Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/3fa92f-cabd-413b-ae5c-69b733cbc528/1/knaysJMpLF-nXm4UwqSZrIR-QWs.mft
File: knaysJMpLF-nXm4UwqSZrIR-QWs.mft (raw, json)
Hash identifier: VFZwk5BhdyrnFQcNRxsn1iJeq8PN08tv0QXNIw5ezxo=
Subject key identifier: 6F:05:08:16:BD:F5:39:E7:6D:69:13:08:D1:BA:58:84:E8:CA:C8:9E
Authority key identifier: 92:76:B2:B0:93:29:2C:5F:A7:5E:6E:14:C2:A4:99:AC:84:7E:41:6B
Certificate issuer: /CN=9276b2b093292c5fa75e6e14c2a499ac847e416b
Certificate serial: 0198D660A2272983B3EFD95BDA2DAC90D603
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knaysJMpLF-nXm4UwqSZrIR-QWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/3fa92f-cabd-413b-ae5c-69b733cbc528/1/knaysJMpLF-nXm4UwqSZrIR-QWs.mft
Manifest number: 141A
Signing time: Sat 23 Aug 2025 10:01:53 +0000
Manifest this update: Sat 23 Aug 2025 10:01:53 +0000
Manifest next update: Sun 24 Aug 2025 10:01:53 +0000
Files and hashes: 1: knaysJMpLF-nXm4UwqSZrIR-QWs.crl (hash: h6yzJ6zff8x+k0JpEWhzpDQ38O62FrZOml6IhVpI4kE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/3fa92f-cabd-413b-ae5c-69b733cbc528/1/knaysJMpLF-nXm4UwqSZrIR-QWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/3fa92f-cabd-413b-ae5c-69b733cbc528/1/knaysJMpLF-nXm4UwqSZrIR-QWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/knaysJMpLF-nXm4UwqSZrIR-QWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:a2:27:29:83:b3:ef:d9:5b:da:2d:ac:90:d6:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9276b2b093292c5fa75e6e14c2a499ac847e416b
Validity
Not Before: Aug 23 10:01:53 2025 GMT
Not After : Aug 24 10:01:53 2025 GMT
Subject: CN=6f050816bdf539e76d691308d1ba5884e8cac89e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:36:8f:44:53:be:20:0e:a4:a0:fe:6c:d5:c3:
d5:fc:2a:06:ef:0b:24:85:63:3a:83:85:9f:61:0b:
1b:b1:89:29:bf:ae:ad:43:59:5b:27:8f:13:0c:48:
91:b7:57:1e:88:56:f9:c9:f2:7f:be:79:c9:8e:ab:
e4:2c:de:74:2b:85:ad:b6:4e:d7:74:15:7a:e0:15:
3e:db:a0:61:8a:83:77:86:7c:58:a3:28:b3:58:17:
69:85:a4:1c:44:67:f6:01:ee:82:ff:38:35:f9:87:
48:0f:67:c1:28:76:7f:88:2f:6a:a6:e1:18:76:21:
2a:77:3b:95:17:d4:c5:e8:07:65:f1:b7:43:39:22:
9a:f7:fe:db:84:d7:36:c4:42:94:2e:28:24:af:36:
2a:87:66:81:a1:d3:3b:cd:c5:2a:0d:36:60:b4:da:
05:89:6e:4f:08:f5:52:53:b5:68:6a:41:49:b0:92:
7a:42:b7:da:01:77:8d:df:08:ab:1a:c7:5c:46:cb:
d5:31:c2:cb:f1:87:ea:0e:35:fa:eb:42:23:cc:59:
fa:d9:3d:a5:61:47:2c:19:87:87:b8:a9:aa:6d:8a:
5d:09:17:ef:9b:1e:4d:9e:a9:34:f9:57:73:e9:74:
f6:b4:e6:68:59:20:75:f0:00:3b:b8:b1:50:32:20:
0a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:05:08:16:BD:F5:39:E7:6D:69:13:08:D1:BA:58:84:E8:CA:C8:9E
X509v3 Authority Key Identifier:
