Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
File: kwpGPWfktC2GOazfDRVCT4LxmmA.mft (raw, json)
Hash identifier: kacdIk9jdF44qqKEPtpjCaY65oD6NvzX8puED6COiQA=
Subject key identifier: 7A:CF:20:04:15:A3:25:CA:07:7C:41:F0:00:18:83:5B:3E:11:53:B4
Authority key identifier: 93:0A:46:3D:67:E4:B4:2D:86:39:AC:DF:0D:15:42:4F:82:F1:9A:60
Certificate issuer: /CN=930a463d67e4b42d8639acdf0d15424f82f19a60
Certificate serial: 01963EE732DE9B218E788F55DD01FC1A94A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
Manifest number: 1486
Signing time: Wed 16 Apr 2025 14:01:01 +0000
Manifest this update: Wed 16 Apr 2025 14:01:01 +0000
Manifest next update: Thu 17 Apr 2025 14:01:01 +0000
Files and hashes: 1: j7F-n5BAS7IAV1hUz2AdgLUxWgs.roa (hash: j/qcNW3gwv3EvcvTrR1cViv4t/1AN5TOvaoTXIrqHig=)
2: kwpGPWfktC2GOazfDRVCT4LxmmA.crl (hash: FvW/4HFB/Us9NeLI/u718TJ3qiDO7nJI/z8UwZhxOlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:e7:32:de:9b:21:8e:78:8f:55:dd:01:fc:1a:94:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=930a463d67e4b42d8639acdf0d15424f82f19a60
Validity
Not Before: Apr 16 14:01:01 2025 GMT
Not After : Apr 17 14:01:01 2025 GMT
Subject: CN=7acf200415a325ca077c41f00018835b3e1153b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2d:0a:45:88:ff:d5:a9:56:f6:fa:f6:71:a7:
f1:5f:cb:58:71:9a:35:c9:9e:2a:b1:b9:a0:45:dd:
63:e7:cd:d1:fb:61:a1:79:60:35:ef:7e:ed:05:2e:
0d:e6:6c:1c:dd:ca:e6:3f:d7:74:0a:5d:7a:1c:63:
8a:12:e4:11:11:8a:c8:98:a9:fd:c0:b5:86:b8:23:
77:10:d6:3c:5c:85:3b:79:03:eb:1a:b8:63:80:74:
a8:a6:11:31:41:cc:d5:f0:da:54:ce:66:b2:d7:fc:
f5:1b:b4:0b:fe:ca:3f:b3:33:7a:78:c9:6f:a6:2a:
1a:ce:25:de:36:4b:52:6e:cb:3a:7f:b1:35:f2:96:
39:2d:6e:ba:e6:b2:4f:65:1a:68:71:f3:6e:0e:0f:
5f:d5:c7:9f:3b:04:82:3d:23:8f:ec:36:0f:1f:87:
35:d1:06:2d:18:7b:b3:63:07:49:b3:9a:a1:98:34:
08:a4:c0:a4:b3:ed:4b:55:28:c6:92:f9:c7:d4:ff:
0e:dd:8f:61:c4:67:1e:f1:16:7d:1a:56:98:c9:8f:
90:f7:47:d6:97:b1:56:50:60:59:9b:c7:44:af:74:
d9:fa:e5:0d:ed:a0:af:da:7d:be:8d:50:c7:4b:c9:
9e:df:f1:71:6f:79:6b:a3:a4:f0:33:57:c4:82:b3:
14:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:CF:20:04:15:A3:25:CA:07:7C:41:F0:00:18:83:5B:3E:11:53:B4
X509v3 Authority Key Identifier:
keyid:93:0A:46:3D:67:E4:B4:2D:86:39:AC:DF:0D:15:42:4F:82:F1:9A:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:04:ec:a6:c3:e6:de:fd:48:11:81:b7:80:0a:56:62:ea:a1:
63:16:20:71:8c:b2:18:2b:46:ee:4f:7f:9d:30:62:d0:f4:ac:
96:4c:fd:31:a0:ee:46:13:7a:4a:14:84:53:ea:72:07:9a:3c:
ca:be:f6:0e:c0:6f:27:34:62:8e:72:ed:fe:77:03:bf:8e:a1:
24:9c:11:9a:d7:e0:3f:f5:38:f2:c8:ed:9f:f0:4e:66:e0:27:
e2:0b:21:cb:16:a2:fa:d6:39:96:cb:b8:9e:5e:d6:20:e1:d8:
ee:43:99:a9:62:c6:cd:6d:51:55:ef:c9:40:a0:d0:86:96:d7:
29:d8:bd:b1:4f:27:3a:5e:bf:d5:c6:25:22:4f:4b:ab:a1:73:
15:aa:b3:60:d3:0b:1d:21:42:02:9d:7a:e5:f7:36:1a:a3:21:
5b:8c:63:e1:b5:81:32:c5:f3:92:5e:ad:ba:da:f6:5e:86:60:
8c:22:3a:5f:e8:29:da:54:2f:ce:35:23:a1:5f:6c:1d:01:e1:
73:e5:d4:5d:43:f9:26:12:37:5d:4f:97:19:a6:f4:df:18:0e:
26:59:b4:03:ce:13:3d:b4:b4:e9:d3:3f:7a:95:ed:cb:b3:1d:
5b:f3:ec:96:ea:c7:71:2c:6a:ac:ae:45:61:db:a7:f0:9e:23:
2f:2c:fc:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 21:43:28 2025 by rpki-client