Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f11dea-305e-4898-9192-365347f416c0/1/knseVqx9B4AsRWfEZ5Q1FZtCIJY.mft
File: knseVqx9B4AsRWfEZ5Q1FZtCIJY.mft (raw, json)
Hash identifier: 8v+ZtP55+i6KkovokW7m5/Xv52qNbsH4d4jH1NzHswE=
Subject key identifier: E3:C2:87:46:F4:07:26:93:65:A5:3C:64:02:9D:72:C5:6A:DD:88:60
Authority key identifier: 92:7B:1E:56:AC:7D:07:80:2C:45:67:C4:67:94:35:15:9B:42:20:96
Certificate issuer: /CN=927b1e56ac7d07802c4567c4679435159b422096
Certificate serial: 0197CCF1530244945A6D0FC532E9B75813BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knseVqx9B4AsRWfEZ5Q1FZtCIJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f11dea-305e-4898-9192-365347f416c0/1/knseVqx9B4AsRWfEZ5Q1FZtCIJY.mft
Manifest number: 15C2
Signing time: Wed 02 Jul 2025 21:00:56 +0000
Manifest this update: Wed 02 Jul 2025 21:00:56 +0000
Manifest next update: Thu 03 Jul 2025 21:00:56 +0000
Files and hashes: 1: ZZutCOlh3Ali7o57VArVQ-r6xEQ.roa (hash: Z8oFv1O8k+i1SuyJDIP9mmTPP/Uv75FEkkBOgolEt4M=)
2: knseVqx9B4AsRWfEZ5Q1FZtCIJY.crl (hash: 5LmYfEisUfcIW5MIjB2EF2teQGAfVo5soqnhBZCsAMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f11dea-305e-4898-9192-365347f416c0/1/knseVqx9B4AsRWfEZ5Q1FZtCIJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/f11dea-305e-4898-9192-365347f416c0/1/knseVqx9B4AsRWfEZ5Q1FZtCIJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/knseVqx9B4AsRWfEZ5Q1FZtCIJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 19:33:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:f1:53:02:44:94:5a:6d:0f:c5:32:e9:b7:58:13:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927b1e56ac7d07802c4567c4679435159b422096
Validity
Not Before: Jul 2 21:00:56 2025 GMT
Not After : Jul 3 21:00:56 2025 GMT
Subject: CN=e3c28746f407269365a53c64029d72c56add8860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0b:d9:c5:01:63:a8:c2:4a:30:23:63:51:1f:
2f:ef:1a:88:c8:ba:fb:48:d1:fc:b6:56:35:5c:64:
5a:f3:fe:aa:5e:3e:2d:38:cf:5a:54:bb:c2:ff:f6:
51:f1:58:ba:75:dc:62:78:23:f4:64:bb:5d:08:ef:
ef:aa:b4:83:a3:39:e4:c6:09:f6:43:87:21:7d:34:
f4:8c:3c:53:4e:ea:3f:7c:17:08:e0:b5:c8:75:30:
f8:83:06:6a:82:ea:4e:3b:97:44:9a:40:3d:58:90:
82:d6:5c:eb:c3:fa:2e:8b:d7:21:d1:5e:66:3b:22:
e4:0f:a2:a3:54:79:7d:60:8d:78:46:64:ad:a2:ab:
c1:18:af:4d:f7:95:d3:b7:04:78:19:a9:47:11:7b:
4d:26:af:dc:6e:a7:65:9c:c8:fd:4e:a7:6f:94:b6:
f5:cb:38:18:61:58:9c:16:84:eb:4e:77:98:43:e4:
8b:3a:14:7e:cf:c8:38:3f:cf:0f:29:13:4e:83:46:
ea:d8:e0:64:d5:b2:8c:67:e7:a1:4e:8e:e8:8d:79:
ac:d2:8a:a2:5b:de:8b:e9:ad:92:6e:16:09:f7:1f:
b8:1c:85:36:3e:d0:17:fc:9c:af:a1:3f:02:db:22:
64:fe:d9:a4:a9:a1:2a:dc:d3:17:84:45:12:ca:b2:
2c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C2:87:46:F4:07:26:93:65:A5:3C:64:02:9D:72:C5:6A:DD:88:60
X509v3 Authority Key Identifier:
keyid:92:7B:1E:56:AC:7D:07:80:2C:45:67:C4:67:94:35:15:9B:42:20:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knseVqx9B4AsRWfEZ5Q1FZtCIJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f11dea-305e-4898-9192-365347f416c0/1/knseVqx9B4AsRWfEZ5Q1FZtCIJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f11dea-305e-4898-9192-365347f416c0/1/knseVqx9B4AsRWfEZ5Q1FZtCIJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:9f:6c:9d:a8:d2:49:73:c4:fa:30:0d:7a:fb:6f:ae:94:e9:
5f:17:0d:6b:62:75:26:ee:3a:df:09:19:4e:ea:d2:e5:90:4b:
89:6a:ec:96:0d:a1:a8:2d:f7:20:8a:23:ef:da:f5:4f:72:fd:
0b:b3:f8:db:54:12:5a:13:cb:c2:a8:8d:8d:d8:c4:fd:5e:01:
7a:6d:d5:ae:64:5a:b3:b2:68:f6:e2:9e:73:3d:10:23:e2:92:
33:39:64:0b:05:0c:8b:6d:d3:52:3d:0b:65:14:1b:0c:14:20:
f3:d9:74:2b:5d:9a:f9:d8:de:ab:c6:e4:89:e6:07:23:40:9e:
7d:4f:a7:ed:29:f1:54:30:99:a4:b5:f1:49:10:ee:04:ca:7b:
43:f9:56:a9:5a:43:e5:8c:1b:50:22:5f:31:3e:94:63:3e:6f:
8c:20:92:3b:26:43:aa:3c:62:1a:73:be:f3:ad:2b:03:d4:18:
4b:59:8c:8e:d6:39:a3:6c:48:79:58:e9:25:b7:aa:f9:5a:8b:
96:8d:7e:42:62:21:8c:5a:39:c3:70:72:d6:f4:ef:6e:c1:53:
e5:e3:a4:22:3f:20:b2:dd:7a:ca:54:1c:67:ac:0c:ab:bc:79:
8b:cc:69:c0:1d:70:80:a2:9b:a7:45:64:02:ff:56:bd:7e:e1:
85:e2:56:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 22:31:13 2025 by rpki-client