Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/3fa92f-cabd-413b-ae5c-69b733cbc528/1/knaysJMpLF-nXm4UwqSZrIR-QWs.mft
File: knaysJMpLF-nXm4UwqSZrIR-QWs.mft (raw, json)
Hash identifier: Y77O7JrphU0KJqE93tw9rmjF/+hv/x506i2RyRmXR28=
Subject key identifier: D2:FB:C2:FB:03:F5:9D:A6:26:1A:2F:75:48:87:34:F6:8C:6C:7D:15
Authority key identifier: 92:76:B2:B0:93:29:2C:5F:A7:5E:6E:14:C2:A4:99:AC:84:7E:41:6B
Certificate issuer: /CN=9276b2b093292c5fa75e6e14c2a499ac847e416b
Certificate serial: 0199FFC7ECB660684B083EC3672EF9737A66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knaysJMpLF-nXm4UwqSZrIR-QWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/3fa92f-cabd-413b-ae5c-69b733cbc528/1/knaysJMpLF-nXm4UwqSZrIR-QWs.mft
Manifest number: 14B4
Signing time: Mon 20 Oct 2025 04:01:56 +0000
Manifest this update: Mon 20 Oct 2025 04:01:56 +0000
Manifest next update: Tue 21 Oct 2025 04:01:56 +0000
Files and hashes: 1: knaysJMpLF-nXm4UwqSZrIR-QWs.crl (hash: ZlIotmUFNU0xX8hbN8HtLrdhFdsWGIwK92n55OiQVvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/3fa92f-cabd-413b-ae5c-69b733cbc528/1/knaysJMpLF-nXm4UwqSZrIR-QWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/3fa92f-cabd-413b-ae5c-69b733cbc528/1/knaysJMpLF-nXm4UwqSZrIR-QWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/knaysJMpLF-nXm4UwqSZrIR-QWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:ec:b6:60:68:4b:08:3e:c3:67:2e:f9:73:7a:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9276b2b093292c5fa75e6e14c2a499ac847e416b
Validity
Not Before: Oct 20 04:01:56 2025 GMT
Not After : Oct 21 04:01:56 2025 GMT
Subject: CN=d2fbc2fb03f59da6261a2f75488734f68c6c7d15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e8:48:3a:78:61:31:90:11:a0:a4:f1:36:30:
1e:f0:6a:fa:7b:30:2f:26:7d:f5:a0:80:b4:75:bb:
bf:d1:5c:58:31:ea:c9:32:26:b1:da:b6:d8:c6:08:
93:71:04:cd:5a:b9:2b:cf:69:2c:13:c4:dd:3f:a6:
99:8d:d8:c1:ed:28:3e:e3:4f:64:ba:b6:33:43:d0:
d4:22:4e:e6:5d:a2:c5:55:26:b3:dd:10:ff:7f:7f:
54:4c:20:17:5e:95:2f:0d:ef:9d:e1:70:39:53:ff:
5a:2d:76:14:f5:cc:cc:ec:08:b2:b7:c0:d7:df:88:
bf:81:38:c1:a9:b0:c3:b8:89:e1:b1:2e:8e:ca:74:
a3:0a:a1:d4:6a:03:1f:8a:0f:7a:70:af:2c:89:6a:
ab:54:ab:ac:a0:39:c1:4d:30:a8:e0:c7:10:85:dc:
de:68:fd:e3:5d:14:33:32:c0:1b:b0:f8:3b:75:e6:
0c:12:f8:f0:71:9e:43:cb:57:ff:30:5f:58:a7:79:
66:df:f0:ee:13:1a:46:d9:e4:ca:44:af:70:2f:ea:
4b:49:f0:4f:9f:c8:b2:b9:5e:1b:88:17:11:1c:f0:
3d:e5:69:d4:86:57:5e:55:fb:b2:f9:d9:a5:ab:25:
54:df:d3:98:f9:c4:c1:54:d9:d8:79:ab:d8:8f:8b:
f1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:FB:C2:FB:03:F5:9D:A6:26:1A:2F:75:48:87:34:F6:8C:6C:7D:15
X509v3 Authority Key Identifier:
keyid:92:76:B2:B0:93:29:2C:5F:A7:5E:6E:14:C2:A4:99:AC:84:7E:41:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knaysJMpLF-nXm4UwqSZrIR-QWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3fa92f-cabd-413b-ae5c-69b733cbc528/1/knaysJMpLF-nXm4UwqSZrIR-QWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3fa92f-cabd-413b-ae5c-69b733cbc528/1/knaysJMpLF-nXm4UwqSZrIR-QWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:24:01:32:6b:22:a2:ab:b5:dd:aa:af:03:14:8d:13:b7:b1:
a3:7a:b4:d9:66:4c:18:8b:78:46:be:86:89:b3:5f:ea:83:b7:
a6:34:9b:49:58:7e:08:74:fa:96:f6:16:27:14:b9:07:54:55:
c1:92:b4:cf:7e:b7:b3:cc:ac:c9:9d:fe:1d:8a:3e:56:4c:f7:
17:b4:19:0a:19:a4:48:23:73:0e:c3:55:0b:b0:9e:98:27:a7:
cc:e4:4a:67:92:85:cc:7f:96:01:34:fb:fe:4c:f2:c9:ba:f4:
f6:9a:e7:16:b9:a3:e4:01:c8:96:63:70:47:70:6d:72:86:27:
21:4c:d5:3b:e9:ff:3b:c0:82:39:dd:c0:7d:07:d2:3e:61:5c:
04:2f:51:6f:06:8c:9d:99:82:c3:f7:f1:44:19:fa:bb:7f:9e:
3f:98:de:66:4f:cc:a2:b2:c7:22:5c:c2:b3:bc:14:90:19:38:
f9:6c:e0:a0:dc:ff:32:12:98:c7:20:22:06:fc:b4:df:19:b4:
7f:cd:d8:38:01:b4:40:f7:db:ee:59:d0:de:8f:15:91:bd:94:
01:40:20:fc:74:4f:5e:bd:68:fe:3d:c7:43:05:44:cf:c0:5f:
61:e2:84:e7:6e:7c:2f:6d:32:88:21:4f:29:55:46:87:b8:c6:
a8:3c:a4:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:59:01 2025 by rpki-client