Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.mft
File: KwviJiMNQJnO6gpKbPTti5AgE1A.mft (raw, json)
Hash identifier: Ml2vywwHCMBtWk/lAO3m4HdEpT8Vcy77awJ91955+VM=
Subject key identifier: 41:8B:2B:CF:9D:94:10:3C:EF:7B:D1:D5:BE:56:9C:E7:EF:EC:41:30
Authority key identifier: 2B:0B:E2:26:23:0D:40:99:CE:EA:0A:4A:6C:F4:ED:8B:90:20:13:50
Certificate issuer: /CN=2b0be226230d4099ceea0a4a6cf4ed8b90201350
Certificate serial: 0197B88F0FE012AEAC22B1CB0538F5604B5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KwviJiMNQJnO6gpKbPTti5AgE1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.mft
Manifest number: 09C1
Signing time: Sat 28 Jun 2025 22:01:12 +0000
Manifest this update: Sat 28 Jun 2025 22:01:12 +0000
Manifest next update: Sun 29 Jun 2025 22:01:12 +0000
Files and hashes: 1: KwviJiMNQJnO6gpKbPTti5AgE1A.crl (hash: MHmhnBvaUcx6Gah0yCFpFXEeBE5lyjx7tpnw3X9Yt7Y=)
2: lhCB4VKeVIat8YaI7khS8LgNAz0.roa (hash: QGNe/S+LDe3zqs3K0JGfp0BhDLdHDbq+MTuXcKT1Qd0=)
3: qi0ZqRW6bWCGCBOudyRc_ZU33PM.roa (hash: Y/jI82xosnyON1Rhfs7vCWE2E/8RN3XifMYZrXwc2DQ=)
4: st8xnj4jJi6Xuwa7MiNbU3-F0wo.roa (hash: H2Z+tAqzPpLr9TIzWhq27NXaGhJV330iUQnoQkRKlKo=)
5: ymk3s2uYAjIifXFebx0Gs2GCpZg.roa (hash: 1iZB8mSVVI0xWBNNoWKTn+58QXVIuSn2YESYam7CY+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/KwviJiMNQJnO6gpKbPTti5AgE1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:0f:e0:12:ae:ac:22:b1:cb:05:38:f5:60:4b:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b0be226230d4099ceea0a4a6cf4ed8b90201350
Validity
Not Before: Jun 28 22:01:12 2025 GMT
Not After : Jun 29 22:01:12 2025 GMT
Subject: CN=418b2bcf9d94103cef7bd1d5be569ce7efec4130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:68:08:68:af:cf:05:f2:97:e5:fa:64:76:d5:
43:64:d2:3e:c0:b8:53:92:8f:17:41:64:75:56:fa:
79:0d:5f:04:05:9f:b5:bf:28:d1:09:61:1a:c7:21:
b4:fa:14:1d:99:bd:f2:5f:fe:92:f5:d8:de:aa:32:
aa:16:e5:6b:52:22:53:a5:a8:a8:a2:c2:3b:cb:ad:
ba:4e:d6:22:17:01:4f:de:22:dd:47:27:e6:fd:74:
11:15:35:d3:62:77:4b:66:5d:47:9a:3b:e0:03:c4:
e8:e0:b2:e3:96:14:1f:ac:76:7b:3f:32:d3:a0:65:
be:d5:0f:bf:6d:17:e7:47:35:a2:e9:39:a4:d3:d5:
56:a9:c6:ff:36:69:14:ef:a6:0d:94:3f:7c:e5:23:
3e:2c:b5:d3:44:bb:57:00:cd:33:62:70:9a:0c:49:
9e:5f:4d:32:b5:49:cf:4b:13:55:3a:68:ed:71:e8:
fd:ed:fe:26:2d:e9:c8:ec:d8:bc:08:3e:f4:8e:a8:
18:f5:1a:73:47:71:4c:5c:ed:e8:32:55:ab:3b:46:
9b:49:39:f1:96:b6:d8:87:9b:10:3d:0f:7c:17:3d:
2c:9d:bb:ee:fe:fe:ed:0c:15:63:ad:cd:1d:cb:76:
32:8b:fd:b9:2d:a5:85:f1:a9:70:b6:ae:30:a4:5f:
04:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:8B:2B:CF:9D:94:10:3C:EF:7B:D1:D5:BE:56:9C:E7:EF:EC:41:30
X509v3 Authority Key Identifier:
keyid:2B:0B:E2:26:23:0D:40:99:CE:EA:0A:4A:6C:F4:ED:8B:90:20:13:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwviJiMNQJnO6gpKbPTti5AgE1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/fce675-bf53-4787-93e7-81f566185b06/1/KwviJiMNQJnO6gpKbPTti5AgE1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:85:ee:65:dc:bf:89:f6:5e:68:f2:17:ef:89:55:65:ff:74:
a4:3b:4b:2b:ed:7e:88:69:d0:38:7e:28:7c:7d:8c:64:28:a5:
35:f5:39:18:63:8b:cc:94:a4:1a:bd:64:8b:ac:60:04:a4:2e:
20:eb:ca:11:4a:3c:54:5e:c9:e4:17:82:e3:e4:20:a9:b0:b6:
9c:00:03:fa:39:8c:a3:35:a5:bf:16:bd:3d:bf:cf:c6:0e:c2:
d6:11:1c:66:03:27:a4:10:f6:1c:aa:ac:e8:37:60:50:f7:b0:
65:e9:9d:ec:b6:35:aa:46:9c:bb:a8:57:4e:e0:66:79:c1:e8:
49:c0:68:51:2e:ac:9a:fb:4d:a5:2c:09:13:68:39:38:06:15:
63:07:11:a1:9a:72:2a:63:17:72:17:3a:df:88:2e:84:84:31:
70:39:da:5d:28:48:6a:60:71:c1:c6:48:70:ae:39:5e:a1:06:
42:ae:fa:e2:64:f1:99:4c:ce:02:80:26:79:f6:87:92:19:9d:
c7:89:13:48:e6:70:a5:c2:aa:96:47:12:a4:61:3c:7d:9e:3e:
87:2d:b9:cb:8e:16:21:06:fd:91:4c:97:ec:06:13:92:f8:d6:
7c:42:35:cc:e1:f2:23:dc:a0:d9:c3:fc:71:d1:89:fd:dd:28:
7d:74:ac:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:17:41 2025 by rpki-client