Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f11dea-305e-4898-9192-365347f416c0/1/knseVqx9B4AsRWfEZ5Q1FZtCIJY.mft
File: knseVqx9B4AsRWfEZ5Q1FZtCIJY.mft (raw, json)
Hash identifier: yqW80KhF36zWf/+YCDMb1PVafftXdq77GUbeyywJRek=
Subject key identifier: 70:F6:2F:0D:60:AB:9D:22:C1:2E:E8:93:A5:07:1A:46:E5:98:8F:00
Authority key identifier: 92:7B:1E:56:AC:7D:07:80:2C:45:67:C4:67:94:35:15:9B:42:20:96
Certificate issuer: /CN=927b1e56ac7d07802c4567c4679435159b422096
Certificate serial: 0198D58373D21E030AD1B64CDD2CDB52C509
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knseVqx9B4AsRWfEZ5Q1FZtCIJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f11dea-305e-4898-9192-365347f416c0/1/knseVqx9B4AsRWfEZ5Q1FZtCIJY.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 06:00:18 +0000
Manifest this update: Sat 23 Aug 2025 06:00:18 +0000
Manifest next update: Sun 24 Aug 2025 06:00:18 +0000
Files and hashes: 1: ZZutCOlh3Ali7o57VArVQ-r6xEQ.roa (hash: Z8oFv1O8k+i1SuyJDIP9mmTPP/Uv75FEkkBOgolEt4M=)
2: knseVqx9B4AsRWfEZ5Q1FZtCIJY.crl (hash: YChztTmURFMRzZ7hWlKK9xKQxsRPmKnK2nJwvx4gH7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f11dea-305e-4898-9192-365347f416c0/1/knseVqx9B4AsRWfEZ5Q1FZtCIJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/f11dea-305e-4898-9192-365347f416c0/1/knseVqx9B4AsRWfEZ5Q1FZtCIJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/knseVqx9B4AsRWfEZ5Q1FZtCIJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:73:d2:1e:03:0a:d1:b6:4c:dd:2c:db:52:c5:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927b1e56ac7d07802c4567c4679435159b422096
Validity
Not Before: Aug 23 06:00:18 2025 GMT
Not After : Aug 24 06:00:18 2025 GMT
Subject: CN=70f62f0d60ab9d22c12ee893a5071a46e5988f00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4e:b9:f0:e4:ca:46:44:30:81:07:d5:77:5b:
1c:7d:83:b4:c1:13:2f:f0:ef:cf:83:f4:a1:b4:12:
ee:57:cc:76:bf:5b:60:f5:43:94:9b:ce:72:0f:af:
3b:13:26:fa:fb:c4:ea:a0:15:6f:4c:03:d5:81:51:
a6:52:14:eb:d7:54:17:92:19:fd:03:a1:24:eb:15:
65:60:53:16:37:72:9c:52:2e:af:58:f1:65:63:2a:
96:64:89:50:62:df:fe:96:0d:75:e0:1e:8d:9c:95:
1b:07:4e:06:23:52:cf:b9:43:4e:cd:5a:62:42:1f:
2c:80:06:ce:be:89:20:35:39:35:dd:48:2b:3e:ac:
4c:f6:94:c9:30:02:9a:21:51:e8:db:a7:bf:cc:7d:
b4:65:0d:36:d0:8e:09:79:29:c7:34:6c:5b:5d:8c:
a2:9b:d9:c1:aa:ac:c1:29:d7:1d:24:a9:70:4e:e1:
8c:3a:73:88:83:34:3b:6b:67:74:53:c7:98:66:2d:
39:ce:5b:a4:27:33:28:39:43:d0:dd:3c:88:80:c5:
1d:69:a6:3d:c3:0d:23:2d:a2:48:99:9e:c2:06:74:
c6:9c:51:99:c7:c6:ff:bc:3f:97:22:36:00:0b:2d:
90:f6:f4:c0:f8:da:1c:b5:c5:90:e1:f6:16:c9:0d:
6b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F6:2F:0D:60:AB:9D:22:C1:2E:E8:93:A5:07:1A:46:E5:98:8F:00
X509v3 Authority Key Identifier:
