Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
File: kwpGPWfktC2GOazfDRVCT4LxmmA.mft (raw, json)
Hash identifier: LG0shNto/0LwAUD3MZSS1jFZSbxA9dt5RJoo8oyT8VE=
Subject key identifier: E9:2B:E4:D0:3F:C5:78:E0:02:38:1C:AA:BB:84:30:BB:FA:13:99:2C
Authority key identifier: 93:0A:46:3D:67:E4:B4:2D:86:39:AC:DF:0D:15:42:4F:82:F1:9A:60
Certificate issuer: /CN=930a463d67e4b42d8639acdf0d15424f82f19a60
Certificate serial: 019749685898A15E550FE6A8EA9C25D75AE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
Manifest number: 1510
Signing time: Sat 07 Jun 2025 08:01:04 +0000
Manifest this update: Sat 07 Jun 2025 08:01:04 +0000
Manifest next update: Sun 08 Jun 2025 08:01:04 +0000
Files and hashes: 1: j7F-n5BAS7IAV1hUz2AdgLUxWgs.roa (hash: j/qcNW3gwv3EvcvTrR1cViv4t/1AN5TOvaoTXIrqHig=)
2: kwpGPWfktC2GOazfDRVCT4LxmmA.crl (hash: GdZIGdEczQlqztKPARm1hdHswDefmiMgvhX+uXPG6UM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:58:98:a1:5e:55:0f:e6:a8:ea:9c:25:d7:5a:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=930a463d67e4b42d8639acdf0d15424f82f19a60
Validity
Not Before: Jun 7 08:01:04 2025 GMT
Not After : Jun 8 08:01:04 2025 GMT
Subject: CN=e92be4d03fc578e002381caabb8430bbfa13992c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c1:2c:c8:5c:9e:58:c2:cc:be:2d:13:75:9b:
f9:ee:53:8f:96:66:7b:96:58:50:27:3a:12:09:ca:
f4:87:95:58:62:d1:78:7c:79:c2:45:39:81:30:8a:
d7:12:46:92:6e:1f:a6:ac:55:b9:a8:f2:03:80:1b:
d2:bd:ec:45:1e:77:68:50:8d:11:07:c2:f0:98:45:
5f:b8:9c:43:54:92:88:be:f0:d3:1e:d6:6e:b1:c1:
06:28:a1:d2:11:a9:f8:51:9a:11:8a:f6:c6:d2:ee:
31:42:f2:e2:88:d9:07:aa:7e:e6:44:56:92:2f:a5:
27:ee:c7:2b:0a:23:38:c4:15:c7:ca:4a:aa:c3:ea:
36:6f:99:13:5a:a0:64:4d:5c:f2:de:f1:06:dd:ef:
c7:d9:23:dc:29:83:72:d9:99:1a:cc:e4:46:62:87:
ee:ef:23:49:43:37:14:89:93:05:bf:d6:57:a2:7a:
ef:40:85:36:3f:1a:54:08:ae:d2:d6:f9:67:2f:bd:
86:cb:fc:3e:a8:50:8a:41:b1:28:5c:3a:8b:e7:f6:
a0:95:8d:6e:dc:f0:df:9d:b8:8c:9b:d5:75:a3:71:
24:83:25:5b:a5:d8:81:84:cf:82:88:70:ea:43:f8:
88:79:80:3e:88:81:8e:d4:ff:46:d2:e8:c8:86:03:
e1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:2B:E4:D0:3F:C5:78:E0:02:38:1C:AA:BB:84:30:BB:FA:13:99:2C
X509v3 Authority Key Identifier:
keyid:93:0A:46:3D:67:E4:B4:2D:86:39:AC:DF:0D:15:42:4F:82:F1:9A:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:28:5c:90:4c:28:cf:16:7f:ff:b3:0b:9e:90:08:dc:07:0a:
d8:c4:8a:f0:61:d3:07:cd:9d:ee:ad:40:5e:34:c6:75:61:79:
ae:bc:78:bd:9c:32:4d:30:15:fe:e4:03:96:4e:a4:78:9f:fc:
57:87:36:5b:24:e8:69:ed:41:8d:2b:3d:78:71:b1:7e:84:35:
69:68:78:ca:64:6f:02:4d:52:ae:76:e3:e9:38:77:a8:77:84:
26:98:7d:bf:6e:94:23:c4:63:d3:31:ee:55:75:07:fa:5d:51:
56:49:b3:67:74:0d:93:3c:30:d3:36:d8:1b:72:02:6a:56:c1:
22:c1:ac:4a:83:e6:6a:67:cb:b6:aa:d6:95:13:25:a6:fe:e8:
ce:eb:33:e7:b2:57:78:97:d6:aa:d3:ed:a6:d4:04:7a:eb:73:
96:0a:9b:47:30:da:96:0f:b5:60:a3:d3:a6:52:3a:24:cc:e0:
18:e1:9d:2a:c6:5b:ef:b8:4f:c8:0d:e8:67:1d:09:23:d1:a4:
ae:97:14:bc:cd:42:38:50:a2:a9:06:d2:e9:33:71:99:a7:b2:
04:27:1d:50:40:36:49:79:df:1b:2f:bf:f2:b6:33:75:13:e9:
aa:e5:83:5f:aa:bd:56:4b:59:6f:c5:df:1b:e8:f0:29:68:c3:
2e:b9:cf:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:54:46 2025 by rpki-client