Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.mft
File: KS-wn35or-lfI5ExFObApqpyb90.mft (raw, json)
Hash identifier: TDGtKJ8MoO6qLBDJbwZnI1KeTxROktALXGORlVaC+zI=
Subject key identifier: 04:4A:54:0E:B7:68:75:CC:4A:37:5F:E6:1D:DB:DB:2B:9D:0B:B7:53
Authority key identifier: 29:2F:B0:9F:7E:68:AF:E9:5F:23:91:31:14:E6:C0:A6:AA:72:6F:DD
Certificate issuer: /CN=292fb09f7e68afe95f23913114e6c0a6aa726fdd
Certificate serial: 0198D706047AFB3D57C86E190E9304F0142D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KS-wn35or-lfI5ExFObApqpyb90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.mft
Manifest number: 0360
Signing time: Sat 23 Aug 2025 13:02:32 +0000
Manifest this update: Sat 23 Aug 2025 13:02:32 +0000
Manifest next update: Sun 24 Aug 2025 13:02:32 +0000
Files and hashes: 1: JyTHeWPSw0N2vvDNyoUd8epHXA4.roa (hash: OacdQD8AGHB+uL8UAW3yHrwnc616k4RTRtDRnug3bmo=)
2: KS-wn35or-lfI5ExFObApqpyb90.crl (hash: bBNzi5Qgnmde6AF26QiwLOpbAsmydNE9lFKPI7XTBOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.mft
rsync://rpki.ripe.net/repository/DEFAULT/KS-wn35or-lfI5ExFObApqpyb90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:06:04:7a:fb:3d:57:c8:6e:19:0e:93:04:f0:14:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=292fb09f7e68afe95f23913114e6c0a6aa726fdd
Validity
Not Before: Aug 23 13:02:32 2025 GMT
Not After : Aug 24 13:02:32 2025 GMT
Subject: CN=044a540eb76875cc4a375fe61ddbdb2b9d0bb753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:32:af:6d:68:b4:e4:b7:77:df:b7:63:44:ac:
a0:67:c2:94:4c:d7:6d:36:9a:94:e0:6d:48:62:bc:
c8:81:4a:0a:68:c6:78:b5:9b:9b:de:55:5e:d2:f4:
0b:67:b2:6a:f4:06:f9:4e:00:5d:1f:92:b5:93:15:
f2:10:c3:f9:62:14:bf:8d:cb:72:5c:fa:0f:3f:f4:
0d:5a:32:9c:31:e1:9c:a7:d2:f2:41:a4:3c:57:cb:
16:da:4c:38:82:68:cf:6d:4f:bd:55:4c:8c:3d:d7:
b1:54:b4:d7:1b:86:b0:45:53:87:c1:81:20:47:7c:
a1:03:77:55:e7:36:a5:4e:31:21:d0:61:f4:ce:24:
3b:a5:9c:6f:59:2c:32:ff:78:04:47:cb:20:3e:22:
d0:27:66:e8:6b:75:b9:5d:e1:8d:83:27:f0:1c:e2:
d1:42:3e:66:98:56:c3:44:45:b9:6c:b8:62:a1:e2:
f9:84:e6:49:c8:cb:cd:09:80:5f:f2:76:00:65:d3:
d9:8a:a6:71:a0:f2:2d:af:3b:93:a7:76:14:47:b4:
1f:a8:ce:0b:5d:4d:1b:72:21:53:01:d9:6d:e3:4d:
ab:2a:a5:9c:a2:55:e2:fa:04:a6:45:49:c7:3c:5a:
8e:e6:d1:6e:8c:f8:b6:b8:0a:3b:b4:5f:6c:45:f4:
3b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:4A:54:0E:B7:68:75:CC:4A:37:5F:E6:1D:DB:DB:2B:9D:0B:B7:53
X509v3 Authority Key Identifier:
keyid:29:2F:B0:9F:7E:68:AF:E9:5F:23:91:31:14:E6:C0:A6:AA:72:6F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KS-wn35or-lfI5ExFObApqpyb90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e13112-5758-4552-b2ad-ed1b9b8e6470/1/KS-wn35or-lfI5ExFObApqpyb90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:31:15:6f:aa:6a:b1:70:dd:cf:23:32:49:0b:66:e0:bc:29:
f1:f0:1d:18:85:3d:3c:29:88:40:14:bb:3a:89:c2:4d:fc:d0:
d3:fe:93:3b:5e:52:81:c6:b5:71:9e:b3:d1:b6:0c:ed:1e:1a:
03:69:dc:97:1c:dd:52:b3:74:9c:fd:99:fc:f9:79:7e:93:33:
7f:4a:ac:37:c1:1c:b6:da:8d:b7:2a:2f:f5:5e:20:e0:96:31:
ce:ec:d1:9e:ac:6a:42:89:41:ce:16:d9:7e:97:4a:10:91:11:
4a:91:db:d2:97:b5:c3:4f:ae:4d:2f:42:5c:22:59:57:02:35:
04:40:c9:84:4d:11:89:3c:3e:ae:d6:31:21:0b:07:07:1b:1a:
4a:87:fb:b3:08:61:fa:9f:2c:5c:c1:e9:e1:e7:05:31:f9:65:
aa:23:98:74:04:e5:40:b1:04:c9:e1:85:90:76:0c:0c:27:87:
6a:29:f0:ac:4a:86:e2:ec:c2:0f:21:59:67:ef:a0:96:da:f3:
78:06:fe:9d:a5:61:58:f7:b2:c1:5e:1e:aa:a7:68:85:b8:36:
88:d0:48:f2:dd:ab:8e:fd:46:2b:3f:5e:24:3a:3a:a8:79:f3:
15:d0:c3:c1:f0:2a:e1:50:34:80:f5:98:08:06:8b:64:fb:26:
5e:61:26:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:53:46 2025 by rpki-client