Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
File: kwpGPWfktC2GOazfDRVCT4LxmmA.mft (raw, json)
Hash identifier: RjxeOrJV3k47e+Z3XT6LKgI1oXVvwnBeZdFz3csnNa4=
Subject key identifier: 8E:51:93:CC:83:94:D2:AF:0F:1F:F0:47:8D:0F:DC:4F:46:66:2D:E5
Authority key identifier: 93:0A:46:3D:67:E4:B4:2D:86:39:AC:DF:0D:15:42:4F:82:F1:9A:60
Certificate issuer: /CN=930a463d67e4b42d8639acdf0d15424f82f19a60
Certificate serial: 01993BA7582E6734072EFC2EDD2CBAAA62D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
Manifest number: 1612
Signing time: Fri 12 Sep 2025 02:00:46 +0000
Manifest this update: Fri 12 Sep 2025 02:00:46 +0000
Manifest next update: Sat 13 Sep 2025 02:00:46 +0000
Files and hashes: 1: j7F-n5BAS7IAV1hUz2AdgLUxWgs.roa (hash: j/qcNW3gwv3EvcvTrR1cViv4t/1AN5TOvaoTXIrqHig=)
2: kwpGPWfktC2GOazfDRVCT4LxmmA.crl (hash: nGJicB/D8K94E7ja564+GIeRxpnt1M9cdCqV9v8GoZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 21:31:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3b:a7:58:2e:67:34:07:2e:fc:2e:dd:2c:ba:aa:62:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=930a463d67e4b42d8639acdf0d15424f82f19a60
Validity
Not Before: Sep 12 02:00:46 2025 GMT
Not After : Sep 13 02:00:46 2025 GMT
Subject: CN=8e5193cc8394d2af0f1ff0478d0fdc4f46662de5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:03:23:c5:81:9d:c7:ab:40:0d:db:3f:31:48:
69:52:ea:8a:1b:af:ac:de:c0:80:eb:68:37:40:91:
46:c9:c4:cf:88:5b:35:92:1f:e7:7f:6b:b9:37:68:
79:a8:50:d1:81:d9:07:22:bb:7c:7b:35:f3:c3:8a:
cc:81:7a:47:b1:fd:c2:6c:35:d8:ce:9d:ed:72:7d:
11:6c:40:3e:c7:da:6a:43:92:ad:1b:3d:dd:73:40:
8e:3f:ee:ab:c4:24:94:c0:31:0d:3a:dc:47:18:d9:
bf:d2:3d:1a:63:7a:fd:3b:88:2e:de:89:95:4b:01:
d7:27:06:1d:f6:35:bf:0a:63:4c:b1:68:38:8c:73:
21:4a:93:19:c1:93:0b:98:1c:6d:b6:ce:41:bf:4a:
5a:86:af:c0:d5:e5:0b:dc:07:df:bf:6f:55:b7:a5:
db:85:b9:03:3f:3f:31:05:c6:36:73:1b:16:bb:18:
b3:ff:0b:28:a4:eb:a6:ab:bc:27:1d:b8:5d:b3:ac:
3b:4f:37:3c:da:bd:ad:af:40:cf:01:a0:b2:09:7e:
9c:e3:fa:73:bc:7b:38:33:43:93:7e:77:7a:0b:56:
e9:fe:25:5a:3e:d2:29:90:f5:4a:ab:00:77:b5:08:
9a:05:d2:17:79:c3:7d:43:dd:48:72:c5:b2:91:00:
6d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:51:93:CC:83:94:D2:AF:0F:1F:F0:47:8D:0F:DC:4F:46:66:2D:E5
X509v3 Authority Key Identifier:
keyid:93:0A:46:3D:67:E4:B4:2D:86:39:AC:DF:0D:15:42:4F:82:F1:9A:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:55:d3:21:86:e6:8e:20:bd:6e:3b:1c:02:ce:ab:31:a7:fb:
c3:dd:a9:85:55:78:1e:0c:21:cc:96:4f:96:36:a0:b4:1f:d6:
26:98:02:da:01:93:df:bc:70:bb:93:90:a1:54:11:a0:f7:ad:
f2:19:ca:a6:4c:86:3c:8e:21:6a:b1:d0:b8:bb:fd:a1:52:9d:
4d:0d:0f:a1:77:be:31:26:cb:cf:ca:2b:27:3e:85:03:c7:ae:
50:9c:04:69:d8:6e:91:05:d4:9a:75:a3:60:1f:0e:d7:e8:81:
e1:f9:96:9b:58:d6:b1:bd:13:03:ee:34:d6:42:b2:26:07:1a:
18:bf:ca:ad:1f:74:4d:ee:f0:de:43:fe:da:22:04:91:7d:99:
ed:a4:d0:75:fa:75:18:0b:a3:0c:45:34:22:f4:04:e1:78:df:
1f:8b:7e:93:b1:2f:a5:fc:78:9f:c2:f4:af:78:4d:e5:52:a9:
57:f9:e3:20:31:0f:c4:10:db:b1:7a:2d:3d:9d:4c:f7:7e:59:
d6:0c:0b:ea:3d:f1:09:4c:4a:e2:5e:e0:59:b1:4e:e4:47:45:
31:6d:ac:56:56:07:82:ae:59:00:af:ab:f9:e9:38:86:2f:16:
6e:22:4b:ca:a8:bf:21:41:c7:0e:2e:f3:34:a4:f8:19:39:c6:
cc:a7:b8:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 12 03:06:18 2025 by rpki-client