Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.mft
File: kwy6S0MwS1HEvd-9QzF4KtkRAso.mft (raw, json)
Hash identifier: vEpyRuMGnv+64qDMI4LAValNVswH3xV/7FHmwLQ/3Gs=
Subject key identifier: E6:06:C1:98:8E:C5:35:2E:49:C9:12:05:08:40:18:C1:49:05:85:2A
Authority key identifier: 93:0C:BA:4B:43:30:4B:51:C4:BD:DF:BD:43:31:78:2A:D9:11:02:CA
Certificate issuer: /CN=930cba4b43304b51c4bddfbd4331782ad91102ca
Certificate serial: 01975A924BE7B75A18447D7010637699FC20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwy6S0MwS1HEvd-9QzF4KtkRAso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.mft
Manifest number: 029E
Signing time: Tue 10 Jun 2025 16:00:26 +0000
Manifest this update: Tue 10 Jun 2025 16:00:26 +0000
Manifest next update: Wed 11 Jun 2025 16:00:26 +0000
Files and hashes: 1: kwy6S0MwS1HEvd-9QzF4KtkRAso.crl (hash: IJCQEErZZ7pxHnC2ARmDs5JjSp7ynRh0yLWMXmroRwE=)
2: uxtuL63qPRDpKVk1ikR7XA0jVWo.roa (hash: MOBvDlpT4Tx/Y9+52ugnxgyKuM5ZQrSPEm8NwRXVQVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwy6S0MwS1HEvd-9QzF4KtkRAso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 16:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5a:92:4b:e7:b7:5a:18:44:7d:70:10:63:76:99:fc:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=930cba4b43304b51c4bddfbd4331782ad91102ca
Validity
Not Before: Jun 10 16:00:26 2025 GMT
Not After : Jun 11 16:00:26 2025 GMT
Subject: CN=e606c1988ec5352e49c91205084018c14905852a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:76:7d:3b:d2:c0:85:b0:17:55:5c:d3:14:bd:
67:da:0e:32:6b:5d:ac:d2:f1:b9:71:d5:95:57:30:
b4:03:82:54:a5:1c:1b:54:b1:bb:05:45:2c:a1:cf:
c6:0c:26:bb:a5:5a:ed:00:93:26:c5:9f:18:b0:40:
2e:39:03:0f:6c:5e:e0:03:82:eb:e0:5e:b2:64:b2:
5b:ea:6b:dd:3e:7c:41:e5:9a:cc:09:a3:fb:38:cb:
45:78:35:31:23:b9:58:49:e3:6f:77:58:04:24:57:
52:a6:7d:36:f9:46:33:8e:93:ae:ae:cf:f0:4c:12:
b7:5d:7b:e5:4c:7e:6c:06:f6:b2:75:fc:a7:5c:33:
b7:2e:f5:77:52:0b:4f:77:6f:ba:c4:1d:b4:a4:12:
ea:24:5f:11:1f:dd:18:5a:98:b7:60:db:ff:be:1b:
73:23:68:43:ae:ab:da:ae:0f:f7:56:1b:2f:1b:a1:
2a:b5:99:a0:0a:de:12:4f:85:13:ab:7f:cb:84:2e:
76:cc:b6:29:60:08:e4:06:1a:a1:bf:e4:2a:03:5c:
a5:c2:d0:78:ff:07:ed:ad:cc:53:b0:a6:3b:d5:fa:
4c:4b:77:94:1a:5b:cf:91:12:38:53:c9:ad:d3:34:
0e:c9:21:54:82:a4:58:56:1e:81:ac:8e:d6:0e:c7:
4f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:06:C1:98:8E:C5:35:2E:49:C9:12:05:08:40:18:C1:49:05:85:2A
X509v3 Authority Key Identifier:
keyid:93:0C:BA:4B:43:30:4B:51:C4:BD:DF:BD:43:31:78:2A:D9:11:02:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwy6S0MwS1HEvd-9QzF4KtkRAso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:76:4a:82:b0:e4:f1:4e:29:d2:60:b8:7b:de:d0:d4:ba:b6:
38:85:98:d2:bd:f0:40:88:56:0c:30:98:96:c4:de:70:c5:19:
5b:05:84:08:1d:9a:0b:29:73:66:62:94:dd:74:59:d7:65:df:
42:92:e2:e4:a3:1e:45:f7:87:86:50:c0:ce:99:cd:46:17:97:
f9:8f:34:1d:e6:86:13:20:18:7a:3f:80:89:0f:3f:69:a5:8b:
6a:73:4c:8b:3a:ca:9c:46:ed:32:b9:f0:35:f7:a3:3f:4a:8d:
cd:3e:00:2f:6d:0d:c7:f3:04:63:bb:46:aa:0d:98:94:6d:8c:
eb:1c:ff:73:09:85:c0:0d:05:bd:ec:56:47:54:fb:65:e8:05:
bf:a9:03:67:80:15:b9:6e:07:3a:5f:e1:53:9a:c0:49:db:ba:
f3:71:80:66:63:33:ee:da:54:04:b5:de:76:d5:2c:02:98:d5:
85:4e:a6:0d:ec:b9:89:7c:20:0b:7c:72:b7:4c:f5:2f:a9:36:
be:d4:27:3e:e4:d1:bc:67:bb:6d:e4:34:ba:18:86:1c:8b:a1:
c4:de:55:cc:10:eb:f5:ff:4f:c6:d0:96:4b:dd:0f:06:43:86:
91:fb:74:67:86:dc:79:e6:72:0c:1c:c6:4f:9c:81:11:e1:17:
63:80:1a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 02:46:35 2025 by rpki-client