Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
File: kwHqBZY8l1byjuLpi488xHncn1g.mft (raw, json)
Hash identifier: 22QvvGncRBERpYu8Bt3SykIiMqVv2Y8WIjRf85TX1k8=
Subject key identifier: DD:B6:01:F3:47:6D:39:9A:13:BB:45:F9:FF:FB:4C:80:32:DA:68:E8
Authority key identifier: 93:01:EA:05:96:3C:97:56:F2:8E:E2:E9:8B:8F:3C:C4:79:DC:9F:58
Certificate issuer: /CN=9301ea05963c9756f28ee2e98b8f3cc479dc9f58
Certificate serial: 01976D746D01E9034B4652512B67E601AA57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 08:00:36 +0000
Manifest this update: Sat 14 Jun 2025 08:00:36 +0000
Manifest next update: Sun 15 Jun 2025 08:00:36 +0000
Files and hashes: 1: TVR9Wcx95L9uIbI7vmRK3_ppXuA.roa (hash: FBGg+DHw7jOc497O265+HPovAlPdSEs0qwJnAdItW6I=)
2: UvYnHc7rFlBw3j4tqyHKN3v104E.roa (hash: 6QDgTXlr47CFI8bSc1FSdC5Ii7Qu4oH4gM2ZxRc6gQc=)
3: bdOSuRKRee1uOsbVObRylNDB0a0.roa (hash: gjO8qJZwFaEvDikQnhsOULa/ARdOkiQLGR4fYx/iUVY=)
4: kwHqBZY8l1byjuLpi488xHncn1g.crl (hash: SM7o10keaOlKQDgs4zaJ1SRIWUdqSXc1ZrkmUB4sBRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:6d:01:e9:03:4b:46:52:51:2b:67:e6:01:aa:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9301ea05963c9756f28ee2e98b8f3cc479dc9f58
Validity
Not Before: Jun 14 08:00:36 2025 GMT
Not After : Jun 15 08:00:36 2025 GMT
Subject: CN=ddb601f3476d399a13bb45f9fffb4c8032da68e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:31:d1:15:0f:94:b5:8a:7e:c5:b0:aa:30:af:
cc:4d:48:54:89:32:1d:5a:81:0a:2a:de:c2:7f:37:
c9:8c:56:fa:5f:12:73:fd:99:3e:2d:42:f9:32:c4:
36:08:b9:33:7f:af:5c:53:31:f1:c6:fd:81:3e:2d:
a7:2c:71:2c:6c:da:53:2c:96:5e:ee:ce:b8:32:1b:
bf:23:e0:f6:34:32:25:4a:5c:7e:c5:f3:9b:17:2b:
4d:84:4b:61:65:b2:7f:87:46:c7:48:4e:d2:f8:b5:
75:17:2b:4e:3d:49:8b:b6:54:e4:d9:86:4e:5c:f5:
79:1e:a9:2e:2f:bc:74:92:09:71:11:60:a4:09:92:
61:54:3b:2f:01:ad:95:99:50:f9:2f:3c:f3:06:17:
5a:c6:29:fb:4d:45:46:6b:7e:ee:92:8d:ca:4c:90:
6c:11:9b:be:cd:7f:fc:d8:61:b0:bc:4a:3a:d0:0d:
b7:b7:d9:fc:ac:35:ef:3a:d5:19:3c:b9:1b:9e:20:
c7:cc:a6:b9:0d:92:44:19:95:64:1c:f1:6b:6f:17:
84:16:0a:ab:8a:b4:c7:68:45:6f:be:ac:5d:a9:90:
3f:d7:92:49:93:a1:3b:20:2c:4f:99:5b:7b:1c:ba:
c4:25:02:7a:34:ca:9b:ab:71:43:2c:ec:f4:7f:f3:
0b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:B6:01:F3:47:6D:39:9A:13:BB:45:F9:FF:FB:4C:80:32:DA:68:E8
X509v3 Authority Key Identifier:
keyid:93:01:EA:05:96:3C:97:56:F2:8E:E2:E9:8B:8F:3C:C4:79:DC:9F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:7b:09:f0:bc:cf:0e:8a:03:97:a4:d1:91:38:24:1c:72:d2:
85:5f:19:47:e0:d5:1d:4b:43:f5:da:6f:5a:33:3f:b7:04:57:
26:c7:74:3c:f2:09:ff:69:a7:b2:06:00:2c:80:9e:b9:35:9e:
7e:9d:39:61:a7:a1:cb:78:86:8c:2a:8a:c0:0f:cb:0e:fa:be:
7b:1e:b8:0d:41:ff:6b:8b:1e:00:9e:ec:69:27:a6:25:17:91:
43:03:e4:89:4e:d3:bc:e4:a9:b0:78:65:76:b4:c6:86:7d:ad:
2f:27:8c:24:59:2a:e1:51:0f:dc:11:8d:87:d8:5a:84:93:15:
65:5d:56:34:4b:61:67:88:11:8f:7f:de:31:f0:8e:97:9c:ab:
f8:b3:53:53:cb:93:a0:74:8d:c1:5d:b3:55:3e:d9:92:3e:25:
a2:57:75:4b:22:9a:eb:0e:4a:e9:52:43:b2:39:43:20:59:03:
35:b1:24:62:d3:10:c1:62:9b:99:1b:dd:b0:70:ff:5d:cf:bf:
43:23:76:79:5e:12:4c:d3:db:b8:89:69:c8:97:34:53:c2:dc:
24:dc:96:b7:f0:2b:6d:57:b8:95:b3:6e:07:bf:e3:1e:ea:f7:
eb:10:ab:a3:10:8e:af:be:ac:30:e9:bd:a5:48:55:5d:da:31:
9c:06:3a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:14:21 2025 by rpki-client