Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.mft
File: KS-wn35or-lfI5ExFObApqpyb90.mft (raw, json)
Hash identifier: SNY2AoDHJ7FA0QnN5pmYO7N0FTbcqEF8H4xmlJytAPA=
Subject key identifier: C6:B4:4F:86:3A:75:27:0E:DD:EE:DA:E5:63:BE:CE:F0:E1:AA:EC:51
Authority key identifier: 29:2F:B0:9F:7E:68:AF:E9:5F:23:91:31:14:E6:C0:A6:AA:72:6F:DD
Certificate issuer: /CN=292fb09f7e68afe95f23913114e6c0a6aa726fdd
Certificate serial: 01974D0DFE35C6EE50745A5F0B73100529E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KS-wn35or-lfI5ExFObApqpyb90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.mft
Manifest number: 0294
Signing time: Sun 08 Jun 2025 01:00:52 +0000
Manifest this update: Sun 08 Jun 2025 01:00:52 +0000
Manifest next update: Mon 09 Jun 2025 01:00:52 +0000
Files and hashes: 1: JyTHeWPSw0N2vvDNyoUd8epHXA4.roa (hash: OacdQD8AGHB+uL8UAW3yHrwnc616k4RTRtDRnug3bmo=)
2: KS-wn35or-lfI5ExFObApqpyb90.crl (hash: qAZOu3XP7/zgXNAVgUbwForcpnHU9y4mTjMyV4v8T+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.mft
rsync://rpki.ripe.net/repository/DEFAULT/KS-wn35or-lfI5ExFObApqpyb90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:0d:fe:35:c6:ee:50:74:5a:5f:0b:73:10:05:29:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=292fb09f7e68afe95f23913114e6c0a6aa726fdd
Validity
Not Before: Jun 8 01:00:52 2025 GMT
Not After : Jun 9 01:00:52 2025 GMT
Subject: CN=c6b44f863a75270eddeedae563becef0e1aaec51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:79:8a:6c:38:19:14:0a:ec:8f:dc:e8:0f:fe:
89:f1:df:2d:12:5c:a4:dc:e4:93:e6:a4:70:05:4c:
bd:b5:ce:3b:24:f6:e5:00:90:e7:22:28:94:6e:1b:
c2:10:d9:cc:31:d3:ba:fc:6a:33:f7:ed:e3:ba:02:
f9:9c:d4:5c:a8:28:3f:02:f1:c7:e0:f0:64:3a:7b:
d8:06:fe:a8:86:a7:c8:d2:b4:ec:9d:04:50:04:09:
a1:19:c0:44:51:02:88:1e:4a:7b:ad:7a:1a:ec:d0:
5a:5b:f8:3f:43:4e:59:03:a9:6d:d8:8e:63:85:be:
be:02:36:9d:2d:a1:61:59:60:9e:40:60:1b:e8:46:
82:5c:36:fc:c2:49:bd:e5:2b:70:a6:dd:3f:99:5e:
19:52:47:f0:f1:96:4f:5b:4b:5e:72:e9:78:09:de:
02:39:dd:39:68:c3:2e:2a:be:9d:bf:05:e6:1e:05:
0a:bc:ec:ae:8b:a5:e2:89:94:09:52:25:f1:ba:1b:
c1:ff:aa:ee:c6:5a:6d:20:ce:ba:39:b9:c6:68:b9:
2b:4c:ab:54:a7:33:5b:36:d0:c6:52:9d:ac:ec:bc:
c9:61:64:a7:89:ba:ab:0e:d2:22:dc:d5:92:66:5e:
8f:85:6e:7c:7a:df:90:ce:50:86:0b:d8:72:0f:25:
ec:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:B4:4F:86:3A:75:27:0E:DD:EE:DA:E5:63:BE:CE:F0:E1:AA:EC:51
X509v3 Authority Key Identifier:
keyid:29:2F:B0:9F:7E:68:AF:E9:5F:23:91:31:14:E6:C0:A6:AA:72:6F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KS-wn35or-lfI5ExFObApqpyb90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:9d:cc:9b:9b:05:c6:b8:30:d5:77:72:6d:2a:cb:5a:66:ae:
38:a4:7a:7b:ff:38:f1:8b:0e:43:a4:ef:07:25:c9:a6:f5:f2:
4d:eb:fe:13:e7:a5:e0:97:6f:14:e8:c0:94:b3:c6:2d:98:85:
b8:93:09:45:e7:56:92:bf:89:71:a4:99:e5:16:18:97:91:02:
d2:aa:a1:0e:70:0f:5d:92:1f:e2:c8:d1:5d:80:2e:76:ba:e6:
2e:d9:d0:31:e8:2c:5e:21:aa:09:ad:ce:c8:24:e4:37:2c:36:
ce:90:5c:d0:fe:68:0f:3b:08:5d:b4:7d:00:4f:33:d9:56:60:
d0:9e:9f:d0:34:49:76:00:77:e6:4e:f8:86:91:f7:a3:65:59:
80:8d:dd:42:e8:53:a2:be:2e:72:a7:12:06:53:05:12:6e:09:
6c:25:fe:5a:74:4f:8a:5f:5e:72:e9:7d:e7:49:41:76:fc:20:
32:00:5b:9d:9e:0d:e4:6c:24:7e:f2:28:1d:5c:87:19:43:51:
44:23:1b:9a:c5:21:1c:16:ad:6f:43:b4:3f:22:d4:4f:0e:67:
64:de:1b:97:77:bc:18:17:a0:f3:31:6e:bf:ed:9a:03:9c:c3:
5f:02:b5:41:88:58:52:af:92:66:28:6b:76:18:78:b1:8d:04:
bf:f8:7a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:08:07 2025 by rpki-client