:65:
d7:30:45:48:86:5d:55:2a:93:e0:5a:b1:e2:f1:88:3d:e1:1b:
9c:6d:33:e3:52:3e:bd:3d:27:c2:39:34:08:1d:8f:44:ca:ae:
1d:fa:50:fb:70:d8:b8:dd:2b:a1:65:59:a0:6c:5c:93:09:20:
6d:de:bf:b6:c2:dd:21:ec:12:9d:fa:80:58:5d:e7:90:9f:1b:
f1:2a:3a:24:7a:79:6f:e4:31:96:0a:21:c6:4f:81:91:72:0e:
2e:47:c5:df:08:05:04:79:ea:d5:0a:f4:a4:3b:3e:be:90:2e:
49:06:03:1f:30:89:37:16:1c:1a:6a:ca:da:76:03:cb:f1:2d:
cb:71:74:2e:63:3a:51:5c:86:74:b5:0a:f9:b8:c9:ca:f1:6e:
3f:8c:d6:fa:03:88:cc:52:17:d1:95:82:c8:39:3d:c4:8d:b9:
23:4b:38:aa:fb:88:b6:88:19:7e:df:68:34:b7:6b:d2:db:a3:
c6:e5:7f:32:41:da:b5:32:48:79:00:6d:19:9e:a3:4d:44:a8:
d9:4c:28:fb:30:ff:0e:e8:d6:09:6c:6b:e6:f8:a9:9b:4d:98:
da:39:cb:02:cd:6d:57:3c:39:f3:9c:dd:6b:81:11:a5:38:9d:
1c:32:85:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 04:37:52 2025 by rpki-client