Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.mft
File: KS-wn35or-lfI5ExFObApqpyb90.mft (raw, json)
Hash identifier: T48ObCqZNMT+9MTBOy6K7cKsvLVFQ1UP/Z25W2F6YU4=
Subject key identifier: 31:77:C4:AE:1D:45:40:2E:49:9B:52:FA:07:5D:53:50:F2:70:F0:6D
Authority key identifier: 29:2F:B0:9F:7E:68:AF:E9:5F:23:91:31:14:E6:C0:A6:AA:72:6F:DD
Certificate issuer: /CN=292fb09f7e68afe95f23913114e6c0a6aa726fdd
Certificate serial: 0197B9342200163F2B2EA99E8AD2C370D419
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KS-wn35or-lfI5ExFObApqpyb90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.mft
Manifest number: 02CC
Signing time: Sun 29 Jun 2025 01:01:30 +0000
Manifest this update: Sun 29 Jun 2025 01:01:30 +0000
Manifest next update: Mon 30 Jun 2025 01:01:30 +0000
Files and hashes: 1: JyTHeWPSw0N2vvDNyoUd8epHXA4.roa (hash: OacdQD8AGHB+uL8UAW3yHrwnc616k4RTRtDRnug3bmo=)
2: KS-wn35or-lfI5ExFObApqpyb90.crl (hash: +FD+kH9MYtuMaHuOg9FPlE/eTuIfQqQSBt8AgSTX2hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.mft
rsync://rpki.ripe.net/repository/DEFAULT/KS-wn35or-lfI5ExFObApqpyb90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 01:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:34:22:00:16:3f:2b:2e:a9:9e:8a:d2:c3:70:d4:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=292fb09f7e68afe95f23913114e6c0a6aa726fdd
Validity
Not Before: Jun 29 01:01:30 2025 GMT
Not After : Jun 30 01:01:30 2025 GMT
Subject: CN=3177c4ae1d45402e499b52fa075d5350f270f06d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:92:6e:e4:99:29:ba:ff:02:5a:52:b9:42:1e:
39:51:7b:0d:5c:0e:59:75:2f:c9:00:1e:de:8a:ba:
d4:70:00:f9:da:91:15:51:66:f2:21:05:33:3d:ba:
a1:b7:de:98:e7:97:ae:58:d2:c9:1e:8d:90:ca:be:
2d:1a:a7:ea:29:e7:5e:21:85:ad:98:f8:4d:48:ce:
a3:1f:bb:07:c6:f4:f6:32:97:07:36:5d:23:d7:83:
c6:1c:7d:41:7b:de:23:b9:1a:47:bd:f9:8f:16:07:
8b:44:ac:55:ed:64:75:f5:7d:59:86:db:32:93:7b:
df:07:0d:a3:fd:1c:9b:90:2a:80:e0:49:72:fd:37:
a9:bc:38:42:59:03:90:71:4a:06:a5:e2:17:15:f2:
00:8f:cd:e5:74:57:45:43:f6:81:d2:99:ff:b0:80:
a7:7f:ce:7d:46:d2:fe:b4:7b:5d:44:f6:40:ee:9c:
3e:5a:aa:3b:90:73:db:b9:6b:b4:64:49:5e:2b:69:
b4:df:0b:d3:df:1c:f0:94:7f:bd:f8:1a:c9:0e:f7:
4d:3c:42:8b:4b:50:5b:bf:aa:0a:70:02:b5:4d:77:
5b:c9:7b:8a:ef:c9:4a:29:9f:db:f6:d3:dc:a7:da:
1b:fb:21:3f:c6:a1:01:7d:06:0c:0f:47:32:98:5c:
ea:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:77:C4:AE:1D:45:40:2E:49:9B:52:FA:07:5D:53:50:F2:70:F0:6D
X509v3 Authority Key Identifier:
keyid:29:2F:B0:9F:7E:68:AF:E9:5F:23:91:31:14:E6:C0:A6:AA:72:6F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KS-wn35or-lfI5ExFObApqpyb90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:6c:9b:9f:d1:6a:f8:ca:92:c3:e3:9c:05:09:f3:05:4e:8d:
80:96:70:8d:4b:90:63:78:b8:57:d1:55:9a:8b:25:e7:2d:61:
70:54:45:4e:c5:d7:72:79:12:31:c8:de:46:f8:57:dc:21:f6:
94:47:c9:77:1b:52:f2:7c:39:a0:9d:ce:6c:ad:fd:a8:ca:69:
bd:c9:81:12:57:f5:cd:6c:b7:d9:b9:e1:52:e1:e1:e2:6b:52:
2c:30:dd:9f:c7:38:6f:a2:a1:6d:04:5e:61:89:c0:b8:fb:72:
e6:87:34:0f:71:5d:f7:a4:67:fb:d6:1c:1f:49:0e:05:d2:91:
af:b8:82:9c:fe:33:e8:c3:5e:52:ef:c7:d1:d0:b8:89:fd:df:
df:02:5f:af:69:25:32:f3:51:08:ad:91:5c:7c:ae:d0:a2:37:
44:ef:97:3f:12:73:4c:bd:c4:c0:5a:b3:0e:8a:cc:10:0b:8a:
33:ff:3e:92:88:73:72:31:f7:03:c6:d8:e9:b4:8a:5f:2a:63:
0c:6e:ef:4d:c5:cd:75:90:af:f3:17:4b:d7:85:a0:12:f8:93:
a4:71:94:93:c2:a6:76:c3:ef:25:02:8e:41:65:5b:1e:7b:af:
21:9a:70:bd:1b:a1:7d:51:ef:80:f1:e4:36:fa:4d:87:9f:52:
7d:29:7a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:28:17 2025 by rpki-client