Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.mft
File: KwUe8jBg61G_2MeXlfak2vSKOqA.mft (raw, json)
Hash identifier: +M2A+mXHggW2Fec1wcXgF8Vcc0ZzaEn9o7OZCEy6WEE=
Subject key identifier: 7C:DF:28:54:09:CA:B4:62:40:18:B3:62:2D:FA:98:B9:D1:ED:A7:B3
Authority key identifier: 2B:05:1E:F2:30:60:EB:51:BF:D8:C7:97:95:F6:A4:DA:F4:8A:3A:A0
Certificate issuer: /CN=2b051ef23060eb51bfd8c79795f6a4daf48a3aa0
Certificate serial: 0197B6D7683AED58FB7435CECC12172A67B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KwUe8jBg61G_2MeXlfak2vSKOqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.mft
Manifest number: 09E8
Signing time: Sat 28 Jun 2025 14:00:59 +0000
Manifest this update: Sat 28 Jun 2025 14:00:59 +0000
Manifest next update: Sun 29 Jun 2025 14:00:59 +0000
Files and hashes: 1: HJo0Q6u7BHPf7uGGtOh1Cm5Rgr4.roa (hash: KO4VFFsczF64WfUlIBm0orog3QT9gcqLspybHYHoxis=)
2: KwUe8jBg61G_2MeXlfak2vSKOqA.crl (hash: gJQ/fT3kujWw/5nOxZ0VNtnmHyhysf4jxM+q1BI4BzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KwUe8jBg61G_2MeXlfak2vSKOqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:68:3a:ed:58:fb:74:35:ce:cc:12:17:2a:67:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b051ef23060eb51bfd8c79795f6a4daf48a3aa0
Validity
Not Before: Jun 28 14:00:59 2025 GMT
Not After : Jun 29 14:00:59 2025 GMT
Subject: CN=7cdf285409cab4624018b3622dfa98b9d1eda7b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:79:7f:9d:43:e8:af:5c:14:5b:84:e7:ab:eb:
76:12:05:c3:56:f2:18:2f:2d:62:c2:f7:87:c5:27:
8c:1d:b9:ef:31:0a:ad:d7:bc:9b:83:d8:16:d1:5a:
d1:62:1d:3d:6f:f3:26:d6:a0:51:c5:8d:49:90:86:
06:05:3d:ac:91:bf:aa:5b:47:86:c6:8c:5e:c9:24:
6d:55:b7:2a:97:6e:45:f8:c2:3b:3d:f5:bd:b9:10:
d7:7a:c0:d2:6b:e2:d8:03:dc:2e:d5:f6:b1:24:40:
44:ff:8b:3e:16:9e:b0:52:fd:4e:31:2b:de:d8:47:
9b:5d:41:71:a5:50:3a:6f:a9:64:58:82:85:e2:36:
b2:ab:8d:66:8a:59:db:e4:72:b7:05:5d:a7:89:89:
0f:21:e7:27:81:d2:ae:02:ca:8b:a6:ff:0a:4f:53:
1d:75:60:dd:28:d3:24:07:2d:4a:8a:ae:ac:e3:59:
81:d5:1d:da:8a:58:3b:30:1f:57:03:33:75:ee:bd:
34:2e:39:66:4b:e7:21:8e:1e:49:45:c0:c3:5e:96:
64:51:fe:81:0e:ca:1a:65:78:3c:1c:ed:f3:be:c4:
6b:ca:3e:8b:2a:50:bc:e4:de:a2:02:bc:44:57:fc:
95:3c:49:20:22:8a:3b:0b:32:a2:36:df:2e:cc:50:
af:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:DF:28:54:09:CA:B4:62:40:18:B3:62:2D:FA:98:B9:D1:ED:A7:B3
X509v3 Authority Key Identifier:
keyid:2B:05:1E:F2:30:60:EB:51:BF:D8:C7:97:95:F6:A4:DA:F4:8A:3A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwUe8jBg61G_2MeXlfak2vSKOqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:98:7e:04:ce:48:cb:1f:ff:a7:e4:f5:43:24:14:b1:df:e8:
75:e6:b7:19:31:ba:96:30:53:a8:19:70:ef:4c:fc:26:35:2f:
29:1d:c5:53:e7:83:99:e8:90:e5:67:8e:e1:dd:76:ca:b4:4f:
23:53:b6:d7:2e:2f:b2:c0:4b:f2:6b:68:00:26:27:f8:2e:99:
f1:58:3c:3f:c9:46:a8:ea:a6:46:21:02:3b:97:a6:e0:0d:6d:
df:25:5f:0d:db:c6:76:2f:b9:be:1a:c3:85:0e:20:41:0d:d9:
93:f7:27:ae:a1:e8:3f:38:ca:8d:73:d5:4c:20:99:70:99:12:
73:54:e5:25:4d:a4:02:a1:79:0c:0b:51:a2:e4:a7:dc:6e:6b:
22:6d:91:c7:2e:a1:24:38:a3:fd:ff:c2:4b:f3:99:63:42:49:
5d:79:20:0c:6c:ff:54:3b:79:fe:9b:4b:2b:db:9b:e5:3a:56:
64:29:0c:52:0f:8a:a6:88:09:7e:38:1d:8b:d2:c2:48:59:38:
ae:2b:b6:4a:a4:53:82:d3:17:f8:04:e6:ac:19:4d:25:40:b2:
8b:d6:c9:ce:f1:c0:d6:af:3a:e0:8f:a3:88:5f:b5:01:90:9e:
0d:98:d5:d0:cc:39:f6:a0:cc:91:0f:1d:d7:f2:8d:6d:f6:c6:
05:5c:c2:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:16:34 2025 by rpki-client