Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.mft
File: KS-wn35or-lfI5ExFObApqpyb90.mft (raw, json)
Hash identifier: a48NWHuySA1vamUv1V+yJqF9Y4sdbkIYiU7xXu0b504=
Subject key identifier: 60:6D:97:3C:FC:13:23:BB:53:C7:09:38:1F:7D:21:9C:6F:FB:7A:6D
Authority key identifier: 29:2F:B0:9F:7E:68:AF:E9:5F:23:91:31:14:E6:C0:A6:AA:72:6F:DD
Certificate issuer: /CN=292fb09f7e68afe95f23913114e6c0a6aa726fdd
Certificate serial: 01967E6A75B12DD7D468CC2239B0EC5A7A8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KS-wn35or-lfI5ExFObApqpyb90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.mft
Manifest number: 0229
Signing time: Mon 28 Apr 2025 22:00:28 +0000
Manifest this update: Mon 28 Apr 2025 22:00:28 +0000
Manifest next update: Tue 29 Apr 2025 22:00:28 +0000
Files and hashes: 1: JyTHeWPSw0N2vvDNyoUd8epHXA4.roa (hash: OacdQD8AGHB+uL8UAW3yHrwnc616k4RTRtDRnug3bmo=)
2: KS-wn35or-lfI5ExFObApqpyb90.crl (hash: NR/R0kgE6DXxaSdhZWfad4Dq9fBlpr/tC+N4oUgHvBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.mft
rsync://rpki.ripe.net/repository/DEFAULT/KS-wn35or-lfI5ExFObApqpyb90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 22:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:6a:75:b1:2d:d7:d4:68:cc:22:39:b0:ec:5a:7a:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=292fb09f7e68afe95f23913114e6c0a6aa726fdd
Validity
Not Before: Apr 28 22:00:28 2025 GMT
Not After : Apr 29 22:00:28 2025 GMT
Subject: CN=606d973cfc1323bb53c709381f7d219c6ffb7a6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:99:18:c7:6a:49:c0:76:3d:72:9a:b8:bb:c2:
29:89:15:dc:5c:ad:65:f8:bc:2a:0a:6b:76:c4:fe:
ef:89:39:f1:14:21:1b:f4:36:27:6a:92:13:e7:8e:
09:da:15:e6:ef:de:4d:42:12:cd:cc:b2:f0:bb:09:
24:48:70:2f:6a:31:b8:68:92:f0:22:f7:69:83:80:
c2:ef:75:17:78:d0:c1:84:ef:33:47:79:8e:37:1f:
a0:70:ae:7c:e3:94:4c:a6:d4:98:85:6b:81:49:6c:
d6:c2:0a:34:6e:16:ee:71:25:de:0a:e4:ba:73:17:
6a:ab:36:42:5b:a7:bd:f3:01:9d:68:4f:db:6e:d1:
17:28:f6:79:d4:0f:96:d2:74:6b:1f:aa:7d:25:b7:
16:e0:c2:1f:bf:23:c5:c5:43:eb:cd:96:4b:8a:1b:
c6:38:d4:c2:2f:30:3f:a7:cf:8e:18:7b:2b:7a:a0:
1e:6c:21:6b:bf:48:63:3a:ee:62:68:3d:3e:60:21:
e2:f7:70:d9:06:ed:8d:01:09:c8:e0:cf:73:44:0a:
46:f6:11:62:24:35:a8:12:3f:4f:e5:85:d7:43:f5:
e6:50:2b:a2:d9:6a:88:33:da:af:7f:1f:b6:0a:a1:
c6:d6:4a:1a:b6:e5:12:d5:3c:de:ec:09:b7:da:01:
04:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:6D:97:3C:FC:13:23:BB:53:C7:09:38:1F:7D:21:9C:6F:FB:7A:6D
X509v3 Authority Key Identifier:
