Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft
File: kwpXLBbQxE93Zlh9kth4ujBUHR4.mft (raw, json)
Hash identifier: CF+QzmDotii0x/QinTR/8TOsVOFro8UgiWGK6CgwAPU=
Subject key identifier: 00:76:6A:40:98:5E:FD:8D:BC:AB:B0:D6:23:B5:F1:23:A6:7A:E4:BE
Authority key identifier: 93:0A:57:2C:16:D0:C4:4F:77:66:58:7D:92:D8:78:BA:30:54:1D:1E
Certificate issuer: /CN=930a572c16d0c44f7766587d92d878ba30541d1e
Certificate serial: 0196BB929C1EDEB5400053A27F8C0372F477
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwpXLBbQxE93Zlh9kth4ujBUHR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft
Manifest number: 0709
Signing time: Sat 10 May 2025 19:01:09 +0000
Manifest this update: Sat 10 May 2025 19:01:09 +0000
Manifest next update: Sun 11 May 2025 19:01:09 +0000
Files and hashes: 1: dDvbinURbnBhghcDsCWr8pNjL-Q.roa (hash: hUZbMhthMOHDXoT8VJO840vVSWFg65GOQ1Sk4GTZvhs=)
2: kwpXLBbQxE93Zlh9kth4ujBUHR4.crl (hash: O+rSwqYrkYm/QjmhOSTJno71vw+Hq+Q/txdbnvvAjMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwpXLBbQxE93Zlh9kth4ujBUHR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 19:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:92:9c:1e:de:b5:40:00:53:a2:7f:8c:03:72:f4:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=930a572c16d0c44f7766587d92d878ba30541d1e
Validity
Not Before: May 10 19:01:09 2025 GMT
Not After : May 11 19:01:09 2025 GMT
Subject: CN=00766a40985efd8dbcabb0d623b5f123a67ae4be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:76:56:69:0d:2f:05:61:78:69:bc:0c:50:05:
c8:c8:02:74:f0:ba:f4:e7:54:72:5a:c7:fb:7e:5e:
27:ce:85:0c:21:3f:fd:19:52:8e:2e:17:6d:1d:3e:
79:2c:d7:64:3e:d2:50:3f:69:32:e1:fe:6a:f0:bf:
7b:51:1f:9c:1d:0d:c8:d6:9e:b1:d8:db:a9:d9:aa:
c3:12:ae:64:dd:3e:c6:b6:8b:a3:03:42:6a:2c:98:
c4:1e:c7:43:73:93:33:0c:01:e0:95:db:a0:57:f4:
bf:61:0a:fc:14:13:6b:09:1f:d2:ac:c0:0a:33:2b:
19:51:91:fc:bd:59:7f:6a:43:ec:ad:55:95:3e:84:
12:c0:06:cd:42:8d:f2:6a:90:cf:84:d3:58:b2:99:
34:14:e5:e0:20:57:77:e3:4a:ea:d5:7f:a7:ca:9c:
0e:4a:05:3f:ba:55:bb:69:50:96:4f:10:a3:4e:3f:
4d:4c:dd:48:99:54:5f:21:fa:89:ab:af:e9:a2:c3:
fa:46:c9:59:79:5b:6b:b8:77:28:c6:98:c8:72:b6:
d7:6b:94:f9:0c:1c:af:4b:04:81:d4:f0:7a:72:00:
52:b1:84:08:0e:dd:cb:28:31:93:80:5b:3f:ff:60:
e2:8c:c5:bb:fe:f2:15:87:8c:71:d5:8b:b0:ae:63:
62:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:76:6A:40:98:5E:FD:8D:BC:AB:B0:D6:23:B5:F1:23:A6:7A:E4:BE
X509v3 Authority Key Identifier:
