Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.mft
File: KWAWrWTCJgCs8wSfh1j1PrseV8Q.mft (raw, json)
Hash identifier: mV/WawPh/3tHXdPaz4QkNNtBTpjw9F9jeCE2ZMzeSAk=
Subject key identifier: 43:09:48:DC:D5:8F:78:A6:0C:5B:D5:2B:AE:4F:F2:CF:BC:02:20:F9
Authority key identifier: 29:60:16:AD:64:C2:26:00:AC:F3:04:9F:87:58:F5:3E:BB:1E:57:C4
Certificate issuer: /CN=296016ad64c22600acf3049f8758f53ebb1e57c4
Certificate serial: 0197C6EFB28CA6F249F23CFA967470BAA740
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWAWrWTCJgCs8wSfh1j1PrseV8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.mft
Manifest number: 0374
Signing time: Tue 01 Jul 2025 17:01:26 +0000
Manifest this update: Tue 01 Jul 2025 17:01:26 +0000
Manifest next update: Wed 02 Jul 2025 17:01:26 +0000
Files and hashes: 1: IoK2zTe-OC_dDY_734EVd48qQJ8.roa (hash: OV/EhbwqGxvFaPc6Pz7o/yEGyZxODTXrHQIagp84Afg=)
2: KWAWrWTCJgCs8wSfh1j1PrseV8Q.crl (hash: qJVDz3TJfs2fJzyOhDE7n+f4s2HOCSu/YTDqBSOP0wE=)
3: ZRdLYDl7hpyDg6YsYK-Wdw4baMc.roa (hash: 5DTIP8T8IUMMx2MqkILNMeW793Ol6SuU7VuRgBULAp4=)
4: r_GgOOrK8Ih9MzmtnCA_DxxC0BY.roa (hash: lJ1n4OTRsjhQ2vj+G2gNkyHqsFIRt5AG3VU9W6pXzHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWAWrWTCJgCs8wSfh1j1PrseV8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 16:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:ef:b2:8c:a6:f2:49:f2:3c:fa:96:74:70:ba:a7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296016ad64c22600acf3049f8758f53ebb1e57c4
Validity
Not Before: Jul 1 17:01:26 2025 GMT
Not After : Jul 2 17:01:26 2025 GMT
Subject: CN=430948dcd58f78a60c5bd52bae4ff2cfbc0220f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:14:92:fe:2d:93:4c:9c:79:39:d3:fe:12:05:
3d:d7:c2:f8:2e:3c:ab:a5:61:f1:91:1d:db:af:21:
79:17:3f:fe:12:62:67:9f:4a:c8:91:af:31:d3:2b:
ec:ee:97:59:13:52:68:28:b7:01:b5:0a:4b:5a:6e:
a6:82:55:0d:c3:99:48:3a:bf:f1:23:23:ea:cd:31:
0c:f0:5e:ba:f8:7d:90:67:f3:4e:74:af:d6:85:38:
93:c9:68:e8:e1:90:52:00:25:b1:ad:12:a0:8e:99:
e6:b1:45:22:20:0d:0e:eb:27:a4:15:55:75:0a:8e:
0c:89:f7:9f:03:66:96:45:44:9f:f9:5a:a1:88:cb:
f9:39:5b:31:94:bd:65:ff:d7:99:3a:8f:ff:3f:7a:
f5:5b:d3:b9:c1:64:0a:96:4f:d5:c0:a4:18:d5:79:
68:d7:86:8e:07:70:e7:b0:07:55:02:a2:a3:fb:76:
d7:91:c3:db:5c:dd:7a:0c:00:a7:cf:2d:9d:8d:98:
7a:67:84:4b:2a:14:13:01:15:db:ad:6e:b4:7d:6f:
e1:cc:1c:f5:63:a8:c6:21:21:4c:c4:6a:4e:ec:72:
34:c0:99:2e:f3:f3:ab:38:10:c8:fe:11:d3:46:f2:
95:05:43:08:03:66:fb:09:2b:d2:29:b9:0a:54:a5:
a6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:09:48:DC:D5:8F:78:A6:0C:5B:D5:2B:AE:4F:F2:CF:BC:02:20:F9
X509v3 Authority Key Identifier:
keyid:29:60:16:AD:64:C2:26:00:AC:F3:04:9F:87:58:F5:3E:BB:1E:57:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWAWrWTCJgCs8wSfh1j1PrseV8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:20:98:91:23:bb:a6:54:3c:95:79:f8:4a:f3:65:f3:cc:79:
a7:53:e4:72:a8:31:19:62:a2:e6:9e:11:ba:f7:01:86:67:42:
be:77:0b:f7:dd:f1:7d:6f:fe:e2:d7:c4:01:3c:5f:78:ff:0d:
5e:58:73:5f:e4:cc:94:2d:e9:66:f6:d8:ac:19:05:fd:9c:ac:
62:8a:ab:a2:56:69:e4:a2:da:9d:73:4e:0b:7c:9b:27:62:4d:
3e:05:38:cc:4e:fb:52:df:0e:de:01:19:8c:f3:33:5c:26:b3:
04:53:65:b2:25:fc:c2:00:e5:e0:f9:82:75:d3:a9:1e:25:11:
dc:4b:b7:7d:67:93:21:4b:6e:7d:93:0a:b1:7b:16:32:11:f5:
e9:fa:2a:41:ef:07:72:ef:c9:55:8c:f9:2c:81:ec:8a:8e:03:
07:00:e3:f3:96:1f:b9:4e:3a:fd:75:3f:8d:e1:bf:bd:ab:1b:
08:49:87:af:f1:db:07:72:e3:f6:67:9e:c8:2c:40:c2:d6:cd:
8d:7d:df:84:83:36:90:13:f8:2d:aa:61:f5:d8:7e:80:76:8a:
06:d4:1e:21:77:c8:e0:f0:6e:d0:e8:13:48:c9:2a:8d:a4:43:
67:cb:79:c1:13:e6:cf:ac:58:aa:3c:a3:c1:99:02:aa:5d:25:
c1:4b:79:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:05:54 2025 by rpki-client