Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/ecfafc-9115-4ec2-ae11-07f1259feb13/1/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.mft
File: kwk3JGTFmj3Y7NYyFbAYGXBlWKY.mft (raw, json)
Hash identifier: /qxj45893w/P4/HV07wdSdw5Ld1TIInnVkZyLNs2yIY=
Subject key identifier: CE:6E:D8:ED:D5:D4:BD:72:C4:38:43:E7:C1:FE:D3:7B:05:56:D4:FC
Authority key identifier: 93:09:37:24:64:C5:9A:3D:D8:EC:D6:32:15:B0:18:19:70:65:58:A6
Certificate issuer: /CN=9309372464c59a3dd8ecd63215b01819706558a6
Certificate serial: 0197737642DC37FECBF02E4AE85AADAB7B8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/ecfafc-9115-4ec2-ae11-07f1259feb13/1/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.mft
Manifest number: 05BC
Signing time: Sun 15 Jun 2025 12:00:19 +0000
Manifest this update: Sun 15 Jun 2025 12:00:19 +0000
Manifest next update: Mon 16 Jun 2025 12:00:19 +0000
Files and hashes: 1: kwk3JGTFmj3Y7NYyFbAYGXBlWKY.crl (hash: KoExBjf8mOzNnPSqxWsLhGf+iDs2ak2OsuLgjDTgyRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/ecfafc-9115-4ec2-ae11-07f1259feb13/1/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/ecfafc-9115-4ec2-ae11-07f1259feb13/1/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 12:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:76:42:dc:37:fe:cb:f0:2e:4a:e8:5a:ad:ab:7b:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9309372464c59a3dd8ecd63215b01819706558a6
Validity
Not Before: Jun 15 12:00:19 2025 GMT
Not After : Jun 16 12:00:19 2025 GMT
Subject: CN=ce6ed8edd5d4bd72c43843e7c1fed37b0556d4fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:16:89:a9:8b:b2:8f:c7:8a:ea:ed:c1:3c:f6:
ac:f7:28:90:ac:25:d5:53:da:ea:30:56:77:f5:09:
9d:80:90:42:ab:ca:3f:7b:4e:2c:8f:9e:1d:b7:01:
be:72:d3:c2:9b:8a:a8:fd:a6:25:97:6f:dd:0c:3c:
d5:92:e5:f5:a4:16:76:e2:e5:98:e2:24:30:4d:2d:
a8:e7:8c:62:3f:98:45:0b:e5:17:35:46:02:54:db:
02:c1:fe:8c:13:0d:dc:2e:12:65:e4:0b:90:b8:d7:
51:7f:40:d6:63:e7:f8:3a:ca:34:2e:f9:d0:5e:4e:
a1:6c:6a:2b:86:a6:3e:f0:7d:a5:22:a1:2f:36:06:
7a:cb:4b:43:d6:06:12:47:c2:da:55:eb:b5:53:da:
bf:b8:cc:7b:f2:db:53:aa:81:ce:a1:66:f3:e4:b8:
35:f7:ac:a0:8e:f9:5a:bb:44:f1:42:46:bc:aa:67:
5d:fd:cc:82:66:b6:46:16:f1:d7:05:18:fc:f0:44:
ed:c9:f2:b5:45:4b:f1:a2:66:a8:47:6b:40:86:b7:
4e:41:dd:01:ce:85:54:af:78:27:1d:f9:f7:9d:12:
e1:6a:b8:90:ab:b3:49:59:9b:e9:fb:43:31:b5:7c:
17:81:8d:5a:5d:ce:54:bc:fa:85:e6:a8:40:f9:60:
d9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:6E:D8:ED:D5:D4:BD:72:C4:38:43:E7:C1:FE:D3:7B:05:56:D4:FC
X509v3 Authority Key Identifier:
keyid:93:09:37:24:64:C5:9A:3D:D8:EC:D6:32:15:B0:18:19:70:65:58:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/ecfafc-9115-4ec2-ae11-07f1259feb13/1/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/ecfafc-9115-4ec2-ae11-07f1259feb13/1/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:45:0f:11:73:1e:19:68:0b:ab:51:6c:bc:91:74:6c:8d:80:
c7:e9:5b:30:16:a0:da:02:9a:a8:28:2f:19:86:b0:7a:1b:6a:
6e:bc:6e:ab:c9:83:fd:8f:68:f3:4d:48:46:f6:1b:16:ce:43:
5f:97:c0:ca:a6:f7:4f:d6:af:44:76:95:58:7a:2f:3f:01:a0:
c5:b8:8f:d4:e2:e2:c6:6a:ef:5c:fe:ae:a8:b0:8a:2d:52:49:
16:d8:18:9e:02:2e:1e:fe:b8:5a:4c:49:9c:d7:47:bd:18:46:
8f:cf:40:b6:e6:1f:37:24:62:65:20:cc:14:4d:fe:d9:b3:ee:
f2:91:55:2e:a6:8f:74:08:48:54:3b:8d:d0:33:23:23:b9:99:
22:4f:e9:d5:cc:ec:cb:48:d0:d4:59:c2:8d:5f:8b:fe:fa:06:
c3:ce:c1:58:a3:85:a9:87:e5:02:00:6a:6d:ca:59:64:ba:8c:
30:82:4e:5e:ca:9a:aa:97:86:f2:d1:c0:5d:41:4e:cb:85:be:
d3:d9:d5:af:e9:20:84:1c:f9:9c:09:f2:2f:74:ce:cd:a1:a3:
97:b3:c6:66:38:65:8a:0e:1e:ab:09:c7:2d:f5:14:e0:ed:ee:
46:16:c4:40:03:59:f9:9d:b3:df:16:7d:c7:10:36:ec:7e:f2:
69:59:93:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:32:57 2025 by rpki-client