Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.mft
File: KS-wn35or-lfI5ExFObApqpyb90.mft (raw, json)
Hash identifier: 75GsCWY8SyYR7M0AeQEcgb8h2cepy0U4dZGZG9czVWk=
Subject key identifier: 77:44:7C:76:AD:2D:AA:59:27:52:18:0D:2E:30:AF:BB:6B:FA:7C:E0
Authority key identifier: 29:2F:B0:9F:7E:68:AF:E9:5F:23:91:31:14:E6:C0:A6:AA:72:6F:DD
Certificate issuer: /CN=292fb09f7e68afe95f23913114e6c0a6aa726fdd
Certificate serial: 01987E2E72A8F9619564437E636BE04FCC88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KS-wn35or-lfI5ExFObApqpyb90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.mft
Manifest number: 0332
Signing time: Wed 06 Aug 2025 07:00:29 +0000
Manifest this update: Wed 06 Aug 2025 07:00:29 +0000
Manifest next update: Thu 07 Aug 2025 07:00:29 +0000
Files and hashes: 1: JyTHeWPSw0N2vvDNyoUd8epHXA4.roa (hash: OacdQD8AGHB+uL8UAW3yHrwnc616k4RTRtDRnug3bmo=)
2: KS-wn35or-lfI5ExFObApqpyb90.crl (hash: +etsHFXRYsI7Aod4oiQ9giBi0YNI35MLs7He578Hcmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.mft
rsync://rpki.ripe.net/repository/DEFAULT/KS-wn35or-lfI5ExFObApqpyb90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:2e:72:a8:f9:61:95:64:43:7e:63:6b:e0:4f:cc:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=292fb09f7e68afe95f23913114e6c0a6aa726fdd
Validity
Not Before: Aug 6 07:00:29 2025 GMT
Not After : Aug 7 07:00:29 2025 GMT
Subject: CN=77447c76ad2daa592752180d2e30afbb6bfa7ce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:89:06:ee:c7:4f:e5:ad:20:24:6d:a5:9c:ec:
8d:ef:11:f3:d4:d8:42:ae:ff:fd:b8:d8:48:3e:37:
01:19:4b:1a:10:82:5c:90:6b:e0:42:32:86:1d:24:
bd:e3:7f:3a:f6:23:ae:b3:a6:1a:56:83:4e:90:8a:
bd:d5:d5:4c:94:ab:7f:fa:d1:2c:d3:f4:30:1b:7c:
fc:70:28:0d:88:42:84:fa:23:15:1f:cd:26:af:e5:
ec:1d:fe:89:46:a5:df:1d:d3:a8:55:c9:c5:35:fa:
16:cc:b3:d4:f5:50:b5:c7:b4:2f:ed:85:49:fc:1b:
cc:69:b7:11:0f:e9:14:14:a0:f0:15:fc:58:5d:2c:
06:12:60:a8:d0:d1:4f:3b:84:fd:42:8a:6b:01:7c:
94:0b:b1:16:19:46:67:6e:5f:44:96:93:ea:c7:d1:
aa:6e:9a:b3:b0:bf:d8:de:a3:07:d6:86:ca:c9:8e:
04:9f:59:d0:96:69:1e:85:6e:22:85:c0:0b:6f:01:
75:87:12:00:53:6e:7c:01:47:50:54:a3:71:0e:e1:
6d:f7:e4:bd:6b:f3:18:87:a5:a4:71:5f:1d:85:ec:
37:c3:aa:95:8e:53:93:3b:43:cc:39:e3:ae:a3:c9:
5b:5d:92:e0:3d:ba:44:4e:01:c5:66:79:85:bd:7f:
e6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:44:7C:76:AD:2D:AA:59:27:52:18:0D:2E:30:AF:BB:6B:FA:7C:E0
X509v3 Authority Key Identifier:
keyid:29:2F:B0:9F:7E:68:AF:E9:5F:23:91:31:14:E6:C0:A6:AA:72:6F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KS-wn35or-lfI5ExFObApqpyb90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:05:87:1b:1a:bd:a8:b6:91:8a:7e:47:67:01:1b:3f:a5:0a:
83:49:d7:c1:7b:55:8e:73:63:3c:11:bc:0d:87:86:e4:9c:5f:
c5:93:aa:ea:65:5f:40:76:a6:13:f7:21:e4:90:cd:64:83:89:
ab:e7:2b:0b:e4:2f:a6:02:f2:46:85:86:dd:24:48:43:a9:73:
be:e4:1b:a1:db:fc:1c:05:b0:df:f1:2e:fc:a7:dc:e7:3c:0d:
3e:44:f4:d4:c1:e5:90:dc:b1:cb:83:ed:b8:54:a3:b2:fb:60:
a0:1e:9d:22:96:75:77:d8:e3:bc:f0:70:84:4a:f7:6d:76:f7:
28:25:c3:6d:96:b1:52:d4:06:ab:c6:4a:11:f6:ea:34:3e:bd:
82:70:bf:bb:e8:0e:17:50:10:c4:fb:27:a3:39:82:6e:81:6a:
02:ea:aa:52:ae:80:9a:a3:88:3f:db:9f:25:44:f8:0f:2a:cf:
0e:3f:27:90:55:5a:de:82:ab:de:11:46:da:e6:d2:4d:7b:2b:
77:18:b2:01:9e:84:a5:b1:9b:9a:11:1f:a3:18:94:52:e3:00:
70:b2:36:f2:ba:ba:16:eb:ca:89:74:5e:fa:bf:13:ff:ac:b2:
de:3c:1b:37:d5:79:c9:c8:dc:3a:35:16:e9:83:42:fd:0a:3c:
6c:59:ec:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:27:36 2025 by rpki-client