Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.mft
File: KS-wn35or-lfI5ExFObApqpyb90.mft (raw, json)
Hash identifier: oDsWVwXz5Wzv0dbHfMXHL5EWJt35/2z+zcdjM8tLTtU=
Subject key identifier: 5B:DE:FB:79:91:85:25:52:13:66:C1:D0:B6:37:DC:FD:92:61:DA:91
Authority key identifier: 29:2F:B0:9F:7E:68:AF:E9:5F:23:91:31:14:E6:C0:A6:AA:72:6F:DD
Certificate issuer: /CN=292fb09f7e68afe95f23913114e6c0a6aa726fdd
Certificate serial: 0196501132909AFF9E045D537A64F3177A06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KS-wn35or-lfI5ExFObApqpyb90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.mft
Manifest number: 0211
Signing time: Sat 19 Apr 2025 22:00:26 +0000
Manifest this update: Sat 19 Apr 2025 22:00:26 +0000
Manifest next update: Sun 20 Apr 2025 22:00:26 +0000
Files and hashes: 1: JyTHeWPSw0N2vvDNyoUd8epHXA4.roa (hash: OacdQD8AGHB+uL8UAW3yHrwnc616k4RTRtDRnug3bmo=)
2: KS-wn35or-lfI5ExFObApqpyb90.crl (hash: bUrQtNlClh3D6yPCt/HuwAdH35r26epdjsYipXSuucM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.mft
rsync://rpki.ripe.net/repository/DEFAULT/KS-wn35or-lfI5ExFObApqpyb90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:11:32:90:9a:ff:9e:04:5d:53:7a:64:f3:17:7a:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=292fb09f7e68afe95f23913114e6c0a6aa726fdd
Validity
Not Before: Apr 19 22:00:26 2025 GMT
Not After : Apr 20 22:00:26 2025 GMT
Subject: CN=5bdefb79918525521366c1d0b637dcfd9261da91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:27:3f:81:17:4d:be:06:82:86:0b:f8:1c:e1:
fd:65:c9:ed:44:d8:ca:d5:5d:a5:05:46:88:d7:99:
5c:aa:6f:5b:3b:4e:08:6e:1f:47:09:30:74:00:b7:
4e:ae:27:f3:c0:5d:aa:08:18:63:cc:d1:8e:5b:42:
75:e8:b3:3a:9e:0a:9e:35:2e:54:d2:b1:87:ef:a3:
97:06:bc:4a:02:4c:50:f6:e7:2f:d9:55:f3:da:09:
fa:78:10:04:fe:24:d9:20:30:b4:71:3b:74:e9:fa:
27:d1:5a:2e:59:b1:fa:56:72:c0:b9:92:6f:ff:1e:
f2:bc:8a:24:70:6a:28:ef:54:51:48:2f:e0:ae:1e:
63:c5:45:79:54:b7:1d:66:9e:70:ed:f8:8f:d7:4f:
72:a5:c8:cf:56:da:4e:fe:ab:b0:a5:d1:a6:ea:08:
23:c7:62:23:e4:c4:9f:92:19:a7:8a:24:59:12:e0:
25:e1:fd:c6:dd:80:61:3f:2b:91:01:2c:be:11:5c:
ca:39:83:66:70:80:05:a3:6b:1b:ab:9e:69:b8:1a:
45:73:44:5c:6b:c8:d1:8a:a5:6d:78:02:64:fd:67:
5a:b9:77:0e:47:bc:24:a6:08:6d:95:86:a3:e9:b8:
3f:a4:45:5c:a7:26:ab:97:a7:f6:31:41:bd:02:49:
9a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:DE:FB:79:91:85:25:52:13:66:C1:D0:B6:37:DC:FD:92:61:DA:91
X509v3 Authority Key Identifier:
keyid:29:2F:B0:9F:7E:68:AF:E9:5F:23:91:31:14:E6:C0:A6:AA:72:6F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KS-wn35or-lfI5ExFObApqpyb90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:15:46:0f:a8:89:5f:09:17:41:83:45:dc:ef:34:26:ea:b3:
03:b9:0b:63:b9:b9:b2:bf:3b:82:8e:b7:1e:b0:05:81:d2:50:
e5:d5:16:82:3e:bc:4e:f4:c5:be:48:12:fc:91:c3:e3:59:6f:
45:1e:33:4e:11:57:60:26:f6:91:db:9d:b3:78:b5:fe:16:12:
e9:09:17:e4:f7:85:fb:dc:cf:5d:d3:c2:e1:5f:cc:49:29:ce:
b9:2e:37:7a:c3:73:c0:5a:87:42:36:c8:13:4c:0e:ef:e1:1d:
9f:54:84:af:50:ea:8f:6e:d0:f7:51:de:cd:6a:a2:ef:86:f0:
16:db:66:f6:d8:b5:34:a6:30:38:77:f6:93:46:ad:de:ec:08:
a5:92:4a:2f:fb:4b:65:df:0f:6f:2a:56:01:fa:e3:33:88:c2:
51:e0:37:88:21:85:04:5b:8b:cd:f6:4b:bd:b5:d5:1e:95:6f:
6c:6a:c3:6e:69:df:b7:f1:3a:74:da:0f:11:18:7b:e3:2a:b1:
12:84:c1:19:ef:e2:dc:a3:9b:54:db:bf:4c:c1:64:99:42:ae:
08:f6:d0:22:4b:78:3c:fa:c0:12:13:0f:48:b9:ea:88:10:69:
5c:dd:a4:ef:9b:86:30:9f:45:84:9e:09:3a:1b:51:c3:56:69:
df:47:57:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:33:52 2025 by rpki-client