Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.mft
File: kwy6S0MwS1HEvd-9QzF4KtkRAso.mft (raw, json)
Hash identifier: ZBLORdhC1qWQXDeBiPsc/7NSZagRoVJPgV6YDBLAIq4=
Subject key identifier: 35:FF:63:CA:C8:A2:7D:D5:03:53:AB:85:FB:9D:98:0C:62:DA:99:4A
Authority key identifier: 93:0C:BA:4B:43:30:4B:51:C4:BD:DF:BD:43:31:78:2A:D9:11:02:CA
Certificate issuer: /CN=930cba4b43304b51c4bddfbd4331782ad91102ca
Certificate serial: 019758A3EC59F9EF36D0B068A767A0ECFA68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwy6S0MwS1HEvd-9QzF4KtkRAso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.mft
Manifest number: 029D
Signing time: Tue 10 Jun 2025 07:00:27 +0000
Manifest this update: Tue 10 Jun 2025 07:00:27 +0000
Manifest next update: Wed 11 Jun 2025 07:00:27 +0000
Files and hashes: 1: kwy6S0MwS1HEvd-9QzF4KtkRAso.crl (hash: Ecln9L52ywo0kKSnIOVig99Vv281KnzrAMIMi33i2r8=)
2: uxtuL63qPRDpKVk1ikR7XA0jVWo.roa (hash: MOBvDlpT4Tx/Y9+52ugnxgyKuM5ZQrSPEm8NwRXVQVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwy6S0MwS1HEvd-9QzF4KtkRAso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:a3:ec:59:f9:ef:36:d0:b0:68:a7:67:a0:ec:fa:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=930cba4b43304b51c4bddfbd4331782ad91102ca
Validity
Not Before: Jun 10 07:00:27 2025 GMT
Not After : Jun 11 07:00:27 2025 GMT
Subject: CN=35ff63cac8a27dd50353ab85fb9d980c62da994a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ac:6e:16:63:b6:16:53:7d:cd:5b:9e:09:9d:
cc:19:ca:a4:51:52:6f:5a:21:eb:ae:ee:83:b1:c3:
2d:ee:04:de:f1:ff:67:49:90:07:46:06:58:5e:b0:
c9:b9:99:a0:10:8a:3f:8e:d5:2f:d3:da:7e:68:4c:
27:69:7b:66:53:1e:5d:75:97:36:ce:87:16:32:2f:
8c:c9:da:5b:c6:17:20:74:81:4a:6e:a4:61:b1:1b:
27:3c:36:f0:eb:2d:e0:cb:0e:7b:f6:1a:b3:3c:76:
7e:d8:04:ff:0b:1b:e6:c8:91:f8:86:6b:dc:5b:65:
86:7b:b9:33:2e:dc:b1:fa:f7:54:40:0b:3e:a8:ac:
ff:ff:a7:5c:df:b7:ff:67:82:9a:5f:29:2f:28:30:
ca:b3:73:4c:1f:50:bb:c5:17:42:f1:17:33:1b:f0:
38:1e:52:c7:75:95:4f:dc:95:53:37:ac:7b:e6:92:
32:02:8e:c5:3d:61:9e:fe:2b:be:22:10:ac:45:e5:
4d:bd:9c:7f:d1:65:82:38:58:41:2b:30:b2:52:a4:
72:90:6a:2b:71:82:6f:09:d4:e3:6c:b0:19:af:2e:
93:4f:63:39:48:a8:e9:3b:81:99:6d:1c:2d:a8:b2:
4b:fd:63:0a:5b:72:d7:c3:5c:52:d9:12:72:72:5f:
88:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:FF:63:CA:C8:A2:7D:D5:03:53:AB:85:FB:9D:98:0C:62:DA:99:4A
X509v3 Authority Key Identifier:
keyid:93:0C:BA:4B:43:30:4B:51:C4:BD:DF:BD:43:31:78:2A:D9:11:02:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwy6S0MwS1HEvd-9QzF4KtkRAso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:8f:80:0a:08:d4:0b:7d:4e:c2:55:da:22:e6:f2:ae:51:d6:
8a:1e:4d:e5:e0:61:7b:7f:30:f9:ce:df:f1:34:53:6e:e4:11:
57:0c:5a:c7:c3:14:b2:c1:e3:79:1b:7d:46:34:11:71:1d:14:
85:65:25:e4:f4:8f:2b:80:b7:5c:65:54:f8:9f:9d:f2:fa:c5:
64:aa:88:8c:9f:e8:d0:f0:16:d8:d5:79:c8:fa:6f:16:1c:fa:
b6:f6:97:ef:f7:56:c0:4b:af:d8:90:94:5f:1c:49:ce:4d:61:
95:68:9e:0e:28:6b:25:19:6b:7b:84:cd:bc:80:58:80:07:c4:
e8:af:f5:99:d3:a9:ae:11:12:9b:84:68:bc:56:b4:62:9a:8d:
c0:75:10:87:a4:f7:26:40:e0:19:59:f1:60:1a:d9:fc:80:10:
e6:05:a4:29:82:d8:31:25:32:4f:b1:09:b9:25:68:a7:3f:7c:
27:38:b1:a4:a5:35:cf:71:bb:9b:b1:8c:0c:70:ef:64:10:d1:
3d:48:ff:f3:bf:4b:65:87:ee:2c:b7:45:fd:e2:c4:1c:d9:f0:
1e:38:e2:15:0b:6e:32:9e:f4:9a:f2:c3:e4:7c:44:90:ab:6e:
2f:8a:cd:c9:ef:c9:4b:5d:60:f2:bd:c2:f9:e6:ca:fb:ae:4e:
9b:67:96:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 16:40:01 2025 by rpki-client