Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/ecfafc-9115-4ec2-ae11-07f1259feb13/1/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.mft
File: kwk3JGTFmj3Y7NYyFbAYGXBlWKY.mft (raw, json)
Hash identifier: lLnBixZrL6E0if6Elexp6BAqbGQN3z4ofwqeg/J1Rlc=
Subject key identifier: 0C:92:51:3B:F7:30:22:27:52:76:89:E7:47:0D:EF:29:45:99:0B:1A
Authority key identifier: 93:09:37:24:64:C5:9A:3D:D8:EC:D6:32:15:B0:18:19:70:65:58:A6
Certificate issuer: /CN=9309372464c59a3dd8ecd63215b01819706558a6
Certificate serial: 0197C0B6DFBBCF87E7B4A4C02320E229C230
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/ecfafc-9115-4ec2-ae11-07f1259feb13/1/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.mft
Manifest number: 05E4
Signing time: Mon 30 Jun 2025 12:01:39 +0000
Manifest this update: Mon 30 Jun 2025 12:01:39 +0000
Manifest next update: Tue 01 Jul 2025 12:01:39 +0000
Files and hashes: 1: kwk3JGTFmj3Y7NYyFbAYGXBlWKY.crl (hash: F68KZ23CO9b/hvHBwhSNJr9S9AMlQo+moT7BUsFv5oA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/ecfafc-9115-4ec2-ae11-07f1259feb13/1/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/ecfafc-9115-4ec2-ae11-07f1259feb13/1/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 12:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:b6:df:bb:cf:87:e7:b4:a4:c0:23:20:e2:29:c2:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9309372464c59a3dd8ecd63215b01819706558a6
Validity
Not Before: Jun 30 12:01:39 2025 GMT
Not After : Jul 1 12:01:39 2025 GMT
Subject: CN=0c92513bf7302227527689e7470def2945990b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c5:10:69:a1:c5:26:4b:2b:02:6e:ba:ae:63:
6f:27:fd:ba:dd:de:c9:b6:91:5d:32:9d:b3:13:50:
da:ad:aa:98:d6:ec:1b:dc:56:87:97:bf:76:67:c7:
74:f8:06:0f:63:73:ff:b3:9e:3d:33:c9:28:5c:e0:
32:97:d4:9f:60:41:2c:c7:de:6d:b9:08:7a:ff:63:
df:16:f8:0b:7c:05:bb:f2:22:3f:a4:1c:d1:13:81:
f9:e4:a9:50:1d:22:93:27:c6:6b:08:5f:f3:14:06:
de:e0:73:a0:63:11:65:f8:ac:da:77:6f:74:e6:ba:
c3:69:08:a4:62:96:6d:81:e4:bd:f3:6c:6b:7c:59:
35:af:15:3d:d7:f0:99:a3:c8:0b:50:2a:de:e5:a1:
ce:d4:84:98:d5:60:aa:d1:0b:7e:32:2d:89:fd:62:
cc:1e:5b:ca:71:05:df:d0:08:85:d1:bd:c0:af:1e:
8a:da:ea:78:b0:66:3e:34:8b:2c:ec:27:9f:7f:c6:
e5:51:ad:f9:36:e4:31:d7:6b:4e:6b:cc:2e:93:0c:
cd:e0:f9:bc:7b:f2:db:03:2e:ed:c2:e8:c1:be:90:
b1:0f:79:eb:c0:de:e4:53:23:e1:e9:0f:41:1b:6a:
60:18:a8:26:ba:47:2e:07:ed:5b:56:7f:22:af:ae:
a3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:92:51:3B:F7:30:22:27:52:76:89:E7:47:0D:EF:29:45:99:0B:1A
X509v3 Authority Key Identifier:
keyid:93:09:37:24:64:C5:9A:3D:D8:EC:D6:32:15:B0:18:19:70:65:58:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/ecfafc-9115-4ec2-ae11-07f1259feb13/1/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/ecfafc-9115-4ec2-ae11-07f1259feb13/1/kwk3JGTFmj3Y7NYyFbAYGXBlWKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:11:2a:37:ee:aa:73:95:9a:ab:5f:91:57:a5:13:0a:d7:7e:
0d:68:6f:8d:a0:c4:fc:8c:06:10:c1:a6:4c:f3:f8:c9:fa:6a:
e4:eb:bb:65:40:bb:e6:b5:87:19:d9:c8:24:97:db:e1:c5:8a:
40:13:b5:4f:72:34:eb:17:5b:41:19:0d:30:e3:b3:c6:45:d9:
b8:57:9c:8d:18:14:e1:c2:8d:34:1f:df:55:3c:3b:cb:ce:f9:
e4:99:f6:55:c9:fd:75:cd:dd:c1:2f:81:91:b5:08:16:d5:4b:
8e:d0:fd:ff:e1:7b:55:fd:82:9b:a7:84:4c:25:d7:31:a1:fd:
9f:be:95:9d:38:3b:84:57:81:67:b3:b0:24:e4:17:c4:8e:7c:
d5:d1:1a:90:9e:98:88:63:a9:d7:92:a1:bb:bd:de:c2:6d:af:
a2:66:ee:40:43:3e:71:53:4e:00:e0:f3:6b:dd:13:d2:d8:f2:
15:2a:07:94:f3:25:8e:53:50:1b:fb:8e:64:c2:36:c8:46:68:
19:84:b4:50:56:e7:5a:a0:2d:4e:09:f1:8c:e3:40:14:28:4f:
12:80:3e:a5:7f:b5:9f:75:89:26:86:8b:8b:3b:1a:ac:b9:19:
9d:4e:35:75:e8:bf:05:41:71:65:ca:4d:78:ff:65:32:02:28:
62:e8:77:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 17:14:18 2025 by rpki-client