keyid:29:2F:B0:9F:7E:68:AF:E9:5F:23:91:31:14:E6:C0:A6:AA:72:6F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KS-wn35or-lfI5ExFObApqpyb90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:15:cd:5b:50:a4:14:e4:87:4a:81:5e:d0:15:0e:cd:5c:81:
1c:f8:bc:c5:b7:40:0f:2a:f7:d1:18:b3:d2:aa:91:4d:7c:e9:
c0:86:e0:79:f3:ea:4c:db:e9:76:71:69:46:26:23:22:3f:40:
93:eb:80:5f:80:a7:72:71:cf:3c:2a:9e:3d:1b:77:79:f5:e3:
27:ca:a0:0f:4d:98:d2:01:80:b8:6a:40:2d:40:83:10:0f:bc:
e3:1f:b7:05:31:61:91:7d:66:7d:31:70:32:4c:6f:94:a3:fe:
1f:15:4c:99:5d:b5:12:5c:dd:53:19:df:8b:c0:5c:9e:db:a1:
f1:c4:0d:20:e5:62:bd:8c:6a:7e:48:77:2e:56:de:59:51:2b:
07:e3:68:be:fc:c8:3b:11:45:dc:80:cb:26:6f:b9:a6:ab:01:
f1:00:b0:2f:c4:22:d8:c2:0b:30:5e:9c:34:bc:d2:29:89:1a:
06:fc:c3:a8:10:b8:f6:88:b4:36:9b:f5:b0:20:d2:46:2f:dd:
4e:90:46:b1:31:de:73:ec:5a:d1:ae:f3:ed:b1:be:2e:76:23:
96:ad:00:a4:8d:48:1a:69:5f:96:91:26:fb:29:9f:5f:2c:26:
90:33:73:94:5c:4e:79:56:b7:cd:3a:c5:4f:c9:3b:1e:7a:4a:
06:76:bd:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ+anWxLdfUaMwiObDsWnqKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MmZiMDlmN2U2OGFmZTk1ZjIzOTEzMTE0ZTZjMGE2YWE3
MjZmZGQwHhcNMjUwNDI4MjIwMDI4WhcNMjUwNDI5MjIwMDI4WjAzMTEwLwYDVQQD
Eyg2MDZkOTczY2ZjMTMyM2JiNTNjNzA5MzgxZjdkMjE5YzZmZmI3YTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5kYx2pJwHY9cpq4u8IpiRXcXK1l
+LwqCmt2xP7viTnxFCEb9DYnapIT544J2hXm795NQhLNzLLwuwkkSHAvajG4aJLw
Ivdpg4DC73UXeNDBhO8zR3mONx+gcK5845RMptSYhWuBSWzWwgo0bhbucSXeCuS6
cxdqqzZCW6e98wGdaE/bbtEXKPZ51A+W0nRrH6p9JbcW4MIfvyPFxUPrzZZLihvG
ONTCLzA/p8+OGHsreqAebCFrv0hjOu5iaD0+YCHi93DZBu2NAQnI4M9zRApG9hFi
JDWoEj9P5YXXQ/XmUCui2WqIM9qvfx+2CqHG1koatuUS1Tze7Am32gEEMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGBtlzz8EyO7U8cJOB99IZxv+3ptMB8GA1UdIwQY
MBaAFCkvsJ9+aK/pXyORMRTmwKaqcm/dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1Mtd24zNW9yLWxmSTVFeEZPYkFwcXB5YjkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9lMTMxMTItNTc1OC00NTUyLWIyYWQt
ZWQxYjliOGU2NDcwLzEvS1Mtd24zNW9yLWxmSTVFeEZPYkFwcXB5YjkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9lMTMxMTItNTc1OC00NTUyLWIyYWQtZWQxYjliOGU2NDcw
LzEvS1Mtd24zNW9yLWxmSTVFeEZPYkFwcXB5YjkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEBXNW1Ck
FOSHSoFe0BUOzVyBHPi8xbdADyr30Riz0qqRTXzpwIbgefPqTNvpdnFpRiYjIj9A
k+uAX4CncnHPPCqePRt3efXjJ8qgD02Y0gGAuGpALUCDEA+84x+3BTFhkX1mfTFw
MkxvlKP+HxVMmV21ElzdUxnfi8Bcntuh8cQNIOVivYxqfkh3LlbeWVErB+NovvzI
OxFF3IDLJm+5pqsB8QCwL8Qi2MILMF6cNLzSKYkaBvzDqBC49oi0Npv1sCDSRi/d
TpBGsTHec+xa0a7z7bG+LnYjlq0ApI1IGmlflpEm+ymfXywmkDNzlFxOeVa3zTrF
T8k7HnpKBna9lg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 02:27:41 2025 by rpki-client