
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/9afaf5-e696-483e-8365-34efd5b9e9cd/1/KnFIxGH1534Qevc1ZqJ-NDVh3B0.mft
File: KnFIxGH1534Qevc1ZqJ-NDVh3B0.mft (raw, json)
Hash identifier: eieAEhrMTjWPyv/5MG8vMY0u4mMS+jHzX8ruwi5nnzE=
Subject key identifier: 92:AB:28:90:82:4A:DF:FC:58:CA:62:AD:EC:E6:62:BD:27:71:CE:47
Authority key identifier: 2A:71:48:C4:61:F5:E7:7E:10:7A:F7:35:66:A2:7E:34:35:61:DC:1D
Certificate issuer: /CN=2a7148c461f5e77e107af73566a27e343561dc1d
Certificate serial: 0198D6607E9080AC4ABFC8DD33979AF6664A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KnFIxGH1534Qevc1ZqJ-NDVh3B0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/9afaf5-e696-483e-8365-34efd5b9e9cd/1/KnFIxGH1534Qevc1ZqJ-NDVh3B0.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 10:01:44 +0000
Manifest this update: Sat 23 Aug 2025 10:01:44 +0000
Manifest next update: Sun 24 Aug 2025 10:01:44 +0000
Files and hashes: 1: KnFIxGH1534Qevc1ZqJ-NDVh3B0.crl (hash: rweVyQ7tpFOi53dB1bJg7mkV8px0bAFmlZchIuik/qM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/9afaf5-e696-483e-8365-34efd5b9e9cd/1/KnFIxGH1534Qevc1ZqJ-NDVh3B0.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/9afaf5-e696-483e-8365-34efd5b9e9cd/1/KnFIxGH1534Qevc1ZqJ-NDVh3B0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KnFIxGH1534Qevc1ZqJ-NDVh3B0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:7e:90:80:ac:4a:bf:c8:dd:33:97:9a:f6:66:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a7148c461f5e77e107af73566a27e343561dc1d
Validity
Not Before: Aug 23 10:01:44 2025 GMT
Not After : Aug 24 10:01:44 2025 GMT
Subject: CN=92ab2890824adffc58ca62adece662bd2771ce47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:37:27:a6:06:93:ce:f4:e0:bf:b4:55:0b:72:
19:14:bb:9c:b2:48:44:9b:e2:bb:06:49:0b:cc:58:
9c:30:f2:c8:75:79:ad:57:19:42:5f:ba:66:bd:f8:
d9:9c:94:92:16:9f:5f:05:15:ea:98:e8:24:05:a1:
e5:d5:9d:6e:45:32:a3:05:62:40:12:68:cf:ad:1c:
2a:6a:3a:d1:21:f8:14:a2:d1:ff:5d:db:18:4b:b1:
49:d4:d1:cc:07:71:ed:de:2b:a3:0a:c6:da:27:de:
3e:30:69:b9:b8:08:98:d4:f6:3e:9c:af:8a:94:e1:
7e:50:7a:08:1a:cd:b8:90:4a:4d:80:76:9a:7f:59:
4f:f7:a7:1c:4c:d3:13:80:2e:1f:ba:a8:d6:69:f0:
e6:b2:65:a4:d0:08:dd:43:88:02:ff:d4:f3:34:e5:
05:4b:02:7c:ea:55:14:78:51:d0:59:09:42:5c:91:
b8:97:a6:cb:8c:fd:a4:3c:45:57:81:fe:a3:e1:94:
ec:af:97:a6:2d:a3:53:0f:33:3a:f7:d4:40:0b:5c:
9a:2f:ae:86:38:63:0c:90:af:4f:41:03:2c:c9:26:
12:77:78:75:bb:d8:ca:f1:a0:29:de:a0:21:8e:3f:
12:06:34:8f:ad:98:db:1b:75:2b:3d:43:35:08:92:
72:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:AB:28:90:82:4A:DF:FC:58:CA:62:AD:EC:E6:62:BD:27:71:CE:47
X509v3 Authority Key Identifier:
keyid:2A:71:48:C4:61:F5:E7:7E:10:7A:F7:35:66:A2:7E:34:35:61:DC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KnFIxGH1534Qevc1ZqJ-NDVh3B0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9afaf5-e696-483e-8365-34efd5b9e9cd/1/KnFIxGH1534Qevc1ZqJ-NDVh3B0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9afaf5-e696-483e-8365-34efd5b9e9cd/1/KnFIxGH1534Qevc1ZqJ-NDVh3B0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:9c:81:b9:ab:26:04:5b:79:50:ff:2f:c0:30:f5:37:b6:fe:
71:d3:42:90:b4:5a:b0:f5:bb:1e:ef:dd:3d:e0:65:12:e9:95:
c8:9b:8b:db:8c:80:42:0d:f5:89:7a:85:b2:e4:34:d6:57:a4:
cd:4b:9c:24:32:85:d0:75:b4:84:ea:bb:4b:c2:60:17:63:82:
49:07:d1:ac:d8:05:82:42:89:a0:58:29:7c:c3:c5:bd:ac:60:
dd:8d:16:bf:49:e1:66:bc:9f:12:0a:a1:32:1a:4c:91:af:0d:
68:f3:ec:f5:bb:b2:a1:1d:58:a4:7e:7f:22:95:79:3b:76:30:
e1:f6:dc:34:f0:db:a7:d3:3e:7e:84:90:0a:eb:f6:e6:c4:aa:
3b:bf:2d:a6:9b:0b:ff:55:35:00:56:b7:70:17:24:e2:b9:1c:
a8:54:5e:9f:53:b0:48:b0:9c:7f:24:64:fd:b2:dc:ef:02:a2:
03:6f:a5:af:16:b0:8d:ba:06:83:64:ce:e1:01:a0:81:dc:e7:
6b:ba:c9:54:c2:94:90:65:80:5d:45:82:65:59:98:64:8e:eb:
77:7c:2a:4a:8f:93:8e:a5:eb:9c:f8:85:81:eb:61:df:3a:a1:
c4:08:14:33:99:88:e2:c0:49:a7:89:da:3c:7d:a7:bc:b1:89:
e5:56:78:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:58:29 2025 by rpki-client