Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft
File: kwpXLBbQxE93Zlh9kth4ujBUHR4.mft (raw, json)
Hash identifier: Tia8QmwR3nPxMKm/MF8BgSFCk/aQrjW45gWAPI4hQco=
Subject key identifier: 3A:CD:8A:46:75:9F:71:B9:9F:99:86:99:58:0C:65:8A:C6:8B:1C:B6
Authority key identifier: 93:0A:57:2C:16:D0:C4:4F:77:66:58:7D:92:D8:78:BA:30:54:1D:1E
Certificate issuer: /CN=930a572c16d0c44f7766587d92d878ba30541d1e
Certificate serial: 0197B6A192D54A7300FB1FADDECFC358AB33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwpXLBbQxE93Zlh9kth4ujBUHR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft
Manifest number: 078B
Signing time: Sat 28 Jun 2025 13:02:11 +0000
Manifest this update: Sat 28 Jun 2025 13:02:11 +0000
Manifest next update: Sun 29 Jun 2025 13:02:11 +0000
Files and hashes: 1: dDvbinURbnBhghcDsCWr8pNjL-Q.roa (hash: hUZbMhthMOHDXoT8VJO840vVSWFg65GOQ1Sk4GTZvhs=)
2: kwpXLBbQxE93Zlh9kth4ujBUHR4.crl (hash: Wfp2/r5tnnRb2dcH0ZMSl7q484PyTz1u0zx3N33H+Mg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwpXLBbQxE93Zlh9kth4ujBUHR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:92:d5:4a:73:00:fb:1f:ad:de:cf:c3:58:ab:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=930a572c16d0c44f7766587d92d878ba30541d1e
Validity
Not Before: Jun 28 13:02:11 2025 GMT
Not After : Jun 29 13:02:11 2025 GMT
Subject: CN=3acd8a46759f71b99f998699580c658ac68b1cb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:26:1c:a1:2a:fe:b5:82:9b:9f:a7:e9:13:4d:
e6:f1:69:cb:e9:6a:b2:10:c2:a8:65:ad:33:b6:b4:
da:92:69:65:a1:56:f7:e4:97:75:5e:6c:1a:b9:73:
4d:3a:f8:b7:83:bc:fc:7d:e1:51:ad:75:c4:1a:de:
c6:ea:5b:ba:a8:d8:5e:70:29:bb:1c:68:bd:f3:1b:
98:2f:0a:d3:f7:23:96:f6:98:da:a3:09:a4:25:0c:
b4:f4:f6:90:04:63:ed:8e:09:20:5e:c8:ec:32:8f:
82:ea:5c:a0:02:3e:15:4e:69:6f:3d:98:27:a4:d8:
a0:ee:3a:6a:bf:e9:6e:e7:42:a1:23:f7:f1:d5:5a:
69:39:6e:7b:fa:d7:64:04:c3:ac:9b:8f:55:89:89:
35:f8:2d:53:83:bf:04:69:eb:90:5e:c8:0e:fa:fa:
45:ef:72:04:51:55:02:fa:26:33:83:b4:6c:d2:d2:
a3:a7:7f:62:47:02:53:e9:9e:64:ad:f1:47:5c:4f:
81:38:2f:22:2c:0b:22:60:44:83:c4:76:33:d8:8c:
b4:77:a6:b9:e2:89:4a:c5:46:72:11:be:76:47:fd:
e4:6d:8c:ec:22:f5:8d:a8:db:e3:ad:95:c1:8b:6f:
c9:34:74:55:09:ff:94:db:c2:63:56:2e:f5:24:23:
bc:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:CD:8A:46:75:9F:71:B9:9F:99:86:99:58:0C:65:8A:C6:8B:1C:B6
X509v3 Authority Key Identifier:
keyid:93:0A:57:2C:16:D0:C4:4F:77:66:58:7D:92:D8:78:BA:30:54:1D:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwpXLBbQxE93Zlh9kth4ujBUHR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:93:c9:45:62:c9:c4:b5:93:8e:6c:c5:1c:9e:8a:81:31:88:
de:d7:1c:cd:50:f6:0e:3e:5e:54:86:3e:af:8b:b7:2b:0f:0c:
d4:84:42:d9:24:4e:0f:44:fb:85:2c:1f:b9:f6:e7:e0:f7:eb:
a2:51:76:bd:7b:9f:cc:b9:fc:80:c2:74:cc:ed:e7:03:eb:3f:
d6:48:8d:8a:71:8b:62:3e:af:93:13:c2:3f:d5:f7:ee:44:8f:
98:d1:5e:e0:97:46:6f:bb:6c:22:42:a9:19:33:b7:8b:b9:58:
1c:62:9c:4f:5f:a3:92:60:a8:02:de:0a:df:8d:0b:da:5b:a7:
de:13:4e:00:f7:a0:cb:9c:e5:f6:67:2b:7e:55:64:0e:94:5f:
3b:67:5a:f2:f0:11:f3:0e:e2:45:5e:d1:84:6e:b4:c1:ad:33:
04:96:f7:3a:45:b9:89:59:d1:86:fd:9e:59:e3:ec:8f:76:4c:
6f:05:65:8a:aa:f1:53:d1:6f:f8:54:af:6b:d6:94:ef:5b:5c:
a9:a0:a6:e8:01:3e:9d:f8:ef:8d:76:a3:b1:28:01:84:6b:e8:
b0:98:ba:c4:5e:bb:6d:a8:65:2f:a9:0b:98:c8:a4:dd:7d:7d:
49:db:ad:a4:68:50:e7:31:9a:68:c7:e1:71:d5:40:45:74:1d:
79:6b:e0:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:45:58 2025 by rpki-client