Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft
File: kwpXLBbQxE93Zlh9kth4ujBUHR4.mft (raw, json)
Hash identifier: iuWCsgvYs86dD4Z3rVF4SsNgcjxpCPzzAoHzK/XWn8k=
Subject key identifier: EC:1B:E1:AB:31:C7:C1:9E:07:0B:D9:7E:FC:19:F1:04:C3:10:FC:10
Authority key identifier: 93:0A:57:2C:16:D0:C4:4F:77:66:58:7D:92:D8:78:BA:30:54:1D:1E
Certificate issuer: /CN=930a572c16d0c44f7766587d92d878ba30541d1e
Certificate serial: 0197711B39D1D381792F9AAFCEFB287DF816
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwpXLBbQxE93Zlh9kth4ujBUHR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft
Manifest number: 0767
Signing time: Sun 15 Jun 2025 01:01:39 +0000
Manifest this update: Sun 15 Jun 2025 01:01:39 +0000
Manifest next update: Mon 16 Jun 2025 01:01:39 +0000
Files and hashes: 1: dDvbinURbnBhghcDsCWr8pNjL-Q.roa (hash: hUZbMhthMOHDXoT8VJO840vVSWFg65GOQ1Sk4GTZvhs=)
2: kwpXLBbQxE93Zlh9kth4ujBUHR4.crl (hash: khK6SjOkqGhaCAj0Q62cqy1gifbPpLKcax6udUxgQws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwpXLBbQxE93Zlh9kth4ujBUHR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1b:39:d1:d3:81:79:2f:9a:af:ce:fb:28:7d:f8:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=930a572c16d0c44f7766587d92d878ba30541d1e
Validity
Not Before: Jun 15 01:01:39 2025 GMT
Not After : Jun 16 01:01:39 2025 GMT
Subject: CN=ec1be1ab31c7c19e070bd97efc19f104c310fc10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:53:38:4d:d0:db:2e:7a:2d:8c:7c:5a:e0:36:
71:4e:10:05:7d:dc:a1:07:31:df:be:87:6e:02:de:
47:e9:f9:7c:c4:40:b1:75:ab:f2:31:74:a6:b8:99:
ee:08:ba:0f:34:6a:bd:46:b5:37:05:55:2c:8e:9f:
18:f9:d1:49:e8:39:47:dc:9b:f0:4c:ca:23:c7:4a:
93:fc:0d:f7:e8:b7:b4:41:44:f9:a2:86:b3:7c:b0:
8e:2d:2d:9c:6c:ac:56:91:32:f3:a4:66:51:b6:4c:
c0:c9:0f:a4:28:97:8d:f0:26:b9:1c:b1:aa:5e:68:
be:3f:ec:28:d0:03:b9:4d:a7:d0:25:c2:fe:fb:67:
d9:a8:4f:c7:6a:68:95:03:ef:a0:75:2b:0b:c8:eb:
03:e8:e9:8b:89:f0:64:89:1c:2c:0b:aa:75:b6:17:
7d:55:ca:ca:97:f9:0f:12:11:a3:96:bd:09:44:4b:
59:46:e6:87:f6:6f:89:4d:00:47:2b:c6:3a:37:75:
38:dc:61:98:5b:bb:5e:b6:f5:bf:89:d5:b0:38:89:
53:ab:63:92:86:55:b8:b7:eb:86:ad:28:e9:cb:ec:
26:8f:c2:f9:f4:84:3e:3b:1e:86:9d:15:05:de:dc:
a4:3c:5a:66:8e:7a:6b:2b:3e:e7:84:e7:0c:68:07:
09:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:1B:E1:AB:31:C7:C1:9E:07:0B:D9:7E:FC:19:F1:04:C3:10:FC:10
X509v3 Authority Key Identifier:
keyid:93:0A:57:2C:16:D0:C4:4F:77:66:58:7D:92:D8:78:BA:30:54:1D:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwpXLBbQxE93Zlh9kth4ujBUHR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:6b:9d:af:02:89:30:b2:f1:5f:bf:41:6a:a3:3e:38:37:ee:
4f:3a:f1:9b:ca:da:fd:bc:d1:72:50:89:e3:c8:ea:0f:3f:0c:
91:de:4a:07:7c:89:41:72:8d:f2:1e:c6:1a:5c:27:73:8c:b2:
6d:f7:9c:59:33:c0:1b:de:0d:c6:db:25:22:fb:4d:52:fa:cb:
93:6c:ec:47:f8:50:ff:cd:80:c8:69:e5:2a:20:88:04:e9:26:
33:c4:28:44:55:c1:aa:32:6b:da:32:51:d1:2e:80:f6:3f:9d:
70:7c:53:16:d2:2b:ed:fb:31:2e:df:fa:fb:86:58:21:84:b3:
bd:dc:27:92:0f:81:88:a1:3a:59:63:80:41:2c:03:e5:07:61:
34:97:9b:76:78:5b:44:d9:21:44:81:85:44:65:02:97:8f:b9:
22:ab:bc:cb:ed:e6:53:77:58:3e:af:5e:97:f5:f4:d9:cf:3b:
16:84:4d:7e:01:f0:07:91:f7:e2:25:09:aa:d7:54:c7:14:f4:
85:0c:7d:4e:7f:5c:d4:57:b8:32:6e:18:ed:bb:67:a7:b5:49:
3f:68:97:5e:45:63:b6:59:fb:4c:bc:c6:98:4d:7c:8f:8e:b1:
95:b0:be:ca:d5:2d:bb:bd:c2:74:d0:8e:f4:a4:82:ab:7c:d7:
1d:28:68:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:33:06 2025 by rpki-client