Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
File: kwHqBZY8l1byjuLpi488xHncn1g.mft (raw, json)
Hash identifier: H0hwM7QsqLJi4D5FFRKlrAWHZtg+786yfI6j7qEcCWo=
Subject key identifier: C6:03:C7:22:8B:B4:C0:F6:3A:95:22:84:1E:26:50:0E:93:2D:7E:32
Authority key identifier: 93:01:EA:05:96:3C:97:56:F2:8E:E2:E9:8B:8F:3C:C4:79:DC:9F:58
Certificate issuer: /CN=9301ea05963c9756f28ee2e98b8f3cc479dc9f58
Certificate serial: 019744E63039976AFC048FF5A3A3F2C70EC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
Manifest number: 157B
Signing time: Fri 06 Jun 2025 11:00:25 +0000
Manifest this update: Fri 06 Jun 2025 11:00:25 +0000
Manifest next update: Sat 07 Jun 2025 11:00:25 +0000
Files and hashes: 1: TVR9Wcx95L9uIbI7vmRK3_ppXuA.roa (hash: FBGg+DHw7jOc497O265+HPovAlPdSEs0qwJnAdItW6I=)
2: UvYnHc7rFlBw3j4tqyHKN3v104E.roa (hash: 6QDgTXlr47CFI8bSc1FSdC5Ii7Qu4oH4gM2ZxRc6gQc=)
3: bdOSuRKRee1uOsbVObRylNDB0a0.roa (hash: gjO8qJZwFaEvDikQnhsOULa/ARdOkiQLGR4fYx/iUVY=)
4: kwHqBZY8l1byjuLpi488xHncn1g.crl (hash: fecLXTbSocwJ3WQrYAfBBNUrQ1AWnsyzbe0CfdHwBDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 11:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:44:e6:30:39:97:6a:fc:04:8f:f5:a3:a3:f2:c7:0e:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9301ea05963c9756f28ee2e98b8f3cc479dc9f58
Validity
Not Before: Jun 6 11:00:25 2025 GMT
Not After : Jun 7 11:00:25 2025 GMT
Subject: CN=c603c7228bb4c0f63a9522841e26500e932d7e32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1f:8f:65:5c:27:5d:2b:63:d7:08:d2:f0:11:
d7:6e:9e:f1:cc:c9:41:39:6d:69:26:db:e9:b2:b1:
59:28:41:54:4e:53:f5:97:86:7e:ac:60:fc:23:13:
b6:c4:33:a7:a2:dd:7c:22:8b:1b:20:38:2a:ab:ca:
11:2f:99:b4:55:da:98:1d:77:76:b7:6e:e7:29:74:
ed:09:59:bf:5c:5d:b0:cf:2c:40:af:49:54:f7:da:
d6:55:a3:0f:60:48:7e:78:aa:ff:17:7a:91:d5:97:
e7:eb:2a:3c:00:94:ec:2e:39:c4:0e:3c:e9:f7:2a:
e4:8a:89:1d:61:a2:f9:66:15:55:2e:7b:82:26:6e:
42:41:ab:21:a8:e8:8c:bc:87:68:1d:8f:0b:fd:7a:
ec:66:b9:2e:7a:9a:05:7a:4c:d2:12:b0:43:8a:29:
f9:f8:d9:98:df:65:2f:c6:65:22:b1:dc:cb:d1:d8:
18:10:2b:06:3e:7c:d3:a4:43:44:e0:0b:38:55:65:
b0:08:80:09:ba:e5:e0:91:3a:92:63:1a:25:95:39:
fc:0f:3d:72:4a:88:ac:d2:f5:06:84:97:4c:91:5b:
c3:ec:95:bb:c4:6a:9e:2a:77:50:e4:ee:93:0d:1b:
99:a7:3a:13:05:b5:16:c8:c1:62:99:45:8e:7e:54:
e1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:03:C7:22:8B:B4:C0:F6:3A:95:22:84:1E:26:50:0E:93:2D:7E:32
X509v3 Authority Key Identifier:
keyid:93:01:EA:05:96:3C:97:56:F2:8E:E2:E9:8B:8F:3C:C4:79:DC:9F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:c8:4c:f3:70:03:8b:bc:40:be:3b:7f:4b:de:37:78:0c:ee:
17:24:dd:a4:b0:19:33:53:55:98:89:d1:99:34:1d:0d:e9:f8:
cd:07:44:00:b6:74:0a:b4:62:a0:75:09:2b:a1:e0:87:8b:35:
fa:09:2b:90:5a:69:f1:10:a9:fd:b3:9e:73:90:4c:fe:88:5d:
28:39:6d:02:67:59:1e:f9:1d:50:72:22:e9:48:51:59:c6:86:
86:74:07:67:42:30:f5:8a:57:c4:5b:0c:33:d5:c0:27:39:2b:
ed:04:47:d9:4d:f3:f8:ce:da:35:d6:db:35:97:9f:59:3d:62:
56:07:85:9f:fa:8e:44:a6:d5:09:12:d7:7c:ba:d4:fe:2d:3b:
e4:52:91:8f:66:3a:60:25:63:97:ec:b4:3e:72:d4:5b:de:79:
49:f1:7a:3e:0f:10:68:ca:39:df:bc:36:06:ab:0e:bb:48:5b:
4c:42:d7:7d:c9:85:ad:41:0a:7e:91:8a:c0:f3:b0:2f:55:01:
84:33:6c:d6:f8:4f:8b:e5:fd:39:73:f5:d6:88:20:bd:21:a7:
db:a1:4a:b8:cf:e4:9c:d2:be:b3:62:3b:d5:33:d2:9a:cf:89:
71:0f:f7:db:02:8b:f9:7e:c7:58:e0:1b:3b:5a:ef:9f:58:30:
c5:df:89:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 18:21:20 2025 by rpki-client