Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.mft
File: KwA-WDvbJRH_V6t6MvznQTNLNDs.mft (raw, json)
Hash identifier: Qa7DcQHQfuSbYqULN33wFTSAFBeP33tPfmZQKwYZ2io=
Subject key identifier: BB:86:7C:85:F9:38:3E:C2:0F:FD:BB:CA:C2:A6:5A:0E:37:0F:4F:DC
Authority key identifier: 2B:00:3E:58:3B:DB:25:11:FF:57:AB:7A:32:FC:E7:41:33:4B:34:3B
Certificate issuer: /CN=2b003e583bdb2511ff57ab7a32fce741334b343b
Certificate serial: 0196A164C32A89E36238439999E2E42396C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KwA-WDvbJRH_V6t6MvznQTNLNDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.mft
Manifest number: 1527
Signing time: Mon 05 May 2025 17:00:57 +0000
Manifest this update: Mon 05 May 2025 17:00:57 +0000
Manifest next update: Tue 06 May 2025 17:00:57 +0000
Files and hashes: 1: 0NCBB1EVTJYHifgmM7E7rBOVhWE.roa (hash: xXtvRZ+O4A6Lgj7z0RgWOmE79cvAliXW5idwtaE71is=)
2: KwA-WDvbJRH_V6t6MvznQTNLNDs.crl (hash: d6/ZcViHCvE6uOc3TN+NRXZhPB43W57jPwjtQ4hbxx8=)
3: NhsPqOKPZlSrioMLr9lpaOYtrkc.roa (hash: V+PG/h3YDAOvt0v7a2x6UYLDP619SNg1ngThHlkwZTQ=)
4: rrcNnyYoHhtYzKs3plgNVsgCnq0.roa (hash: U0CZhyWrF/GWPNXT51c8u412LDB2x6JjdiyBKZ4mr/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/KwA-WDvbJRH_V6t6MvznQTNLNDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 17:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:64:c3:2a:89:e3:62:38:43:99:99:e2:e4:23:96:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b003e583bdb2511ff57ab7a32fce741334b343b
Validity
Not Before: May 5 17:00:57 2025 GMT
Not After : May 6 17:00:57 2025 GMT
Subject: CN=bb867c85f9383ec20ffdbbcac2a65a0e370f4fdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:19:cc:cb:e4:07:cb:30:a6:b3:dc:02:36:6c:
e4:c4:0b:cc:32:d9:54:b5:81:d9:de:69:5c:44:aa:
c9:f7:c3:44:5c:41:98:b6:49:28:e7:0e:27:fa:35:
e5:14:9b:09:70:bf:e7:69:6b:74:2f:d9:af:73:72:
18:6e:b1:4f:d0:9b:ee:85:07:af:ac:d8:e2:c2:81:
ad:3a:d9:a9:99:f0:f3:eb:e9:d6:10:ca:f4:fe:c4:
a7:4e:5d:fe:69:ee:a2:04:43:dd:2f:1f:d4:24:de:
55:94:4e:85:2d:2f:45:7e:d8:3d:05:ee:18:7f:4a:
ef:df:af:d0:05:28:6f:6a:27:72:ec:6f:2d:74:a4:
8d:7a:50:3b:02:3c:bb:c9:2d:af:48:ce:74:82:5e:
70:3b:7f:b3:c5:da:7f:e5:20:ab:5e:fc:9c:83:5e:
b2:9c:ab:aa:64:2a:81:79:c3:a3:2e:b2:c0:12:9a:
e5:fe:22:f1:a8:3b:ac:43:c3:d6:88:34:01:1f:ce:
c9:cd:4e:a0:1f:dd:01:73:44:1b:76:e6:e7:c0:de:
ce:7e:b9:a6:bd:07:97:04:05:20:5f:1b:41:66:cf:
d1:3e:82:9f:0c:2b:c8:6e:79:6d:d2:14:f8:7a:67:
3d:66:4c:ac:43:5f:f0:41:c5:05:ed:e3:53:72:94:
2a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:86:7C:85:F9:38:3E:C2:0F:FD:BB:CA:C2:A6:5A:0E:37:0F:4F:DC
X509v3 Authority Key Identifier:
keyid:2B:00:3E:58:3B:DB:25:11:FF:57:AB:7A:32:FC:E7:41:33:4B:34:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwA-WDvbJRH_V6t6MvznQTNLNDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/194f22-8689-4fdb-9c41-058bbf9d5e27/1/KwA-WDvbJRH_V6t6MvznQTNLNDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:9d:85:0b:39:2d:aa:d2:6c:64:2d:c2:05:63:2f:a7:9a:0b:
6d:b5:c1:26:77:3c:2e:b6:d3:17:4f:fd:21:b3:1a:40:9a:b2:
61:85:0a:be:f4:b3:a9:8b:86:6b:93:d7:0c:bc:d7:eb:77:e9:
2c:7c:45:e7:de:9f:7e:9f:6a:f8:db:e2:01:3d:d7:19:09:88:
64:66:f1:bb:f3:d8:b5:7b:af:08:2c:d8:69:4e:fe:f5:06:39:
5a:4e:8c:0e:cb:de:83:3e:69:94:c6:40:d4:c5:15:62:e4:cb:
59:4c:84:aa:16:0e:1b:25:e9:1e:d2:79:17:33:37:15:7b:f2:
c8:21:00:b8:b6:ea:c5:d9:24:de:e7:fb:a6:81:6f:07:d4:18:
f0:c6:26:17:1b:59:2a:07:5a:99:8b:30:4b:fa:22:ad:5d:58:
b7:5c:17:d4:87:3b:3c:5d:49:02:b6:a1:f6:4d:e0:e0:7a:07:
52:ca:ff:67:42:79:70:c5:db:55:c7:f9:a0:c5:05:3d:3c:2e:
a1:f8:2e:fa:87:d3:3a:cf:3b:e5:1b:ae:c0:f1:a9:9e:45:05:
c9:76:b1:a9:d5:4e:5d:21:38:ca:70:ec:14:7b:0a:b8:ad:ee:
d4:db:2d:cb:22:ed:9d:bf:6f:00:86:27:61:0d:c7:0c:ca:f3:
35:62:ec:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 02:10:33 2025 by rpki-client