Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft
File: KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft (raw, json)
Hash identifier: AM2Xc92tbCo7PVzoKH8/o+DDHPE4q4fVNVgOhqZkoi4=
Subject key identifier: 72:4C:2E:53:4B:3E:68:5A:BF:FE:AF:B3:28:F1:68:09:13:31:7E:DD
Authority key identifier: 2B:04:D5:55:76:3F:BA:A0:94:DC:A7:A9:3D:AA:A7:8F:D4:00:85:54
Certificate issuer: /CN=2b04d555763fbaa094dca7a93daaa78fd4008554
Certificate serial: 01974BFB1908B1FC0E01B52A198CD8D7F8B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KwTVVXY_uqCU3KepPaqnj9QAhVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft
Manifest number: 0447
Signing time: Sat 07 Jun 2025 20:00:36 +0000
Manifest this update: Sat 07 Jun 2025 20:00:36 +0000
Manifest next update: Sun 08 Jun 2025 20:00:36 +0000
Files and hashes: 1: 3Vh4V2QgqmooTGsNFJzabIkkGuM.roa (hash: pE5OL1gfqKCShXk+oFUj+oL3mmpNWjZD2zCOccDVAJo=)
2: KwTVVXY_uqCU3KepPaqnj9QAhVQ.crl (hash: VWKFBE5pAbFgoq8Wql8wviV0Ahn5XuOQdNEeXqZZCKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KwTVVXY_uqCU3KepPaqnj9QAhVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:fb:19:08:b1:fc:0e:01:b5:2a:19:8c:d8:d7:f8:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b04d555763fbaa094dca7a93daaa78fd4008554
Validity
Not Before: Jun 7 20:00:36 2025 GMT
Not After : Jun 8 20:00:36 2025 GMT
Subject: CN=724c2e534b3e685abffeafb328f1680913317edd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d1:d6:23:a7:e8:02:c5:2f:ff:27:09:b9:4b:
00:bd:60:6d:10:91:c4:fd:00:66:20:b4:87:b9:9f:
50:45:01:80:46:d0:da:2e:e6:65:c8:98:d2:f9:73:
f1:8b:10:01:76:56:1a:78:48:01:6d:bd:e8:53:bf:
b5:9f:db:bd:8d:8d:c8:d0:26:9e:89:b3:1e:d0:c4:
ed:1f:ba:10:5c:34:b3:a9:8f:c8:27:95:14:fc:cc:
f3:5b:2a:ff:12:a0:e8:2b:47:83:f2:a9:ff:76:15:
d9:51:10:6d:6a:cd:fc:fb:7d:a7:6a:c5:75:67:d7:
27:8a:9f:09:0b:df:24:8a:c5:8a:0c:dd:98:90:0a:
e3:7e:3d:b7:b1:ed:14:54:94:85:6c:25:1b:42:5e:
5c:bb:74:dd:af:86:e9:48:88:09:ae:13:0a:01:28:
7a:98:2a:c8:d1:a5:93:aa:04:1c:de:e4:c6:69:02:
24:de:e6:1e:f4:56:cf:93:14:af:d6:a9:97:07:f6:
7f:36:83:3c:95:51:d0:ed:de:cc:f8:18:d8:a0:29:
2d:8c:57:f4:38:11:5d:67:bd:0d:fd:3c:27:c9:db:
f5:6d:15:1d:20:28:be:76:18:e2:d0:01:cc:02:ae:
f6:ea:06:e2:7f:3a:1c:d5:91:c5:b8:ba:2d:0c:16:
d8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:4C:2E:53:4B:3E:68:5A:BF:FE:AF:B3:28:F1:68:09:13:31:7E:DD
X509v3 Authority Key Identifier:
keyid:2B:04:D5:55:76:3F:BA:A0:94:DC:A7:A9:3D:AA:A7:8F:D4:00:85:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwTVVXY_uqCU3KepPaqnj9QAhVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:ee:81:45:fe:af:22:ef:e4:19:48:ce:f4:c7:1b:8d:d3:ae:
