Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/3fa92f-cabd-413b-ae5c-69b733cbc528/1/knaysJMpLF-nXm4UwqSZrIR-QWs.mft
File: knaysJMpLF-nXm4UwqSZrIR-QWs.mft (raw, json)
Hash identifier: CKyRcqMld0q4/+ZN1TsG12RSzIT+DQBvXGQntb964v0=
Subject key identifier: E1:0B:58:8B:6D:A7:14:23:C2:C7:9D:7B:D4:F9:95:8A:C6:6E:41:F1
Authority key identifier: 92:76:B2:B0:93:29:2C:5F:A7:5E:6E:14:C2:A4:99:AC:84:7E:41:6B
Certificate issuer: /CN=9276b2b093292c5fa75e6e14c2a499ac847e416b
Certificate serial: 0197BE5A5894F299DE4D9FE98D81136F555B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knaysJMpLF-nXm4UwqSZrIR-QWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/3fa92f-cabd-413b-ae5c-69b733cbc528/1/knaysJMpLF-nXm4UwqSZrIR-QWs.mft
Manifest number: 1389
Signing time: Mon 30 Jun 2025 01:01:21 +0000
Manifest this update: Mon 30 Jun 2025 01:01:21 +0000
Manifest next update: Tue 01 Jul 2025 01:01:21 +0000
Files and hashes: 1: knaysJMpLF-nXm4UwqSZrIR-QWs.crl (hash: rqmTsVFC8oINPid12SDUk4V9SZOYj1XmstBPPSj20mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/3fa92f-cabd-413b-ae5c-69b733cbc528/1/knaysJMpLF-nXm4UwqSZrIR-QWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/3fa92f-cabd-413b-ae5c-69b733cbc528/1/knaysJMpLF-nXm4UwqSZrIR-QWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/knaysJMpLF-nXm4UwqSZrIR-QWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 01:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:be:5a:58:94:f2:99:de:4d:9f:e9:8d:81:13:6f:55:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9276b2b093292c5fa75e6e14c2a499ac847e416b
Validity
Not Before: Jun 30 01:01:21 2025 GMT
Not After : Jul 1 01:01:21 2025 GMT
Subject: CN=e10b588b6da71423c2c79d7bd4f9958ac66e41f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:df:17:2b:b1:27:13:c5:9b:fc:d8:aa:fb:5d:
30:5e:c4:77:a5:08:1f:aa:56:b7:df:3e:e6:e9:c5:
4a:06:bf:27:72:3d:7a:e9:52:3b:3e:87:5c:b8:91:
82:83:0a:23:09:d8:7e:df:d0:77:0c:82:d2:30:ea:
12:16:cf:99:06:87:18:04:1f:31:d6:5b:45:78:40:
a7:2f:8c:49:9d:e2:ef:fd:18:9f:f5:ef:1e:93:ff:
9a:e2:e8:20:ff:76:7f:c7:fd:81:07:41:27:ce:53:
91:c7:c3:73:34:25:7e:be:61:fb:79:91:4f:f3:b0:
85:39:b5:bc:49:39:34:96:fa:34:c4:b5:5c:14:53:
b4:c0:90:b3:4b:86:22:34:68:18:e3:44:3e:ac:82:
14:59:b2:7e:3d:b1:62:06:a3:02:a0:66:b3:dd:6c:
17:21:63:9f:19:51:02:52:2d:69:c7:6a:b7:94:b8:
0c:49:5f:e7:2b:f1:d2:6f:cc:5f:95:98:d1:52:20:
a9:26:08:dc:08:d4:51:46:f0:ea:7a:7c:ed:b2:be:
3f:94:4e:52:9b:8e:87:62:4c:a5:96:28:26:19:fa:
6f:9a:2c:02:07:46:d1:96:ee:b0:dc:14:f8:b6:8f:
46:6f:6d:cb:26:d6:5f:fd:5d:67:17:07:68:22:90:
f4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:0B:58:8B:6D:A7:14:23:C2:C7:9D:7B:D4:F9:95:8A:C6:6E:41:F1
X509v3 Authority Key Identifier:
keyid:92:76:B2:B0:93:29:2C:5F:A7:5E:6E:14:C2:A4:99:AC:84:7E:41:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knaysJMpLF-nXm4UwqSZrIR-QWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3fa92f-cabd-413b-ae5c-69b733cbc528/1/knaysJMpLF-nXm4UwqSZrIR-QWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3fa92f-cabd-413b-ae5c-69b733cbc528/1/knaysJMpLF-nXm4UwqSZrIR-QWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:52:15:99:d1:6d:8d:b9:db:c8:10:06:aa:d5:9d:d1:13:f1:
f4:93:af:ae:81:cf:ec:11:56:87:ae:7d:08:9e:59:ba:d5:3c:
85:03:0b:f4:b8:b4:49:5f:99:0f:75:15:b8:a1:ee:d4:c1:fa:
79:bc:a4:6c:57:38:6a:25:74:c8:e2:62:b1:d4:08:07:a8:48:
0f:2c:31:a9:0c:d7:f0:80:15:b8:2b:57:88:af:57:a2:8a:8e:
cf:67:fb:27:30:15:ff:f0:5d:8b:65:9d:4c:5f:34:6d:73:60:
ca:81:09:28:72:06:17:a4:fc:54:2c:07:d1:62:ed:b1:bf:61:
c6:75:e2:85:87:c4:98:cd:a8:1a:2b:04:41:78:46:32:19:a0:
3b:28:de:a7:38:a2:62:5f:76:d5:44:71:75:db:11:93:f9:6d:
21:92:95:22:cc:bb:17:99:b4:a5:19:8c:41:fe:f6:58:cc:28:
f8:60:87:e7:89:fe:69:a4:e8:2e:3d:fe:6c:21:1e:7b:da:1e:
20:3e:a3:70:3c:e1:c4:0a:eb:fb:39:a4:7e:f7:62:f6:31:97:
f5:2c:f9:8e:a8:83:cb:6f:9e:25:d0:d0:85:33:2a:a8:17:f0:
b7:55:b3:f6:1a:3e:2f:f3:da:44:43:ad:69:5a:d1:aa:cf:70:
a8:c1:4d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 11:57:15 2025 by rpki-client