Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
File: kwpGPWfktC2GOazfDRVCT4LxmmA.mft (raw, json)
Hash identifier: +GrQMcz6X6ZfiDW3iVmla+mENk1wRet7TTRas3RFzBI=
Subject key identifier: 25:6B:22:32:7C:81:43:87:2B:6B:A8:45:43:89:14:C4:96:96:CD:64
Authority key identifier: 93:0A:46:3D:67:E4:B4:2D:86:39:AC:DF:0D:15:42:4F:82:F1:9A:60
Certificate issuer: /CN=930a463d67e4b42d8639acdf0d15424f82f19a60
Certificate serial: 01976C2AFB19FD9A1D03AC742AC3803C547D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
Manifest number: 1522
Signing time: Sat 14 Jun 2025 02:00:45 +0000
Manifest this update: Sat 14 Jun 2025 02:00:45 +0000
Manifest next update: Sun 15 Jun 2025 02:00:45 +0000
Files and hashes: 1: j7F-n5BAS7IAV1hUz2AdgLUxWgs.roa (hash: j/qcNW3gwv3EvcvTrR1cViv4t/1AN5TOvaoTXIrqHig=)
2: kwpGPWfktC2GOazfDRVCT4LxmmA.crl (hash: hhyHBoe5fb+9LkAUHXO16tTSlK9nJ2YMt+qVqCKe43M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2a:fb:19:fd:9a:1d:03:ac:74:2a:c3:80:3c:54:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=930a463d67e4b42d8639acdf0d15424f82f19a60
Validity
Not Before: Jun 14 02:00:45 2025 GMT
Not After : Jun 15 02:00:45 2025 GMT
Subject: CN=256b22327c8143872b6ba845438914c49696cd64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:3a:2f:da:63:98:2c:ea:bd:ec:c6:54:58:85:
8e:97:9c:4f:4a:8a:22:e0:0b:8a:0c:21:61:b8:da:
4f:7c:9d:16:1b:c0:af:f7:28:a3:58:2a:fd:a6:ad:
06:f4:9d:b7:1d:26:d0:e5:8e:ca:0a:8f:8e:33:ee:
50:ad:5f:67:aa:2f:26:cc:8e:e6:ae:6b:8c:6e:8b:
1c:5d:e4:fb:14:7c:34:7a:05:45:28:9c:ee:06:d9:
74:63:16:d7:56:eb:a8:42:35:b5:5d:3b:31:08:6a:
67:e2:b6:6d:1c:58:eb:4f:4e:bb:3e:4c:e6:a8:85:
c4:96:78:1c:c1:91:ce:1a:ec:68:2a:28:1b:99:5a:
72:04:94:26:24:07:2e:73:24:e5:ef:fa:c0:9e:36:
70:ba:18:40:ae:9d:75:2e:2d:2d:7b:bd:95:ba:08:
e7:b4:bf:a0:24:f4:99:3a:60:b7:aa:e4:06:a7:a7:
ef:a0:02:d1:4a:78:7a:f9:1f:b4:7d:5d:83:94:79:
b9:a4:94:e2:eb:19:a8:47:c9:c1:33:fb:66:c7:c9:
fe:b4:9d:b1:02:99:b0:10:d5:6a:76:0a:02:58:cf:
b0:c9:db:93:ce:a1:f8:d3:e4:0d:4b:ec:86:a2:ef:
8a:f0:1e:a9:d1:e5:65:0a:47:39:82:16:e5:84:dc:
7c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:6B:22:32:7C:81:43:87:2B:6B:A8:45:43:89:14:C4:96:96:CD:64
X509v3 Authority Key Identifier:
keyid:93:0A:46:3D:67:E4:B4:2D:86:39:AC:DF:0D:15:42:4F:82:F1:9A:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:11:08:4a:a7:2f:a8:37:c7:e5:c5:ab:9f:8f:dd:f9:e6:a2:
39:29:1a:2d:cd:4f:ef:79:20:ae:5f:cd:62:55:4f:d5:20:79:
8c:b7:db:43:1e:98:ad:ec:90:94:07:7c:82:68:b5:1e:ac:99:
57:7b:dd:e5:00:13:f3:70:17:97:cf:62:15:08:61:96:43:1d:
d5:d1:18:e3:00:de:a9:fd:5c:20:1e:cb:a4:e3:a5:f8:9f:a5:
95:5b:35:d4:68:0c:16:e0:80:e8:c1:c7:77:35:36:9d:37:bf:
db:28:0f:62:aa:e9:a7:5d:20:68:53:0d:22:9b:6d:42:14:97:
7a:50:81:e5:2c:f5:da:45:44:91:6b:61:2d:55:64:b6:1a:4e:
3d:cc:55:ba:6f:57:2a:48:30:8b:fa:7e:c6:c9:eb:d2:4c:cb:
d7:14:96:c9:7b:a6:c4:01:0f:93:23:f4:a2:0a:ec:3e:60:e0:
41:ba:23:22:ce:2a:13:c9:d2:b1:8f:05:c5:92:ca:6e:3a:a8:
1a:5c:7f:b8:e8:25:c5:4c:4c:83:21:64:0e:f3:87:88:2a:37:
e9:ff:7e:a4:14:64:32:61:75:56:30:6a:2d:41:8e:74:8f:2e:
34:e1:38:42:8f:17:29:65:ca:ff:c8:55:37:6e:0d:27:ea:a6:
fa:19:b2:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:03:16 2025 by rpki-client