7f:dc:23:8d:f6:6f:a6:96:ce:f9:a1:ed:e9:77:06:12:12:02:
16:a6:cf:01:4c:3d:ad:86:23:1c:46:d2:e8:fb:64:03:4f:22:
6a:45:7e:8b:46:c3:ca:68:63:66:b0:28:89:d2:ab:53:17:44:
5f:53:a7:74:7b:c9:29:cc:72:f5:0c:de:77:9e:7f:ec:c8:7f:
df:9c:25:9b:a9:72:46:40:85:49:9e:d2:bd:4a:05:53:c2:9a:
d3:bd:90:50:5e:e3:81:f4:fd:ed:2e:a2:ea:3f:55:50:df:73:
fa:ba:be:35:2f:62:d2:e2:df:61:d8:ab:5c:5d:3f:e4:91:cf:
c3:98:a1:99:2a:1e:18:68:0d:bb:0d:d6:0c:a4:1a:9f:a1:91:
0e:01:ff:be:5b:bb:df:02:88:d7:61:5a:f1:20:e0:e6:dd:e7:
4d:23:33:ce:88:a4:ca:02:43:be:50:49:cf:81:2a:d4:72:19:
87:18:6d:d6:e8:ac:60:c3:cd:2f:63:22:b5:a7:93:d8:12:4e:
c9:3d:50:87:7c:03:f9:82:3c:ca:62:30:22:e6:5c:64:5d:50:
2e:d3:eb:09:cf:ef:5d:30:da:78:2d:1f:c5:da:8e:9d:a7:09:
a6:7e:35:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdL+xkIsfwOAbUqGYzY1/iwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiMDRkNTU1NzYzZmJhYTA5NGRjYTdhOTNkYWFhNzhmZDQw
MDg1NTQwHhcNMjUwNjA3MjAwMDM2WhcNMjUwNjA4MjAwMDM2WjAzMTEwLwYDVQQD
Eyg3MjRjMmU1MzRiM2U2ODVhYmZmZWFmYjMyOGYxNjgwOTEzMzE3ZWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstHWI6foAsUv/ycJuUsAvWBtEJHE
/QBmILSHuZ9QRQGARtDaLuZlyJjS+XPxixABdlYaeEgBbb3oU7+1n9u9jY3I0Cae
ibMe0MTtH7oQXDSzqY/IJ5UU/MzzWyr/EqDoK0eD8qn/dhXZURBtas38+32nasV1
Z9cnip8JC98kisWKDN2YkArjfj23se0UVJSFbCUbQl5cu3Tdr4bpSIgJrhMKASh6
mCrI0aWTqgQc3uTGaQIk3uYe9FbPkxSv1qmXB/Z/NoM8lVHQ7d7M+BjYoCktjFf0
OBFdZ70N/Twnydv1bRUdICi+dhji0AHMAq726gbifzoc1ZHFuLotDBbYOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHJMLlNLPmhav/6vsyjxaAkTMX7dMB8GA1UdIwQY
MBaAFCsE1VV2P7qglNynqT2qp4/UAIVUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3dUVlZYWV91cUNVM0tlcFBhcW5qOVFBaFZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9kMGEzZGMtN2Q5YS00Mzc1LWIyZmQt
Yzc1NDJmODhlNzk3LzEvS3dUVlZYWV91cUNVM0tlcFBhcW5qOVFBaFZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9kMGEzZGMtN2Q5YS00Mzc1LWIyZmQtYzc1NDJmODhlNzk3
LzEvS3dUVlZYWV91cUNVM0tlcFBhcW5qOVFBaFZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAse6BRf6v
Iu/kGUjO9McbjdOuf9wjjfZvppbO+aHt6XcGEhICFqbPAUw9rYYjHEbS6PtkA08i
akV+i0bDymhjZrAoidKrUxdEX1OndHvJKcxy9Qzed55/7Mh/35wlm6lyRkCFSZ7S
vUoFU8Ka072QUF7jgfT97S6i6j9VUN9z+rq+NS9i0uLfYdirXF0/5JHPw5ihmSoe
GGgNuw3WDKQan6GRDgH/vlu73wKI12Fa8SDg5t3nTSMzzoikygJDvlBJz4Eq1HIZ
hxht1uisYMPNL2MitaeT2BJOyT1Qh3wD+YI8ymIwIuZcZF1QLtPrCc/vXTDaeC0f
xdqOnacJpn41Tw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:13:42 2025 by rpki-client