keyid:93:0A:57:2C:16:D0:C4:4F:77:66:58:7D:92:D8:78:BA:30:54:1D:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwpXLBbQxE93Zlh9kth4ujBUHR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:01:08:1a:d8:0f:ef:68:f4:9a:f9:11:17:c1:51:66:83:f7:
f0:64:70:42:0e:43:f8:ae:ed:d6:b5:e3:a9:38:42:8b:ca:16:
f5:0e:d4:12:91:6e:ba:f6:e1:16:b9:62:2a:e2:1f:1a:64:c9:
aa:ff:9d:09:ff:b1:ff:ca:0e:8d:3e:04:a4:61:bf:c4:25:3f:
86:50:91:79:a1:04:52:db:8b:cf:16:37:dc:30:cf:b6:06:16:
b9:0b:2b:b4:69:a0:49:de:35:d7:6e:b8:61:5a:0c:27:dc:0e:
ad:fb:6d:43:86:2e:08:8e:cf:f6:4e:f1:56:33:56:24:d8:cb:
48:15:bd:98:e0:da:66:41:2f:45:e9:89:a7:4d:fa:5f:25:30:
81:d7:86:83:ba:95:58:81:e1:62:c1:4f:b7:74:a7:ad:39:c2:
a2:b6:f1:bc:d0:b1:49:c9:c8:52:0c:a9:1c:b4:ff:7d:c5:f8:
80:04:cb:af:6c:42:d9:7c:68:12:27:8e:93:b2:86:1b:a0:49:
72:20:46:62:80:b3:0b:b7:97:a2:b4:de:9e:3d:45:de:59:e2:
03:16:c0:ec:d4:93:56:5c:42:38:79:91:78:51:3a:82:3e:e2:
91:54:d5:e9:14:b1:f6:66:3b:85:c0:ae:bf:78:de:58:6a:a0:
10:36:0c:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa7kpwe3rVAAFOif4wDcvR3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzMGE1NzJjMTZkMGM0NGY3NzY2NTg3ZDkyZDg3OGJhMzA1
NDFkMWUwHhcNMjUwNTEwMTkwMTA5WhcNMjUwNTExMTkwMTA5WjAzMTEwLwYDVQQD
EygwMDc2NmE0MDk4NWVmZDhkYmNhYmIwZDYyM2I1ZjEyM2E2N2FlNGJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXZWaQ0vBWF4abwMUAXIyAJ08Lr0
51RyWsf7fl4nzoUMIT/9GVKOLhdtHT55LNdkPtJQP2ky4f5q8L97UR+cHQ3I1p6x
2Nup2arDEq5k3T7GtoujA0JqLJjEHsdDc5MzDAHgldugV/S/YQr8FBNrCR/SrMAK
MysZUZH8vVl/akPsrVWVPoQSwAbNQo3yapDPhNNYspk0FOXgIFd340rq1X+nypwO
SgU/ulW7aVCWTxCjTj9NTN1ImVRfIfqJq6/posP6RslZeVtruHcoxpjIcrbXa5T5
DByvSwSB1PB6cgBSsYQIDt3LKDGTgFs//2DijMW7/vIVh4xx1YuwrmNiBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAB2akCYXv2NvKuw1iO18SOmeuS+MB8GA1UdIwQY
MBaAFJMKVywW0MRPd2ZYfZLYeLowVB0eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3dwWExCYlF4RTkzWmxoOWt0aDR1akJVSFI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9hYTU1YTItZTMzZS00ZGMwLTlkODct
OGNjNjU3OTQxNWRhLzEva3dwWExCYlF4RTkzWmxoOWt0aDR1akJVSFI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi9hYTU1YTItZTMzZS00ZGMwLTlkODctOGNjNjU3OTQxNWRh
LzEva3dwWExCYlF4RTkzWmxoOWt0aDR1akJVSFI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcAEIGtgP
72j0mvkRF8FRZoP38GRwQg5D+K7t1rXjqThCi8oW9Q7UEpFuuvbhFrliKuIfGmTJ
qv+dCf+x/8oOjT4EpGG/xCU/hlCReaEEUtuLzxY33DDPtgYWuQsrtGmgSd411264
YVoMJ9wOrfttQ4YuCI7P9k7xVjNWJNjLSBW9mODaZkEvRemJp036XyUwgdeGg7qV
WIHhYsFPt3SnrTnCorbxvNCxScnIUgypHLT/fcX4gATLr2xC2XxoEieOk7KGG6BJ
ciBGYoCzC7eXorTenj1F3lniAxbA7NSTVlxCOHmReFE6gj7ikVTV6RSx9mY7hcCu
v3jeWGqgEDYMvw==
-----END CERTIFICATE-----
Generated at Sun May 11 05:19:25 2025 by rpki-client