Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.mft
File: kwy6S0MwS1HEvd-9QzF4KtkRAso.mft (raw, json)
Hash identifier: +IKxs8h/tCnRp8N1s8iUSsf5kvND0StpAjxH/+ryY98=
Subject key identifier: 5D:66:29:13:D5:99:FA:F3:02:F3:A6:2A:D8:45:17:02:FA:EB:86:C2
Authority key identifier: 93:0C:BA:4B:43:30:4B:51:C4:BD:DF:BD:43:31:78:2A:D9:11:02:CA
Certificate issuer: /CN=930cba4b43304b51c4bddfbd4331782ad91102ca
Certificate serial: 019766292B5047F5FF07038E0148D77ED14C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwy6S0MwS1HEvd-9QzF4KtkRAso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.mft
Manifest number: 02A4
Signing time: Thu 12 Jun 2025 22:01:03 +0000
Manifest this update: Thu 12 Jun 2025 22:01:03 +0000
Manifest next update: Fri 13 Jun 2025 22:01:03 +0000
Files and hashes: 1: kwy6S0MwS1HEvd-9QzF4KtkRAso.crl (hash: qqzVeqCOUrbZfbxMuYB5OMSCOfppicHLnbmOZYYopHk=)
2: uxtuL63qPRDpKVk1ikR7XA0jVWo.roa (hash: MOBvDlpT4Tx/Y9+52ugnxgyKuM5ZQrSPEm8NwRXVQVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwy6S0MwS1HEvd-9QzF4KtkRAso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:66:29:2b:50:47:f5:ff:07:03:8e:01:48:d7:7e:d1:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=930cba4b43304b51c4bddfbd4331782ad91102ca
Validity
Not Before: Jun 12 22:01:03 2025 GMT
Not After : Jun 13 22:01:03 2025 GMT
Subject: CN=5d662913d599faf302f3a62ad8451702faeb86c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:39:e0:57:ab:d1:5c:10:e7:bb:0e:d0:57:da:
5a:4e:74:40:e7:0a:aa:d0:89:68:f4:81:7e:de:8a:
be:d4:c9:75:4e:e3:d9:06:4a:1b:34:55:b1:a6:61:
01:60:14:64:64:68:cd:7b:04:c4:a5:64:2a:98:6c:
d3:22:a4:5c:0b:4a:f3:26:cb:d2:e2:2c:1c:1e:c3:
ca:34:da:0d:d4:c9:ad:29:50:69:05:0e:3f:b1:2d:
c8:50:37:80:4f:fa:87:61:04:23:b8:66:80:13:35:
cd:d0:05:a0:f3:98:3e:21:8b:5a:85:ba:5f:35:c4:
b2:15:14:b1:18:54:f3:a8:c8:f8:c0:24:0b:06:3d:
94:14:5b:4c:2a:0d:cc:6e:d0:67:a0:0d:c9:d0:42:
dd:96:00:13:d5:9f:94:97:5c:26:4b:d1:18:d0:17:
39:a9:16:b3:6d:51:ba:06:d1:a9:8c:c0:5f:65:2a:
df:23:d1:3e:bb:56:1c:e9:b3:0f:8e:c1:7a:12:1c:
e8:92:64:58:a6:b4:13:85:76:e9:79:27:7c:1f:3a:
fc:98:22:54:9a:8b:a8:c7:48:e3:7f:5a:83:c0:f2:
8b:be:15:91:71:d5:9a:81:04:a5:1e:37:5a:38:a8:
30:dd:d4:5b:ce:cf:5b:01:56:6c:61:45:e2:d7:ea:
e5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:66:29:13:D5:99:FA:F3:02:F3:A6:2A:D8:45:17:02:FA:EB:86:C2
X509v3 Authority Key Identifier:
keyid:93:0C:BA:4B:43:30:4B:51:C4:BD:DF:BD:43:31:78:2A:D9:11:02:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwy6S0MwS1HEvd-9QzF4KtkRAso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:51:59:ae:fd:f1:29:fc:b4:7f:8d:25:f5:b0:b2:6a:6e:3c:
26:93:dc:c9:df:99:b7:4a:a4:f5:c5:67:7d:eb:77:df:62:b9:
d0:2b:f6:75:de:b0:5e:86:c8:59:c7:ab:fb:34:0c:4e:b0:bc:
48:4a:d4:36:32:e3:e3:87:0c:77:39:9c:81:b4:8e:82:34:57:
e1:bc:9b:d0:03:6a:7b:76:d8:63:5e:3d:2d:c2:66:b5:42:2b:
a8:4b:d9:d6:5f:ce:f1:5e:de:0f:66:22:f7:8a:f7:68:4e:0b:
9d:63:ac:43:42:32:3d:ba:d6:c3:90:ea:e2:51:ac:73:17:95:
78:89:1c:61:ee:4b:83:4a:7e:54:d1:6e:2e:12:4e:9b:fe:95:
0c:9d:d9:aa:af:80:50:b9:ec:95:2d:fa:3f:b7:f9:be:e4:d5:
43:65:9b:3f:50:76:d8:83:3a:73:d8:ff:65:f5:04:ba:aa:06:
bd:78:80:62:1c:23:5d:33:00:7a:2b:d8:e8:20:5a:c9:e5:e7:
1a:8b:df:b9:41:df:d0:03:53:a2:1f:29:45:22:ee:c1:06:da:
6e:39:cf:62:36:2f:08:22:fa:e5:a5:ef:7e:94:5d:95:91:89:
e2:38:54:9e:b3:a8:a9:0e:02:ba:0f:54:e9:68:2a:6e:d5:43:
5e:ae:55:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 06:58:42 2025 by rpki-client