keyid:92:76:B2:B0:93:29:2C:5F:A7:5E:6E:14:C2:A4:99:AC:84:7E:41:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knaysJMpLF-nXm4UwqSZrIR-QWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3fa92f-cabd-413b-ae5c-69b733cbc528/1/knaysJMpLF-nXm4UwqSZrIR-QWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3fa92f-cabd-413b-ae5c-69b733cbc528/1/knaysJMpLF-nXm4UwqSZrIR-QWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:bb:f4:fd:da:8a:b0:93:e6:2c:49:4c:2d:07:47:bd:83:ee:
18:2f:b0:9c:66:4e:bd:96:89:af:d9:bb:94:c0:7f:7f:09:ed:
8f:aa:01:6e:56:0c:05:85:a1:5c:af:4c:6e:83:19:04:48:58:
83:eb:18:b9:10:89:7f:91:2a:17:ce:14:7a:96:ad:43:c5:c3:
f6:94:12:00:7e:65:30:f0:6c:80:a8:ec:1b:06:e1:c6:55:9d:
1c:24:70:e0:07:03:73:0a:ed:9c:6e:68:0f:7f:a4:68:2c:85:
85:94:84:79:94:b4:36:f8:3f:60:9e:6e:f2:5b:13:16:75:9e:
04:34:a6:82:78:5c:16:80:49:14:6b:86:4a:4c:dd:69:28:f7:
78:c4:40:f0:a8:ac:7c:cd:55:27:02:5b:c7:12:82:24:6c:9b:
ba:30:b8:23:aa:46:ef:24:ba:42:1e:22:b7:27:40:82:f3:31:
a1:3d:ec:02:2b:3f:88:81:43:bd:75:df:5b:3b:4b:b7:93:68:
e1:48:50:ad:e3:3d:40:fd:d5:d5:e9:18:c4:9d:90:0b:a3:55:
b3:75:4a:00:8c:e4:5c:e5:a2:db:57:5c:db:e9:93:ac:62:2f:
22:76:23:66:e3:24:8a:af:a8:31:72:12:d3:a7:e2:cc:d0:91:
1f:f3:ca:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYKInKYOz79lb2i2skNYDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNzZiMmIwOTMyOTJjNWZhNzVlNmUxNGMyYTQ5OWFjODQ3
ZTQxNmIwHhcNMjUwODIzMTAwMTUzWhcNMjUwODI0MTAwMTUzWjAzMTEwLwYDVQQD
Eyg2ZjA1MDgxNmJkZjUzOWU3NmQ2OTEzMDhkMWJhNTg4NGU4Y2FjODllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujaPRFO+IA6koP5s1cPV/CoG7wsk
hWM6g4WfYQsbsYkpv66tQ1lbJ48TDEiRt1ceiFb5yfJ/vnnJjqvkLN50K4Wttk7X
dBV64BU+26BhioN3hnxYoyizWBdphaQcRGf2Ae6C/zg1+YdID2fBKHZ/iC9qpuEY
diEqdzuVF9TF6Adl8bdDOSKa9/7bhNc2xEKULigkrzYqh2aBodM7zcUqDTZgtNoF
iW5PCPVSU7VoakFJsJJ6QrfaAXeN3wirGsdcRsvVMcLL8YfqDjX660IjzFn62T2l
YUcsGYeHuKmqbYpdCRfvmx5Nnqk0+Vdz6XT2tOZoWSB18AA7uLFQMiAKBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG8FCBa99TnnbWkTCNG6WIToysieMB8GA1UdIwQY
MBaAFJJ2srCTKSxfp15uFMKkmayEfkFrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva25heXNKTXBMRi1uWG00VXdxU1pySVItUVdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS8zZmE5MmYtY2FiZC00MTNiLWFlNWMt
NjliNzMzY2JjNTI4LzEva25heXNKTXBMRi1uWG00VXdxU1pySVItUVdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS8zZmE5MmYtY2FiZC00MTNiLWFlNWMtNjliNzMzY2JjNTI4
LzEva25heXNKTXBMRi1uWG00VXdxU1pySVItUVdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3Lv0/dqK
sJPmLElMLQdHvYPuGC+wnGZOvZaJr9m7lMB/fwntj6oBblYMBYWhXK9MboMZBEhY
g+sYuRCJf5EqF84UepatQ8XD9pQSAH5lMPBsgKjsGwbhxlWdHCRw4AcDcwrtnG5o
D3+kaCyFhZSEeZS0Nvg/YJ5u8lsTFnWeBDSmgnhcFoBJFGuGSkzdaSj3eMRA8Kis
fM1VJwJbxxKCJGybujC4I6pG7yS6Qh4itydAgvMxoT3sAis/iIFDvXXfWztLt5No
4UhQreM9QP3V1ekYxJ2QC6NVs3VKAIzkXOWi21dc2+mTrGIvInYjZuMkiq+oMXIS
06fizNCRH/PKEQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:04:58 2025 by rpki-client