Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.mft
File: kwy6S0MwS1HEvd-9QzF4KtkRAso.mft (raw, json)
Hash identifier: xRM4KCBl4/NHInd/pj3OToN5H+5pAl6Hd3FYhqUPdmU=
Subject key identifier: 00:8D:49:57:2F:FA:A3:06:88:D4:36:50:52:57:60:8F:C9:A2:1C:9F
Authority key identifier: 93:0C:BA:4B:43:30:4B:51:C4:BD:DF:BD:43:31:78:2A:D9:11:02:CA
Certificate issuer: /CN=930cba4b43304b51c4bddfbd4331782ad91102ca
Certificate serial: 01988BB357AE1F75D69879DE93AE02E4E6AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwy6S0MwS1HEvd-9QzF4KtkRAso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.mft
Manifest number: 033C
Signing time: Fri 08 Aug 2025 22:00:43 +0000
Manifest this update: Fri 08 Aug 2025 22:00:43 +0000
Manifest next update: Sat 09 Aug 2025 22:00:43 +0000
Files and hashes: 1: kwy6S0MwS1HEvd-9QzF4KtkRAso.crl (hash: qeLecFy1aBCNbnA4g/FcOS77CvpaHpWSqURHvJvcz84=)
2: uxtuL63qPRDpKVk1ikR7XA0jVWo.roa (hash: MOBvDlpT4Tx/Y9+52ugnxgyKuM5ZQrSPEm8NwRXVQVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwy6S0MwS1HEvd-9QzF4KtkRAso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:b3:57:ae:1f:75:d6:98:79:de:93:ae:02:e4:e6:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=930cba4b43304b51c4bddfbd4331782ad91102ca
Validity
Not Before: Aug 8 22:00:43 2025 GMT
Not After : Aug 9 22:00:43 2025 GMT
Subject: CN=008d49572ffaa30688d436505257608fc9a21c9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b3:bc:43:83:00:d6:a9:af:ef:47:b6:ac:49:
7a:db:2b:31:e6:37:95:e1:e0:88:ba:12:64:f6:f3:
0d:6b:92:93:38:01:a7:9f:10:5a:ab:48:bd:08:94:
17:e3:85:c1:bd:d8:1d:28:0e:05:64:2d:1b:d7:0d:
7f:59:36:3c:2c:b8:89:57:44:b8:43:fd:ff:b4:01:
d9:52:2d:d9:12:38:3b:af:17:53:fa:98:53:85:58:
11:7e:f6:ac:d1:63:0a:0a:10:cf:9d:26:6f:16:65:
90:03:04:2f:07:79:a4:1e:51:35:d4:aa:68:29:1d:
96:f8:b9:8e:5d:cd:96:4c:9f:9a:e3:52:44:8c:c6:
2b:eb:60:ea:30:31:b8:d6:7c:79:7f:33:e0:3a:fb:
d1:60:be:41:ef:65:de:a5:45:01:1d:f4:f5:8f:fe:
a9:d5:3e:3e:3d:35:1e:3f:0e:77:17:30:44:c3:04:
e3:4f:26:71:20:0a:e3:1a:5a:c5:db:bf:c6:c4:6e:
57:e7:7b:26:5d:8d:4b:45:fc:f3:51:e2:88:2d:b3:
21:44:3d:2e:d9:b7:a2:50:3d:99:43:4d:ce:ab:92:
9c:8f:1d:3b:7c:61:28:39:c6:19:40:d3:b8:b4:a5:
fc:7c:80:c1:44:de:93:10:07:91:18:22:4a:6f:da:
bf:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:8D:49:57:2F:FA:A3:06:88:D4:36:50:52:57:60:8F:C9:A2:1C:9F
X509v3 Authority Key Identifier:
keyid:93:0C:BA:4B:43:30:4B:51:C4:BD:DF:BD:43:31:78:2A:D9:11:02:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwy6S0MwS1HEvd-9QzF4KtkRAso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:d4:0c:f5:8c:55:83:89:03:a7:ba:a9:4d:52:a7:8f:69:ed:
c2:74:96:47:d5:5e:cc:5b:a4:07:35:33:1c:8b:33:b1:0d:18:
18:80:fc:5c:d5:a3:02:9c:17:72:d8:7c:c8:c2:e7:27:01:28:
97:7c:fd:e5:a2:3d:fa:c6:b8:df:66:3e:14:3f:2c:5c:d8:6e:
43:af:14:a2:23:79:b7:bd:81:be:01:ce:9c:59:17:f0:d9:ce:
b9:81:86:3a:f4:e5:e1:c5:f0:47:ae:13:04:37:c7:fa:de:29:
f7:b6:26:c3:6c:5c:bf:57:b9:7f:26:ee:e1:c8:23:98:79:24:
51:f8:66:f4:cd:1d:ca:c8:d8:64:ac:2f:37:09:45:b5:94:89:
6b:87:7e:f0:71:61:f7:35:8e:35:8a:93:93:cd:23:80:06:4a:
e2:4d:55:0c:17:37:1a:0f:21:ed:24:55:7c:73:85:b5:0e:fb:
d5:dc:2b:fb:60:35:10:3d:af:fe:78:fa:55:3d:68:53:09:57:
d6:85:ba:92:37:2f:c5:9f:5c:18:e2:29:21:22:01:74:14:73:
b6:75:25:97:07:84:37:70:eb:72:60:40:e0:90:86:14:7a:07:
2a:1e:f4:f0:8e:a9:8c:58:b8:14:34:bc:82:a5:0d:72:e5:e6:
8d:c8:d3:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:54:06 2025 by rpki-client