Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
File: kwpGPWfktC2GOazfDRVCT4LxmmA.mft (raw, json)
Hash identifier: fBn4tW6BXI3+J2A0aiMVEqOv8wfWd4TVkeo/NHPbzks=
Subject key identifier: 32:24:3D:DC:7C:56:E4:0A:3B:A2:B5:EC:CB:E5:B0:54:48:5B:23:AF
Authority key identifier: 93:0A:46:3D:67:E4:B4:2D:86:39:AC:DF:0D:15:42:4F:82:F1:9A:60
Certificate issuer: /CN=930a463d67e4b42d8639acdf0d15424f82f19a60
Certificate serial: 01987C776508F3F2709F06265D93663F46F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
Manifest number: 15AF
Signing time: Tue 05 Aug 2025 23:00:55 +0000
Manifest this update: Tue 05 Aug 2025 23:00:55 +0000
Manifest next update: Wed 06 Aug 2025 23:00:55 +0000
Files and hashes: 1: j7F-n5BAS7IAV1hUz2AdgLUxWgs.roa (hash: j/qcNW3gwv3EvcvTrR1cViv4t/1AN5TOvaoTXIrqHig=)
2: kwpGPWfktC2GOazfDRVCT4LxmmA.crl (hash: WNP9kq1r7S8aa/+ga58u8BTUtR4vWD7KyTq8D5po8II=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:77:65:08:f3:f2:70:9f:06:26:5d:93:66:3f:46:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=930a463d67e4b42d8639acdf0d15424f82f19a60
Validity
Not Before: Aug 5 23:00:55 2025 GMT
Not After : Aug 6 23:00:55 2025 GMT
Subject: CN=32243ddc7c56e40a3ba2b5eccbe5b054485b23af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:20:30:a8:e7:89:16:22:78:50:8c:a8:7b:c2:
d6:8c:ca:98:69:c8:a0:c8:21:59:45:8b:18:10:cf:
cb:49:c4:fb:c3:4f:a0:72:37:14:ad:b8:0e:5d:e3:
ca:b0:1d:39:c2:e9:67:2b:98:07:f4:33:ce:6a:07:
ab:2f:7b:c1:8b:24:01:bf:a2:84:1e:05:11:5a:95:
2d:1a:74:05:4e:0f:41:06:fa:87:19:78:a4:96:a1:
aa:7e:3d:9a:b8:f5:54:2e:ed:c8:d4:2b:38:73:3e:
84:d0:a1:fb:56:92:43:20:ff:30:ff:ff:b6:f3:e3:
1e:30:a8:7b:13:6a:74:81:ac:a0:04:d4:42:f3:9c:
98:12:38:60:50:49:94:cd:bb:12:6b:ba:d7:01:f1:
ff:b7:54:4b:5c:36:49:2f:2e:fb:f5:8f:3d:6e:c5:
03:91:5f:11:13:e5:30:7e:96:53:78:f6:ec:f0:eb:
f6:3d:ef:bb:8f:41:b7:6b:84:da:5d:e6:a5:11:60:
3b:e0:70:3c:3a:43:d1:3f:64:7f:82:8b:68:60:72:
bb:9d:b1:b8:90:4a:28:10:e5:50:1f:bb:22:3f:e8:
69:ee:90:77:39:22:c5:18:b6:49:64:b1:50:91:a7:
11:f5:53:ef:f7:47:54:cc:4a:32:79:25:84:7d:59:
0f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:24:3D:DC:7C:56:E4:0A:3B:A2:B5:EC:CB:E5:B0:54:48:5B:23:AF
X509v3 Authority Key Identifier:
keyid:93:0A:46:3D:67:E4:B4:2D:86:39:AC:DF:0D:15:42:4F:82:F1:9A:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:28:61:98:60:32:f9:1d:15:4d:f2:32:83:c1:c2:de:f5:ec:
cc:f3:34:01:8f:6d:24:6f:f2:a2:7c:a3:92:cd:e8:9b:43:b0:
e6:d6:d5:84:ad:26:84:c4:09:fe:d4:d3:11:38:bd:3b:ed:bf:
a2:59:5f:d8:e6:57:a7:14:11:33:a0:69:15:6b:29:97:bf:2f:
2e:18:d6:ea:64:f9:95:0e:27:de:3e:6e:b0:46:18:13:6a:d6:
31:cd:21:7b:42:cb:2a:7f:b5:69:c1:af:a0:42:8a:0e:bc:3a:
1e:c8:5f:3f:10:f8:db:04:1a:55:58:4a:7d:fb:00:70:d0:1f:
d0:55:9e:95:70:c0:7e:70:d6:3b:b8:f7:cc:20:8a:66:5b:b6:
92:4b:08:bd:1a:80:23:ff:a1:9d:52:0a:24:f7:da:c3:88:79:
05:57:d7:bc:de:ed:78:01:9d:41:f0:70:47:f2:96:f0:fe:98:
61:0f:ff:62:2d:a4:d3:51:d7:80:26:dd:a3:2c:d3:54:c7:f9:
f3:56:86:a4:fa:a9:53:46:07:4f:ac:42:7c:0b:ce:e6:fa:29:
c3:2f:fd:c9:d3:44:f8:94:18:83:a0:65:34:1f:06:65:c6:db:
4e:68:6f:95:71:14:64:ec:26:29:61:b2:42:52:95:68:fb:6f:
06:6f:7d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:26:37 2025 by rpki-client