Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
File: kwpGPWfktC2GOazfDRVCT4LxmmA.mft (raw, json)
Hash identifier: uoNX9lLLxku+i7JY9MqI2QiCu8RuQvO968jFc/J1jhw=
Subject key identifier: 43:E6:B8:73:99:EE:EF:D5:62:A6:FC:41:50:85:5B:44:CA:59:CA:1B
Authority key identifier: 93:0A:46:3D:67:E4:B4:2D:86:39:AC:DF:0D:15:42:4F:82:F1:9A:60
Certificate issuer: /CN=930a463d67e4b42d8639acdf0d15424f82f19a60
Certificate serial: 019678D68C3F21C9327EE3A78EEDC0A4D7A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
Manifest number: 14A4
Signing time: Sun 27 Apr 2025 20:00:48 +0000
Manifest this update: Sun 27 Apr 2025 20:00:48 +0000
Manifest next update: Mon 28 Apr 2025 20:00:48 +0000
Files and hashes: 1: j7F-n5BAS7IAV1hUz2AdgLUxWgs.roa (hash: j/qcNW3gwv3EvcvTrR1cViv4t/1AN5TOvaoTXIrqHig=)
2: kwpGPWfktC2GOazfDRVCT4LxmmA.crl (hash: C21p1Zs8oaNjoOtT7ghZjQbTJ0YdqkyXvQEB3aIh7YE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:d6:8c:3f:21:c9:32:7e:e3:a7:8e:ed:c0:a4:d7:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=930a463d67e4b42d8639acdf0d15424f82f19a60
Validity
Not Before: Apr 27 20:00:48 2025 GMT
Not After : Apr 28 20:00:48 2025 GMT
Subject: CN=43e6b87399eeefd562a6fc4150855b44ca59ca1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:64:a6:57:72:83:dd:d3:52:ef:a6:49:f3:52:
c6:0c:ad:c1:64:39:76:61:64:92:a9:24:b7:a5:68:
13:96:b2:df:d6:31:22:97:d4:a7:08:db:85:bb:68:
67:83:f2:b8:34:1b:31:0b:ee:62:2f:19:b7:a1:c8:
6a:ff:e9:30:c2:bd:62:1a:21:76:d0:69:b6:69:e4:
33:57:5b:56:ed:66:12:fd:2d:c8:e2:ee:66:2b:8c:
00:23:d9:17:a6:f9:9a:68:c1:1f:d3:ce:b0:5a:d8:
25:d7:58:0e:3a:bf:b7:08:79:d1:a9:2a:10:16:32:
2a:0f:2b:0f:eb:cb:ff:62:0c:63:fe:6b:65:a2:8f:
ff:db:cc:ec:d9:e6:57:8e:75:1e:60:0d:27:ae:4d:
ac:7e:62:1b:fc:7d:7d:ca:19:de:1c:94:e5:3c:14:
56:af:d6:4f:7e:fd:85:59:55:02:b7:c8:df:36:3f:
cd:42:fd:32:7f:38:d5:fa:de:ff:34:ae:5e:e4:0a:
5c:cf:3f:55:44:c0:b1:b3:04:19:08:36:33:c9:c1:
f4:b8:25:1d:74:3d:85:13:f3:88:bd:5b:14:8b:58:
0e:e3:06:ca:66:d2:bf:f2:77:5c:0f:1f:da:72:db:
ae:c0:b0:f1:ec:1a:0f:68:51:a2:68:cf:c3:3a:65:
52:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:E6:B8:73:99:EE:EF:D5:62:A6:FC:41:50:85:5B:44:CA:59:CA:1B
X509v3 Authority Key Identifier:
keyid:93:0A:46:3D:67:E4:B4:2D:86:39:AC:DF:0D:15:42:4F:82:F1:9A:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:79:5d:58:50:36:ad:6a:99:e5:c8:c9:a8:b6:e2:69:5a:43:
72:ce:aa:48:2a:ac:65:1f:d5:8c:1e:39:aa:58:26:4c:a0:45:
04:72:4b:03:b6:b9:19:88:07:a8:b9:cd:84:f9:5a:a9:0d:a0:
44:54:fb:ef:25:83:7b:43:3e:e4:2d:22:00:0d:87:47:9f:25:
fd:99:98:4c:50:bd:d2:63:a7:f6:c6:b1:3d:d4:7b:ce:85:dd:
51:c1:13:8a:8d:a9:dc:60:f0:c1:ba:d9:92:8b:3e:e3:11:6d:
f8:87:e9:7a:5e:94:97:d8:26:fa:f3:d8:3a:77:25:3a:0d:0a:
cb:42:2d:7e:81:aa:1f:95:c2:32:f4:a2:ee:d1:55:d0:ef:9c:
a1:23:1a:55:33:a5:37:dd:d5:32:83:fd:3a:11:14:27:61:49:
0a:6b:f8:b4:b4:a0:78:e5:2f:17:1d:f3:76:d0:eb:b5:b1:75:
02:f0:80:cd:36:e8:97:71:63:e9:a6:55:b4:22:db:5d:a2:52:
f6:fb:73:fb:b9:2f:b6:d3:23:bb:a9:ea:78:4b:24:d8:1a:7e:
e6:29:9a:e0:3d:fe:2c:e2:fc:72:0e:61:48:0d:35:5b:e8:6d:
0b:61:1d:11:94:98:b3:50:d7:42:f6:6d:d1:59:3f:1c:43:26:
34:67:05:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:03:22 2025 by rpki-client