Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.mft
File: KWAWrWTCJgCs8wSfh1j1PrseV8Q.mft (raw, json)
Hash identifier: lMALdR3CjTqAFVVG/WCxzjR0Aehj6/Zr4yJseeZ6/ZA=
Subject key identifier: 91:04:ED:B8:34:BD:1A:7D:51:55:B8:B7:B5:51:45:EE:10:37:F2:16
Authority key identifier: 29:60:16:AD:64:C2:26:00:AC:F3:04:9F:87:58:F5:3E:BB:1E:57:C4
Certificate issuer: /CN=296016ad64c22600acf3049f8758f53ebb1e57c4
Certificate serial: 019739F4F09FF6CD539180B19E0D1408B991
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWAWrWTCJgCs8wSfh1j1PrseV8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.mft
Manifest number: 032B
Signing time: Wed 04 Jun 2025 08:00:42 +0000
Manifest this update: Wed 04 Jun 2025 08:00:42 +0000
Manifest next update: Thu 05 Jun 2025 08:00:42 +0000
Files and hashes: 1: IoK2zTe-OC_dDY_734EVd48qQJ8.roa (hash: OV/EhbwqGxvFaPc6Pz7o/yEGyZxODTXrHQIagp84Afg=)
2: KWAWrWTCJgCs8wSfh1j1PrseV8Q.crl (hash: S+2i56Y4qR9AuC/GcU5W1daldh+9qtM//VNvqb/p27U=)
3: ZRdLYDl7hpyDg6YsYK-Wdw4baMc.roa (hash: 5DTIP8T8IUMMx2MqkILNMeW793Ol6SuU7VuRgBULAp4=)
4: r_GgOOrK8Ih9MzmtnCA_DxxC0BY.roa (hash: lJ1n4OTRsjhQ2vj+G2gNkyHqsFIRt5AG3VU9W6pXzHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWAWrWTCJgCs8wSfh1j1PrseV8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:39:f4:f0:9f:f6:cd:53:91:80:b1:9e:0d:14:08:b9:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296016ad64c22600acf3049f8758f53ebb1e57c4
Validity
Not Before: Jun 4 08:00:42 2025 GMT
Not After : Jun 5 08:00:42 2025 GMT
Subject: CN=9104edb834bd1a7d5155b8b7b55145ee1037f216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:98:a7:72:9a:84:1e:5c:cc:f3:a4:e8:4b:7b:
9f:a2:19:1f:b5:f2:a7:80:6e:de:19:d1:06:f4:3e:
7e:cb:f9:87:53:f9:64:63:be:e0:67:bd:b4:5e:8e:
89:8f:8d:a7:b6:fb:a8:e8:57:31:ff:b7:cc:01:80:
94:2e:4d:4d:36:20:95:f2:a9:f6:e8:90:f7:52:83:
fd:54:68:65:4b:ec:72:74:01:11:2f:fa:94:46:7b:
73:78:c7:a3:e5:d2:da:11:50:2d:4e:5a:16:44:00:
f3:fb:ef:70:9b:d9:53:b6:3c:bd:20:86:62:05:82:
6a:66:cc:d7:b9:ec:d2:57:7f:ad:13:e5:39:51:ae:
1b:9d:9e:54:71:9c:c1:fb:d9:ec:2d:af:40:51:cc:
76:06:28:85:b3:85:42:e1:50:65:4b:cd:df:00:1f:
f4:5f:f8:bf:81:2c:37:0d:4b:dc:43:27:8e:1f:d2:
da:72:6d:12:3c:8b:5d:86:99:22:e4:f0:0a:18:69:
2e:21:e6:5d:20:a1:df:59:7f:7e:7b:96:1c:cb:4d:
6f:ea:67:63:e6:04:55:e9:7f:15:22:d0:f0:8e:7b:
74:a2:f6:af:c2:2c:ee:96:b0:88:74:db:e6:01:08:
9a:6d:8f:9a:8f:7c:bc:63:a3:20:b9:fb:1d:93:af:
7a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:04:ED:B8:34:BD:1A:7D:51:55:B8:B7:B5:51:45:EE:10:37:F2:16
X509v3 Authority Key Identifier:
keyid:29:60:16:AD:64:C2:26:00:AC:F3:04:9F:87:58:F5:3E:BB:1E:57:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWAWrWTCJgCs8wSfh1j1PrseV8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:53:af:d2:b1:8f:8a:91:ed:00:87:e6:ff:2f:d2:a5:3d:51:
2f:ef:6f:0d:dc:4a:9f:46:8e:9c:38:1d:4e:02:79:d6:42:56:
eb:7d:3e:f4:eb:aa:27:1f:ad:44:d6:ef:e4:e7:16:5d:9a:da:
c6:5f:46:8c:03:83:d4:ea:7e:5a:67:e7:7a:34:ca:03:94:68:
32:99:a7:41:4f:3d:c8:70:25:0b:4b:cb:91:ec:5e:82:95:ba:
f4:9e:54:02:fe:d6:3d:43:5a:43:4d:e3:08:a7:54:df:7e:1c:
e6:5f:25:1c:2f:7b:1f:37:a1:fa:07:ea:25:21:e4:de:0c:54:
04:0e:5d:14:dc:2d:b7:26:3b:10:09:f3:10:fd:63:ba:82:60:
c6:97:77:07:0e:a4:c9:19:28:84:17:9e:c3:3b:3a:0f:02:8b:
44:b1:b7:37:df:88:9f:ea:0f:de:af:9b:a1:ce:e2:7f:22:70:
68:58:8d:01:46:05:83:d1:db:98:b9:ff:5e:d9:cc:6e:25:3f:
38:88:54:58:6c:af:fd:b7:74:a2:53:19:0d:a3:c4:66:36:aa:
bd:44:92:36:f7:af:4f:e0:c7:ec:ab:80:c6:1b:e6:8f:b4:2b:
d9:3a:8d:b7:ba:88:53:d9:c6:8d:04:58:c6:5c:cf:ad:42:9f:
5b:8f:ea:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 11:51:00 2025 by rpki-client