keyid:92:7B:1E:56:AC:7D:07:80:2C:45:67:C4:67:94:35:15:9B:42:20:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knseVqx9B4AsRWfEZ5Q1FZtCIJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f11dea-305e-4898-9192-365347f416c0/1/knseVqx9B4AsRWfEZ5Q1FZtCIJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f11dea-305e-4898-9192-365347f416c0/1/knseVqx9B4AsRWfEZ5Q1FZtCIJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:db:76:c2:7d:13:50:0e:2f:ed:a0:1a:9b:e9:82:4a:6e:ba:
d6:15:99:61:ac:65:9d:9b:47:c3:48:fb:d6:95:c5:3f:fc:92:
b4:b2:3b:3a:04:c4:a4:f8:98:e3:87:ee:25:e2:28:01:c4:36:
e0:e4:43:cc:37:fb:cc:45:a1:eb:c1:9a:6d:d2:4f:af:0e:9f:
9f:1d:d8:30:9e:92:4c:df:2d:2b:79:38:6d:24:76:7c:2a:6a:
0a:51:f0:8d:49:c9:99:42:45:92:8d:89:17:7b:a2:65:8b:1d:
c7:33:4a:c1:21:58:6f:14:a8:d5:01:8d:43:62:81:76:72:bf:
21:92:15:7e:6a:55:a1:47:2d:11:6e:f5:bb:1a:87:80:af:6c:
37:e1:5d:33:8c:7a:e6:e7:16:2f:f9:3c:70:54:70:a4:2b:29:
47:b7:87:c1:ec:1d:a2:39:53:ec:cc:01:79:ed:cc:89:58:a1:
b4:74:70:69:5c:fb:ac:f0:bb:e1:d9:00:dc:2b:41:8f:ae:5c:
35:14:09:d3:98:2d:fe:3a:f1:89:d2:a2:54:75:9e:92:31:09:
50:50:d3:7b:be:d9:7e:2d:68:10:a1:5a:cb:c1:12:8b:8f:90:
ad:80:44:43:eb:1e:41:23:2d:cc:ce:bf:3d:93:1b:5b:9b:a5:
a4:59:10:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg3PSHgMK0bZM3SzbUsUJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyN2IxZTU2YWM3ZDA3ODAyYzQ1NjdjNDY3OTQzNTE1OWI0
MjIwOTYwHhcNMjUwODIzMDYwMDE4WhcNMjUwODI0MDYwMDE4WjAzMTEwLwYDVQQD
Eyg3MGY2MmYwZDYwYWI5ZDIyYzEyZWU4OTNhNTA3MWE0NmU1OTg4ZjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmU658OTKRkQwgQfVd1scfYO0wRMv
8O/Pg/ShtBLuV8x2v1tg9UOUm85yD687Eyb6+8TqoBVvTAPVgVGmUhTr11QXkhn9
A6Ek6xVlYFMWN3KcUi6vWPFlYyqWZIlQYt/+lg114B6NnJUbB04GI1LPuUNOzVpi
Qh8sgAbOvokgNTk13UgrPqxM9pTJMAKaIVHo26e/zH20ZQ020I4JeSnHNGxbXYyi
m9nBqqzBKdcdJKlwTuGMOnOIgzQ7a2d0U8eYZi05zlukJzMoOUPQ3TyIgMUdaaY9
ww0jLaJImZ7CBnTGnFGZx8b/vD+XIjYACy2Q9vTA+NoctcWQ4fYWyQ1rAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHD2Lw1gq50iwS7ok6UHGkblmI8AMB8GA1UdIwQY
MBaAFJJ7HlasfQeALEVnxGeUNRWbQiCWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva25zZVZxeDlCNEFzUldmRVo1UTFGWnRDSUpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mMTFkZWEtMzA1ZS00ODk4LTkxOTIt
MzY1MzQ3ZjQxNmMwLzEva25zZVZxeDlCNEFzUldmRVo1UTFGWnRDSUpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9mMTFkZWEtMzA1ZS00ODk4LTkxOTItMzY1MzQ3ZjQxNmMw
LzEva25zZVZxeDlCNEFzUldmRVo1UTFGWnRDSUpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATNt2wn0T
UA4v7aAam+mCSm661hWZYaxlnZtHw0j71pXFP/yStLI7OgTEpPiY44fuJeIoAcQ2
4ORDzDf7zEWh68GabdJPrw6fnx3YMJ6STN8tK3k4bSR2fCpqClHwjUnJmUJFko2J
F3uiZYsdxzNKwSFYbxSo1QGNQ2KBdnK/IZIVfmpVoUctEW71uxqHgK9sN+FdM4x6
5ucWL/k8cFRwpCspR7eHwewdojlT7MwBee3MiVihtHRwaVz7rPC74dkA3CtBj65c
NRQJ05gt/jrxidKiVHWekjEJUFDTe77Zfi1oEKFay8ESi4+QrYBEQ+seQSMtzM6/
PZMbW5ulpFkQLA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:39:53 2025 by rpki-client