Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
File: kwpGPWfktC2GOazfDRVCT4LxmmA.mft (raw, json)
Hash identifier: iu5YxCqHh/o07dg9VV+5LClryWcXip+HP8TsAuYUIPM=
Subject key identifier: FD:1C:EA:81:DD:3F:85:DD:37:3C:1E:CC:13:FF:DF:C3:D3:3E:BC:34
Authority key identifier: 93:0A:46:3D:67:E4:B4:2D:86:39:AC:DF:0D:15:42:4F:82:F1:9A:60
Certificate issuer: /CN=930a463d67e4b42d8639acdf0d15424f82f19a60
Certificate serial: 0197B77CBBECBA66359B61F477A554740BA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
Manifest number: 1549
Signing time: Sat 28 Jun 2025 17:01:34 +0000
Manifest this update: Sat 28 Jun 2025 17:01:34 +0000
Manifest next update: Sun 29 Jun 2025 17:01:34 +0000
Files and hashes: 1: j7F-n5BAS7IAV1hUz2AdgLUxWgs.roa (hash: j/qcNW3gwv3EvcvTrR1cViv4t/1AN5TOvaoTXIrqHig=)
2: kwpGPWfktC2GOazfDRVCT4LxmmA.crl (hash: 7wGOJi73uexw3V8hz1d36a/AN548A7qgFI0mSu8Fw08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:bb:ec:ba:66:35:9b:61:f4:77:a5:54:74:0b:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=930a463d67e4b42d8639acdf0d15424f82f19a60
Validity
Not Before: Jun 28 17:01:34 2025 GMT
Not After : Jun 29 17:01:34 2025 GMT
Subject: CN=fd1cea81dd3f85dd373c1ecc13ffdfc3d33ebc34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7f:c3:3a:41:7c:fc:af:d0:9d:b3:74:a8:2d:
ea:38:2a:09:2f:71:da:6c:32:ba:bb:d3:bf:61:93:
ff:11:1b:20:35:9c:6c:1d:41:37:93:fa:d3:d0:f3:
d1:cd:a9:e7:cf:70:c4:2d:fd:c0:0b:43:b9:f0:05:
6e:c9:7d:25:7a:11:5f:89:5f:70:91:70:67:45:ce:
3f:95:12:1c:18:72:a2:52:bc:1d:ac:9c:89:07:4b:
b0:69:a7:00:87:bc:9c:f6:cf:32:1f:34:b0:01:da:
00:79:83:6c:8b:3a:e4:5c:31:c4:ad:cb:c7:02:71:
a5:ec:bc:4d:d3:db:4b:e2:42:4b:b5:a7:02:6d:bf:
7b:41:81:c3:c6:72:be:78:f8:e4:80:be:9c:5c:30:
9c:df:4a:d8:f2:8d:8f:97:bd:d8:17:61:39:90:6d:
b4:16:2f:6d:31:1b:cb:41:1a:4f:6d:95:b6:53:5c:
36:15:08:74:27:95:be:1c:55:13:b0:c9:d8:59:3d:
a2:27:c9:82:06:a0:e3:6f:47:7c:25:32:19:99:da:
e2:b3:42:6f:13:e9:1e:75:57:2a:6c:42:66:b7:a1:
02:9d:26:c7:45:b4:8b:b1:fd:e4:2b:3b:36:da:13:
a6:c9:a2:ca:76:e8:d1:10:b6:9e:c7:74:53:91:a6:
a1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:1C:EA:81:DD:3F:85:DD:37:3C:1E:CC:13:FF:DF:C3:D3:3E:BC:34
X509v3 Authority Key Identifier:
keyid:93:0A:46:3D:67:E4:B4:2D:86:39:AC:DF:0D:15:42:4F:82:F1:9A:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:34:3c:a4:40:cb:5f:9a:0c:ae:29:37:c5:3f:2c:bf:5f:da:
ad:9f:c2:eb:f7:31:6f:9a:c7:e1:c6:fa:94:2c:5d:80:63:32:
0d:a9:dc:b6:35:6a:0c:e5:a1:2b:7a:c2:eb:9f:87:ca:47:01:
24:6c:c1:83:38:67:06:ca:57:dd:3e:8b:09:24:8d:34:a1:dc:
f6:83:99:07:7c:be:82:93:df:8c:ae:29:e0:18:f8:0c:77:00:
7d:65:61:be:0d:35:f1:0f:85:e9:72:a7:90:b5:a9:af:82:90:
ed:57:6e:ef:2c:15:c7:8a:76:90:82:d7:80:32:fb:07:ab:4d:
8b:d0:b4:4a:41:39:cf:ab:2d:4d:9a:80:96:30:ad:10:83:cd:
f0:42:10:d7:72:5a:ed:f1:6a:4d:80:82:c3:e7:c2:f5:fe:cf:
31:b5:dc:eb:f0:76:5c:e9:c5:c9:42:84:bb:76:67:30:b4:05:
c8:e8:3c:e1:38:bc:16:ce:c5:1b:a9:ca:cb:65:03:00:39:c0:
ce:e6:13:75:ad:87:f3:c1:bd:33:7e:02:a7:96:27:64:66:b7:
2e:46:2a:e6:08:f4:f6:0a:e5:2c:4c:b6:24:64:31:6a:fa:f6:
ef:0c:33:fa:76:33:14:9c:80:0d:ae:be:ce:da:d4:19:c4:3f:
72:eb:3e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:41:24 2025 by rpki-client