Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/077a50-45b6-4a38-9db9-950c7e73245c/1/kwNiKzxU5F9BZvMBeY-G27pHGAw.mft
File: kwNiKzxU5F9BZvMBeY-G27pHGAw.mft (raw, json)
Hash identifier: dTewLb7f32bLuborgTE3XY9qT/Lu5Tcr/tykVBq24lw=
Subject key identifier: 74:46:2F:0A:E6:2B:1E:B4:29:7F:8B:26:4D:7C:5C:D6:E4:45:50:C9
Authority key identifier: 93:03:62:2B:3C:54:E4:5F:41:66:F3:01:79:8F:86:DB:BA:47:18:0C
Certificate issuer: /CN=9303622b3c54e45f4166f301798f86dbba47180c
Certificate serial: 01968C5D2B6AB184FCBD669A6D38FF66B5E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwNiKzxU5F9BZvMBeY-G27pHGAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/077a50-45b6-4a38-9db9-950c7e73245c/1/kwNiKzxU5F9BZvMBeY-G27pHGAw.mft
Manifest number: 06B4
Signing time: Thu 01 May 2025 15:00:38 +0000
Manifest this update: Thu 01 May 2025 15:00:38 +0000
Manifest next update: Fri 02 May 2025 15:00:38 +0000
Files and hashes: 1: kwNiKzxU5F9BZvMBeY-G27pHGAw.crl (hash: qGAY20TU1QCC0TCx3VDk7TSeVy0pw0lRuvetAFwtSZk=)
2: v_98mZARWXkG0c7MrFhUfz1ZnSk.roa (hash: CoGKVro1tI7BKUl2OeE8GJuS6b7gkbb5BZSSNbzRr+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/077a50-45b6-4a38-9db9-950c7e73245c/1/kwNiKzxU5F9BZvMBeY-G27pHGAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/077a50-45b6-4a38-9db9-950c7e73245c/1/kwNiKzxU5F9BZvMBeY-G27pHGAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwNiKzxU5F9BZvMBeY-G27pHGAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 15:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8c:5d:2b:6a:b1:84:fc:bd:66:9a:6d:38:ff:66:b5:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9303622b3c54e45f4166f301798f86dbba47180c
Validity
Not Before: May 1 15:00:38 2025 GMT
Not After : May 2 15:00:38 2025 GMT
Subject: CN=74462f0ae62b1eb4297f8b264d7c5cd6e44550c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:11:b6:c0:a4:9c:86:3a:e9:2c:38:ca:71:ab:
49:41:fb:b9:4d:3a:99:3a:fc:6e:d4:c9:2d:aa:ef:
ac:06:33:c4:cf:89:f4:a3:ea:53:91:79:57:88:c2:
55:ab:1f:94:52:d8:8a:ad:92:65:88:c2:22:f8:f9:
8d:a4:14:11:98:1a:70:9c:f4:e9:de:bc:58:ce:2a:
51:2c:5d:42:f9:33:ee:88:7f:65:25:55:0d:9c:a6:
81:f8:37:ce:5a:30:7d:d8:5a:a9:8c:91:ed:f6:da:
95:55:21:a5:ed:3f:7a:77:bd:1a:72:72:54:54:5e:
7d:9d:9a:f8:4c:8e:7b:a2:78:f1:91:1f:36:12:3e:
77:8e:69:36:7c:11:97:18:37:61:50:b2:d7:88:22:
0c:72:b9:2d:37:6e:57:63:e2:2a:5f:df:fc:3f:0e:
26:d9:34:a1:71:9f:7e:dd:34:b8:45:68:d7:d5:ac:
18:1e:ce:61:8d:93:4e:ef:74:b8:dd:83:a4:6a:b8:
13:bb:74:97:c7:86:9a:54:a0:41:9e:c2:70:93:b0:
d6:fb:f0:7b:37:be:da:3d:04:8f:13:72:d2:59:6d:
b3:6f:41:b7:be:49:c4:53:8f:97:eb:b8:88:cd:4e:
5a:3c:8b:81:2f:08:d2:e8:85:6e:60:4e:c3:dc:13:
60:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:46:2F:0A:E6:2B:1E:B4:29:7F:8B:26:4D:7C:5C:D6:E4:45:50:C9
X509v3 Authority Key Identifier:
keyid:93:03:62:2B:3C:54:E4:5F:41:66:F3:01:79:8F:86:DB:BA:47:18:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwNiKzxU5F9BZvMBeY-G27pHGAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/077a50-45b6-4a38-9db9-950c7e73245c/1/kwNiKzxU5F9BZvMBeY-G27pHGAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/077a50-45b6-4a38-9db9-950c7e73245c/1/kwNiKzxU5F9BZvMBeY-G27pHGAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:07:c3:e3:af:4f:62:be:c2:b9:11:55:06:ed:3a:4b:a5:e4:
9d:8e:85:b9:e8:54:c2:f4:5d:43:ed:c4:f8:37:6a:90:5f:e8:
b0:f4:f9:ce:80:eb:28:ed:65:fd:42:f3:66:92:4d:68:01:a3:
71:0e:b3:34:e7:3a:cb:c3:19:1d:80:39:4c:05:79:02:45:2b:
95:d4:04:f7:85:8e:ea:91:26:36:b7:d0:3c:86:1a:c7:1a:63:
18:a6:de:52:04:92:f9:35:66:9c:4c:9c:2e:3d:d8:b0:aa:7c:
a8:0e:1d:6d:f5:e5:64:e9:fa:8a:33:06:c8:3b:11:9d:d3:de:
6a:1a:c4:43:2c:9d:1f:b7:b9:55:4f:57:67:c6:db:c2:5f:93:
4a:9f:b7:d4:fb:22:7c:98:fd:66:b8:66:82:57:66:38:68:61:
be:fc:f6:d4:ea:72:8c:68:c2:b6:27:0f:8c:e1:15:f0:1f:84:
d9:8c:41:44:81:26:f8:28:61:16:2e:65:c9:ce:af:0b:11:94:
1f:c8:b0:d6:c9:79:6d:95:20:c2:97:54:f0:a3:f7:33:61:4e:
3f:cf:dd:a8:72:29:c2:9d:87:c5:c2:fe:35:a1:c2:88:f5:41:
85:79:2b:7a:16:a3:cc:cd:de:43:18:4c:d5:48:f2:5e:44:46:
1a:b0:a1:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 00:05:26 2025 by rpki-client