Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.mft
File: KwA-WDvbJRH_V6t6MvznQTNLNDs.mft (raw, json)
Hash identifier: hIzGKexOvn7bw2o7tEiIrBPAjB+dultU36Z3k5XCWr4=
Subject key identifier: F8:8B:AA:04:7D:09:90:A0:B2:2F:B1:D9:D6:EF:E7:17:FD:51:91:08
Authority key identifier: 2B:00:3E:58:3B:DB:25:11:FF:57:AB:7A:32:FC:E7:41:33:4B:34:3B
Certificate issuer: /CN=2b003e583bdb2511ff57ab7a32fce741334b343b
Certificate serial: 01974B56654CD4D3991664B656823066ABBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KwA-WDvbJRH_V6t6MvznQTNLNDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 17:00:42 +0000
Manifest this update: Sat 07 Jun 2025 17:00:42 +0000
Manifest next update: Sun 08 Jun 2025 17:00:42 +0000
Files and hashes: 1: 0NCBB1EVTJYHifgmM7E7rBOVhWE.roa (hash: xXtvRZ+O4A6Lgj7z0RgWOmE79cvAliXW5idwtaE71is=)
2: KwA-WDvbJRH_V6t6MvznQTNLNDs.crl (hash: dAYGGpPK8Wl6XX/QcOW/9BUIX8FfZVeU2KXliG4E+i4=)
3: NhsPqOKPZlSrioMLr9lpaOYtrkc.roa (hash: V+PG/h3YDAOvt0v7a2x6UYLDP619SNg1ngThHlkwZTQ=)
4: rrcNnyYoHhtYzKs3plgNVsgCnq0.roa (hash: U0CZhyWrF/GWPNXT51c8u412LDB2x6JjdiyBKZ4mr/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/KwA-WDvbJRH_V6t6MvznQTNLNDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:56:65:4c:d4:d3:99:16:64:b6:56:82:30:66:ab:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b003e583bdb2511ff57ab7a32fce741334b343b
Validity
Not Before: Jun 7 17:00:42 2025 GMT
Not After : Jun 8 17:00:42 2025 GMT
Subject: CN=f88baa047d0990a0b22fb1d9d6efe717fd519108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:54:fb:15:98:f3:0b:b1:48:fb:c5:bf:01:1b:
6c:0c:02:b8:62:5f:a4:e7:1c:fe:ff:d3:96:15:92:
4a:45:f2:18:36:e3:1b:d3:32:d9:07:6c:7f:48:ce:
7c:0f:58:11:61:1a:2b:c3:b7:69:60:25:d2:e7:60:
e5:9e:30:3a:99:83:64:12:50:fb:52:0f:7f:2d:6a:
2e:c3:74:73:72:2d:b6:ee:22:90:3b:b6:3c:73:3a:
f6:22:49:95:56:78:56:e2:65:ef:bd:71:3f:1b:53:
fb:de:f1:33:c0:3e:e5:a8:30:05:5d:c3:53:e0:94:
91:ed:a4:8e:c9:a6:a5:87:f0:80:c3:2d:2b:7d:43:
1b:20:41:9b:4b:7c:ac:38:d4:d2:15:93:3c:b4:bc:
8a:bc:da:77:98:6c:ff:21:a2:a0:6d:87:25:74:33:
65:ff:82:9f:06:ee:40:52:89:0e:d0:c9:21:de:31:
c8:c1:a5:91:5a:b7:99:ee:55:60:71:cb:4f:8d:18:
44:3b:da:55:12:da:5e:09:1d:20:cd:81:14:a1:d6:
66:40:ea:68:a5:49:f0:93:d1:f9:04:5f:5f:69:eb:
40:9a:18:8f:88:17:6f:f4:c8:2e:92:3f:a1:a7:5f:
49:c5:64:5c:b6:e1:49:4a:8f:60:07:33:5c:28:91:
f6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:8B:AA:04:7D:09:90:A0:B2:2F:B1:D9:D6:EF:E7:17:FD:51:91:08
X509v3 Authority Key Identifier:
keyid:2B:00:3E:58:3B:DB:25:11:FF:57:AB:7A:32:FC:E7:41:33:4B:34:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwA-WDvbJRH_V6t6MvznQTNLNDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:dd:b6:b6:18:29:7c:18:33:d9:03:18:a7:82:6c:e2:12:86:
bf:77:18:be:14:8e:56:97:20:5c:a3:b9:8f:03:86:61:5d:41:
c7:2b:e7:5c:88:ff:8d:6c:c1:d6:68:6d:0d:c9:e4:12:19:05:
d1:d9:15:1b:32:65:11:5b:69:03:79:31:fa:58:3a:5e:97:60:
73:35:0a:3c:41:16:e3:d3:df:45:ef:c6:52:75:d9:00:07:b8:
1c:15:6c:ac:52:d5:d3:c6:8f:28:cf:a5:72:4d:c7:c8:da:85:
02:9b:be:4e:15:c3:38:62:aa:ad:e6:81:18:ef:62:e8:49:bc:
3f:f0:f9:2f:c0:40:a7:98:c7:10:d3:ee:fb:eb:94:73:43:5c:
1c:50:4b:89:0c:dc:5c:22:6f:70:ce:b3:89:f5:6d:5c:d7:58:
fc:f5:3b:a6:b9:e4:80:73:5a:5b:2c:56:36:a8:18:30:47:92:
9b:e1:ad:c2:5c:5f:76:07:fa:c4:c6:6f:d5:1f:40:bb:12:fd:
00:e1:40:47:34:2f:93:f0:f0:12:34:12:46:d2:48:0e:2a:64:
4d:5b:a9:33:5e:19:4a:20:19:d3:0a:c3:43:80:bc:cc:5a:8a:
0f:ba:73:38:e3:98:7c:4f:2b:a4:7a:2b:82:7c:56:51:21:fc:
d2:f7:c9:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:07:05 2025 by rpki-client