Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f11dea-305e-4898-9192-365347f416c0/1/knseVqx9B4AsRWfEZ5Q1FZtCIJY.mft
File: knseVqx9B4AsRWfEZ5Q1FZtCIJY.mft (raw, json)
Hash identifier: wEVY9gvUdb025oRPS7KUjAE9TxtRkbpXyWbnybwJ6jM=
Subject key identifier: 7E:47:3E:2B:69:2C:0F:9A:28:F9:7E:7D:B5:6F:EE:33:8B:41:6C:CC
Authority key identifier: 92:7B:1E:56:AC:7D:07:80:2C:45:67:C4:67:94:35:15:9B:42:20:96
Certificate issuer: /CN=927b1e56ac7d07802c4567c4679435159b422096
Certificate serial: 0199FEEBC84C9F289F24852A9B0DA101B90D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knseVqx9B4AsRWfEZ5Q1FZtCIJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f11dea-305e-4898-9192-365347f416c0/1/knseVqx9B4AsRWfEZ5Q1FZtCIJY.mft
Manifest number: 16E5
Signing time: Mon 20 Oct 2025 00:01:28 +0000
Manifest this update: Mon 20 Oct 2025 00:01:28 +0000
Manifest next update: Tue 21 Oct 2025 00:01:28 +0000
Files and hashes: 1: ZZutCOlh3Ali7o57VArVQ-r6xEQ.roa (hash: Z8oFv1O8k+i1SuyJDIP9mmTPP/Uv75FEkkBOgolEt4M=)
2: knseVqx9B4AsRWfEZ5Q1FZtCIJY.crl (hash: hA9k/EmKgJpKWjqOEIJPosI0zN+RXhl99ncaiRi4tlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f11dea-305e-4898-9192-365347f416c0/1/knseVqx9B4AsRWfEZ5Q1FZtCIJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/f11dea-305e-4898-9192-365347f416c0/1/knseVqx9B4AsRWfEZ5Q1FZtCIJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/knseVqx9B4AsRWfEZ5Q1FZtCIJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:c8:4c:9f:28:9f:24:85:2a:9b:0d:a1:01:b9:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927b1e56ac7d07802c4567c4679435159b422096
Validity
Not Before: Oct 20 00:01:28 2025 GMT
Not After : Oct 21 00:01:28 2025 GMT
Subject: CN=7e473e2b692c0f9a28f97e7db56fee338b416ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:10:2a:b0:72:09:9a:4f:94:90:29:02:a8:97:
b3:e7:c0:ed:05:3a:0e:ef:70:be:4c:ff:33:47:fe:
fe:51:6b:dd:45:32:be:a1:2f:89:cd:82:b6:32:64:
15:62:99:06:63:e2:57:0e:0f:53:c5:e5:b0:5f:b7:
34:d6:01:d5:ea:fc:7e:67:9d:31:8d:df:14:b4:a1:
8a:b7:34:95:ea:8b:9e:87:bb:b4:9d:0d:ef:65:4e:
b2:66:37:8a:82:35:29:25:7d:5f:bb:d5:25:18:63:
88:58:a9:d3:67:3e:2e:72:58:07:52:63:60:8f:95:
a7:d2:b6:11:ab:04:63:a7:04:92:48:74:b2:e2:17:
80:24:df:3e:f1:12:cc:4a:11:48:6e:ae:89:fc:0f:
d9:71:95:ee:ef:50:48:1a:16:14:f0:52:c2:91:85:
5a:f2:7d:b8:e3:8f:2e:d1:2a:9f:d0:37:7e:35:81:
94:36:3d:07:9b:8c:fe:3d:ba:a2:ab:5f:cc:16:0d:
45:46:ad:a0:4a:66:70:7c:12:91:15:f0:bd:81:78:
17:10:d7:fc:15:9f:06:9a:48:f6:92:be:25:c1:a5:
b3:8a:0e:71:11:3f:03:d1:6f:55:d1:d6:4c:53:68:
ea:8a:08:5a:35:3d:af:f2:6f:da:45:0c:b6:9a:e4:
19:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:47:3E:2B:69:2C:0F:9A:28:F9:7E:7D:B5:6F:EE:33:8B:41:6C:CC
X509v3 Authority Key Identifier:
keyid:92:7B:1E:56:AC:7D:07:80:2C:45:67:C4:67:94:35:15:9B:42:20:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knseVqx9B4AsRWfEZ5Q1FZtCIJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f11dea-305e-4898-9192-365347f416c0/1/knseVqx9B4AsRWfEZ5Q1FZtCIJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f11dea-305e-4898-9192-365347f416c0/1/knseVqx9B4AsRWfEZ5Q1FZtCIJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:ea:6c:1f:93:4c:4e:f3:52:82:e2:eb:21:57:f5:f5:03:70:
7b:56:bc:7d:0d:97:8f:21:ac:11:1b:8a:4f:bb:66:87:c0:b9:
9e:e4:1e:8e:04:f6:fa:7d:c7:45:55:bd:93:e2:de:76:7c:fc:
cf:90:20:f6:0c:34:ff:1a:5f:a2:73:19:23:c8:95:ad:a6:d7:
a0:93:60:64:c0:d6:f5:a6:96:80:32:e2:98:e8:d9:e5:35:4c:
6c:6f:9d:02:ee:fe:a9:60:66:19:94:eb:bc:b5:b6:e8:87:6a:
e2:63:66:a2:bd:cc:8a:4c:5f:8f:24:f0:4e:cb:0d:40:62:1b:
c7:6c:58:fb:0f:9a:fd:d5:27:93:e2:5c:3a:93:66:a2:98:c8:
2f:e8:17:8b:0b:f3:be:4c:63:a3:15:40:ca:78:a6:15:7c:25:
ff:c5:41:ba:a3:1a:a3:c9:ad:cf:64:27:cc:77:c9:8e:0e:d0:
e8:a4:f8:cb:c7:24:72:68:b7:42:ae:b1:28:59:44:49:44:21:
80:3e:ad:dc:2f:b5:57:52:d4:62:04:a8:23:23:da:2f:50:cc:
37:58:05:8b:02:6f:60:63:89:22:b6:b1:d6:ef:ab:44:81:2f:
5e:3c:0c:6c:bc:0e:b2:91:ff:4d:c6:1c:68:9c:b5:3b:d2:b9:
0f:45:36:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:58:35 2025 by rpki-client