Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.mft
File: KwviJiMNQJnO6gpKbPTti5AgE1A.mft (raw, json)
Hash identifier: Yg+omgTRh/ALu5LVIKLUTR6/KJwaH9a2mIaax5TQ2/M=
Subject key identifier: 29:A0:7F:E3:E8:CA:08:B5:4D:E0:F7:D8:FB:47:9D:77:C3:65:51:41
Authority key identifier: 2B:0B:E2:26:23:0D:40:99:CE:EA:0A:4A:6C:F4:ED:8B:90:20:13:50
Certificate issuer: /CN=2b0be226230d4099ceea0a4a6cf4ed8b90201350
Certificate serial: 01977A8B40AB3E729195935DC4C0E5D77B89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KwviJiMNQJnO6gpKbPTti5AgE1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.mft
Manifest number: 09A1
Signing time: Mon 16 Jun 2025 21:00:35 +0000
Manifest this update: Mon 16 Jun 2025 21:00:35 +0000
Manifest next update: Tue 17 Jun 2025 21:00:35 +0000
Files and hashes: 1: KwviJiMNQJnO6gpKbPTti5AgE1A.crl (hash: c0PxOEAorbdwzbHmXUn0C70Jr063cPFshdvqVsExGSg=)
2: lhCB4VKeVIat8YaI7khS8LgNAz0.roa (hash: QGNe/S+LDe3zqs3K0JGfp0BhDLdHDbq+MTuXcKT1Qd0=)
3: qi0ZqRW6bWCGCBOudyRc_ZU33PM.roa (hash: Y/jI82xosnyON1Rhfs7vCWE2E/8RN3XifMYZrXwc2DQ=)
4: st8xnj4jJi6Xuwa7MiNbU3-F0wo.roa (hash: H2Z+tAqzPpLr9TIzWhq27NXaGhJV330iUQnoQkRKlKo=)
5: ymk3s2uYAjIifXFebx0Gs2GCpZg.roa (hash: 1iZB8mSVVI0xWBNNoWKTn+58QXVIuSn2YESYam7CY+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/KwviJiMNQJnO6gpKbPTti5AgE1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 21:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:8b:40:ab:3e:72:91:95:93:5d:c4:c0:e5:d7:7b:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b0be226230d4099ceea0a4a6cf4ed8b90201350
Validity
Not Before: Jun 16 21:00:35 2025 GMT
Not After : Jun 17 21:00:35 2025 GMT
Subject: CN=29a07fe3e8ca08b54de0f7d8fb479d77c3655141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:bd:64:6c:c5:12:95:c3:a6:c5:fb:9c:4a:f6:
ee:59:70:b3:d3:22:d7:16:3e:b3:50:66:77:a8:1d:
49:ac:45:b2:5f:47:02:94:79:25:65:db:c3:06:52:
d1:ae:4d:b6:7f:b9:94:53:68:cb:ad:c9:e9:b6:7f:
f7:a2:6e:a9:67:84:4e:99:70:e1:60:a8:f5:ed:6b:
c9:65:37:7f:49:15:ef:1b:45:87:62:c1:cc:53:1c:
db:fc:95:5c:f9:53:75:4d:60:4a:2e:4e:6e:19:bf:
53:e6:92:5e:72:d9:20:d3:5d:a6:0e:07:2f:d4:4f:
67:3d:7e:37:f0:40:6c:ce:6e:f0:56:b1:81:48:e8:
63:15:8e:fe:00:5f:17:08:55:a3:1a:ae:5b:4b:b8:
15:69:c7:9d:03:e8:4c:39:18:1d:b9:72:0b:3d:30:
4f:01:8a:99:19:72:9b:98:74:e1:52:21:20:ba:a5:
62:0d:06:04:56:47:74:30:00:8a:2c:31:f5:42:63:
cb:f2:61:d0:fb:db:8f:a8:75:04:7e:c4:f6:8a:00:
e8:a4:73:6b:90:59:63:54:25:ae:61:2a:8d:23:ca:
c9:16:11:f5:9b:23:69:2e:2e:bf:86:02:b3:27:3d:
d6:c2:ec:2b:05:73:9e:34:ae:09:8a:90:8c:91:1b:
18:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A0:7F:E3:E8:CA:08:B5:4D:E0:F7:D8:FB:47:9D:77:C3:65:51:41
X509v3 Authority Key Identifier:
keyid:2B:0B:E2:26:23:0D:40:99:CE:EA:0A:4A:6C:F4:ED:8B:90:20:13:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwviJiMNQJnO6gpKbPTti5AgE1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:26:e3:fd:87:32:6f:9a:b8:a9:9e:07:ee:2c:8b:ec:06:20:
53:04:e2:62:bf:0d:09:e4:4e:c0:bf:69:0e:f3:0b:5b:a4:77:
44:d7:a6:4f:38:a0:10:fa:ab:ad:d1:61:99:54:2f:1c:6c:53:
8b:07:a0:e2:38:17:04:17:78:61:de:52:a7:d5:54:43:75:c3:
b1:cf:63:0a:d3:bf:b2:38:0e:ee:e6:99:09:93:b0:7e:9f:f2:
e1:19:e6:ee:0e:2a:fe:a7:8b:1b:94:07:e7:fd:05:09:4c:4c:
5f:fb:0d:b1:41:ab:24:e3:eb:41:06:22:7a:9a:0a:30:b6:0b:
3a:09:03:76:7f:8b:cc:e7:c7:81:43:92:dc:52:54:eb:b7:08:
d3:d5:7c:52:23:e3:29:f2:87:70:ab:46:62:1d:6b:05:e1:c5:
01:4e:fa:7e:88:76:ae:c7:68:64:a6:d4:f3:26:c5:d4:ff:a6:
a7:e2:c3:62:db:5c:ec:35:c5:63:12:c0:53:e6:1c:3f:65:76:
bb:78:62:74:68:fb:ef:e0:6d:e5:2a:e3:e5:59:ad:bb:ba:b1:
32:0e:57:b4:be:be:c6:4f:6d:ff:cf:11:03:7c:21:82:d2:82:
35:b5:13:49:1e:1e:f2:1f:d3:4b:b2:87:aa:67:36:a2:1f:b2:
c0:bb:46:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 01:24:33 2025 by rpki-client