Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft
File: KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft (raw, json)
Hash identifier: Xjy6VsnvvbCDm6lyoy4xF1gLj4oFlIb4N4gz2kgG2VI=
Subject key identifier: E8:31:E9:46:EC:97:4D:2F:43:F2:3A:BF:B6:2C:8F:B5:F0:3E:07:72
Authority key identifier: 2B:04:D5:55:76:3F:BA:A0:94:DC:A7:A9:3D:AA:A7:8F:D4:00:85:54
Certificate issuer: /CN=2b04d555763fbaa094dca7a93daaa78fd4008554
Certificate serial: 01977C42E4947CD3694FD5B82C54FFEDCC9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KwTVVXY_uqCU3KepPaqnj9QAhVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft
Manifest number: 0460
Signing time: Tue 17 Jun 2025 05:00:47 +0000
Manifest this update: Tue 17 Jun 2025 05:00:47 +0000
Manifest next update: Wed 18 Jun 2025 05:00:47 +0000
Files and hashes: 1: 3Vh4V2QgqmooTGsNFJzabIkkGuM.roa (hash: pE5OL1gfqKCShXk+oFUj+oL3mmpNWjZD2zCOccDVAJo=)
2: KwTVVXY_uqCU3KepPaqnj9QAhVQ.crl (hash: qQuqKEmPAocx6SBqSoEp0ZNd+D8v947MOau/UuyrQes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KwTVVXY_uqCU3KepPaqnj9QAhVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 23:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7c:42:e4:94:7c:d3:69:4f:d5:b8:2c:54:ff:ed:cc:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b04d555763fbaa094dca7a93daaa78fd4008554
Validity
Not Before: Jun 17 05:00:47 2025 GMT
Not After : Jun 18 05:00:47 2025 GMT
Subject: CN=e831e946ec974d2f43f23abfb62c8fb5f03e0772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c8:b0:38:a0:b0:45:60:38:3d:83:1d:0d:4e:
c1:9a:6c:73:f6:66:4a:e9:74:3b:58:cb:64:f6:7b:
60:f1:1e:66:9a:b5:5d:25:d4:ab:ee:37:95:73:b3:
b7:66:d0:3c:c6:bc:2e:82:65:37:7e:0c:da:5f:b5:
91:57:dd:aa:5f:75:b1:78:91:75:3d:fd:0e:31:7f:
57:44:11:f8:d5:d1:a3:ca:7a:78:0b:a5:aa:60:fa:
a7:0f:ab:d9:9d:13:8f:a8:14:38:7d:e7:c6:5e:73:
ed:eb:8f:8a:7f:d8:23:dd:30:ba:24:08:11:ed:c3:
3e:9d:59:93:34:a2:5d:3f:8e:e0:96:11:38:4d:dd:
a6:97:e2:78:c9:17:b3:cb:3f:ad:a0:64:c9:33:80:
5d:00:fb:62:0b:71:85:6c:02:b1:59:e4:60:5a:92:
59:cd:2d:1a:bd:70:e9:35:a0:f8:94:28:28:59:3c:
65:16:86:33:c6:83:b3:70:a3:5e:3e:57:c7:28:37:
ff:00:9f:ae:ac:6e:e8:ff:30:f0:90:d8:60:61:94:
57:3d:e3:a5:53:13:19:3a:ca:34:6e:56:bc:a7:f0:
d2:91:d7:f4:9a:01:21:12:64:fa:71:88:fa:88:a7:
a9:3b:00:67:ad:31:65:b3:7c:c7:d3:b2:7b:c5:54:
03:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:31:E9:46:EC:97:4D:2F:43:F2:3A:BF:B6:2C:8F:B5:F0:3E:07:72
X509v3 Authority Key Identifier:
keyid:2B:04:D5:55:76:3F:BA:A0:94:DC:A7:A9:3D:AA:A7:8F:D4:00:85:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwTVVXY_uqCU3KepPaqnj9QAhVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d0a3dc-7d9a-4375-b2fd-c7542f88e797/1/KwTVVXY_uqCU3KepPaqnj9QAhVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:e3:16:58:56:de:8d:c2:54:f7:ed:6d:eb:8e:77:6a:17:2d:
d6:81:b8:21:b7:fc:d2:80:b7:26:c4:af:f7:02:7c:bf:72:bd:
66:33:0c:3d:da:41:a6:ef:01:17:dd:a3:9f:09:88:60:c5:3c:
10:4b:76:3c:5c:79:a8:5b:5d:08:98:80:73:ee:05:96:5b:2e:
21:4c:b4:11:4d:ba:b4:31:0e:53:a0:b7:6b:8c:e9:b8:97:a2:
5b:9c:44:0f:f4:c4:94:43:82:f4:fa:fa:ff:bf:f6:33:57:15:
d7:d8:a7:63:55:0c:3b:d8:5b:8f:ca:bb:78:8a:5f:b5:3f:6f:
f3:b3:e1:d4:06:20:87:e0:1f:52:63:b9:be:b0:a3:8d:2d:31:
24:4f:69:66:d5:90:37:6b:ca:3f:98:09:75:56:56:aa:37:17:
f9:18:bf:02:d6:56:0d:0f:5a:89:e4:fc:be:64:21:6b:72:e1:
8b:fb:82:c0:80:76:a9:ad:af:06:28:df:46:3f:80:67:51:4d:
e4:cc:6e:8c:c9:17:84:7d:95:1b:88:72:af:8b:a8:cd:27:2a:
da:a8:8e:9c:46:6f:d7:80:63:fe:d9:28:3b:44:1d:55:b1:48:
79:b1:6b:ce:ba:0f:42:fb:6d:c0:2a:d7:df:3a:27:4b:f8:9f:
e5:b2:f0:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 09:35:36 2025 by rpki-client