Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
File: kwpGPWfktC2GOazfDRVCT4LxmmA.mft (raw, json)
Hash identifier: 97Ky9CziK/6bZ3PP1CuHmK5pab/ZJNFiiym6EHYou8A=
Subject key identifier: D1:8F:7E:EC:B9:DA:78:13:F9:D1:A8:35:B9:FD:04:96:87:A0:E0:7E
Authority key identifier: 93:0A:46:3D:67:E4:B4:2D:86:39:AC:DF:0D:15:42:4F:82:F1:9A:60
Certificate issuer: /CN=930a463d67e4b42d8639acdf0d15424f82f19a60
Certificate serial: 019A00A336AD3047A8C623C75DA5004FD15B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
Manifest number: 1678
Signing time: Mon 20 Oct 2025 08:01:27 +0000
Manifest this update: Mon 20 Oct 2025 08:01:27 +0000
Manifest next update: Tue 21 Oct 2025 08:01:27 +0000
Files and hashes: 1: j7F-n5BAS7IAV1hUz2AdgLUxWgs.roa (hash: j/qcNW3gwv3EvcvTrR1cViv4t/1AN5TOvaoTXIrqHig=)
2: kwpGPWfktC2GOazfDRVCT4LxmmA.crl (hash: b90q2g199FrGzcChMwJjfIqEP54NBwVnZ0to6n5Te1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a3:36:ad:30:47:a8:c6:23:c7:5d:a5:00:4f:d1:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=930a463d67e4b42d8639acdf0d15424f82f19a60
Validity
Not Before: Oct 20 08:01:27 2025 GMT
Not After : Oct 21 08:01:27 2025 GMT
Subject: CN=d18f7eecb9da7813f9d1a835b9fd049687a0e07e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:29:cf:99:1c:36:24:71:d3:08:86:27:9f:38:
65:22:2f:1c:a2:8f:d2:af:35:b3:2e:fd:05:d0:9f:
17:c0:1e:68:42:81:0a:1a:3b:c9:f0:87:4d:2e:44:
a5:de:99:e6:4c:56:2d:1f:69:35:86:b9:16:b7:36:
09:9b:af:10:3c:65:ce:6d:68:17:c8:ea:28:90:42:
9d:5f:84:c2:9c:fb:ab:e2:91:51:00:d3:63:ab:2c:
75:c7:5b:68:72:67:3c:d3:f1:11:ef:ee:bb:9e:c0:
96:34:8c:50:40:ea:19:51:2e:b6:a5:5c:d2:23:38:
26:1b:37:6d:2f:d9:aa:ba:4c:65:ec:dd:0d:13:4e:
02:36:19:1e:93:3d:40:3f:d1:fd:ba:85:e8:7f:db:
e9:d7:eb:0e:5c:d1:cb:53:c4:02:31:41:04:e8:3c:
e6:80:50:7b:43:81:e2:78:c1:bc:a3:c2:92:6a:db:
dc:1f:58:7f:74:88:c6:ca:44:f0:fa:6a:bf:9c:f1:
44:11:6c:78:9a:94:8a:64:9d:a9:c5:c9:46:63:cf:
e1:fe:6d:f5:53:00:c0:13:0d:48:8c:14:ca:8f:c8:
5e:ea:f4:21:43:52:ae:a5:4d:f7:43:d3:8f:36:a1:
5f:33:16:ed:75:b1:7b:c3:33:e0:8f:49:5d:f6:04:
a1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:8F:7E:EC:B9:DA:78:13:F9:D1:A8:35:B9:FD:04:96:87:A0:E0:7E
X509v3 Authority Key Identifier:
keyid:93:0A:46:3D:67:E4:B4:2D:86:39:AC:DF:0D:15:42:4F:82:F1:9A:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:06:11:bd:50:8d:5e:ef:6a:59:a0:84:8e:8d:68:7e:8c:8d:
e3:1b:17:cb:04:53:18:25:45:89:6a:e9:44:dd:14:46:b5:36:
b1:35:a8:8e:a6:a7:6a:ae:6c:e7:05:c4:b6:5e:3d:a6:64:f0:
80:f4:63:6a:3f:c1:74:5e:9f:a5:13:42:d6:39:29:bd:5e:58:
cd:39:91:36:de:29:9d:ec:97:c7:bb:92:a4:09:27:10:6a:94:
1b:bb:76:be:6f:4f:13:23:73:a8:2e:89:59:36:06:e3:d5:ea:
ef:5e:1c:d6:95:03:d9:b7:f1:fe:15:5c:53:e8:74:f3:e2:49:
96:0b:22:09:31:fe:e8:18:7e:5c:45:55:c9:3e:ed:f7:95:86:
8d:15:a5:da:89:d0:55:f4:20:9e:04:01:b7:8e:18:37:d2:da:
f4:b8:46:81:a9:27:1e:61:fa:dc:56:38:ea:e4:fd:48:d7:e8:
6e:d1:c4:86:5c:fb:c4:b5:f9:71:86:fa:0f:a1:8d:c9:bc:56:
e4:d6:4e:b7:9e:35:db:b9:ca:4c:b2:b8:0a:43:79:d4:0b:b1:
e1:44:ba:59:98:da:92:a4:18:cd:2c:13:60:ed:72:17:b1:06:
0b:63:95:05:09:a4:e8:c5:8f:3e:82:93:bd:57:48:a9:75:cf:
e3:22:60:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:06:25 2025 by rpki-client