Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
File: KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft (raw, json)
Hash identifier: qPd7mgpaGSKEDkjyJQ+22rPukxHhZB3ohcQOFORxZ0Y=
Subject key identifier: 29:3F:5E:20:2A:15:58:71:8F:C2:C2:E9:29:71:64:56:5E:91:64:5B
Authority key identifier: 2A:73:4E:AB:CF:B5:B6:C2:A4:E4:83:88:ED:B3:AF:8F:50:6B:1F:AB
Certificate issuer: /CN=2a734eabcfb5b6c2a4e48388edb3af8f506b1fab
Certificate serial: 0197B6A0C2D71678E43D23D2273496AB2798
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 13:01:18 +0000
Manifest this update: Sat 28 Jun 2025 13:01:18 +0000
Manifest next update: Sun 29 Jun 2025 13:01:18 +0000
Files and hashes: 1: KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl (hash: z6PbrbdcKYdlHm1iKveahbbtzJNatIceqaUtLdUObWg=)
2: cjk16MmGa9VAbHsgngJUOkSp08A.roa (hash: vjUqfCV04EKTU6LoX8huXEuT5umrktch7/fsTB3KR0w=)
3: k2Uppl8G01BcsH3g3-MinVDILtU.roa (hash: lp7j+Bb3bbdsfLwcfqn/iR6o1CoScaVkVKl5uGRp5+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:c2:d7:16:78:e4:3d:23:d2:27:34:96:ab:27:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a734eabcfb5b6c2a4e48388edb3af8f506b1fab
Validity
Not Before: Jun 28 13:01:18 2025 GMT
Not After : Jun 29 13:01:18 2025 GMT
Subject: CN=293f5e202a1558718fc2c2e9297164565e91645b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d0:49:cf:e5:e2:fe:8e:8d:e1:44:4a:87:30:
3b:eb:f3:c8:06:10:9d:50:06:28:34:e7:bb:ed:eb:
45:86:73:53:c0:63:c1:0e:d2:c4:35:06:cc:f6:27:
2f:65:28:8c:6d:c9:e4:9b:b6:e7:f9:b7:29:a8:59:
93:1b:be:8a:ff:91:7c:a4:d9:5d:f8:b2:c8:0a:52:
c5:46:57:2f:f0:21:2b:36:a8:d5:49:e4:79:96:07:
94:78:45:46:1a:50:12:95:ef:bc:be:fb:24:4a:37:
3a:5b:80:93:30:c1:93:81:1f:76:be:59:94:73:a1:
c3:a4:82:d2:8e:d1:99:30:ea:ea:ad:ed:36:a0:16:
19:f4:ae:7e:96:59:70:68:ca:71:5f:81:73:02:40:
6e:27:63:30:15:dd:14:9b:43:c8:42:34:d5:a2:5f:
7a:4d:5c:05:37:db:d3:d8:15:5d:56:e6:45:17:be:
93:5e:9b:80:59:26:f4:26:e3:57:f6:d8:37:cf:05:
13:66:04:ec:e4:25:c0:5b:47:62:a7:28:19:cc:d7:
c3:ed:21:91:a5:22:d8:ce:db:6a:4f:9b:35:9f:2f:
a0:fa:f7:79:fe:72:d1:2b:4c:f2:53:8d:1e:de:2f:
0b:e8:1e:f9:1c:d2:93:d6:58:58:5c:98:9d:cd:8c:
db:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:3F:5E:20:2A:15:58:71:8F:C2:C2:E9:29:71:64:56:5E:91:64:5B
X509v3 Authority Key Identifier:
keyid:2A:73:4E:AB:CF:B5:B6:C2:A4:E4:83:88:ED:B3:AF:8F:50:6B:1F:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:8f:cb:8f:06:1e:37:3c:96:77:d9:bc:10:4b:94:d4:f3:20:
ef:00:55:27:63:7c:29:31:2c:5b:97:fc:76:b7:11:2a:15:c3:
0c:bf:fc:dc:4f:8b:18:f8:c8:a2:a0:8a:28:0a:55:38:bb:f2:
7c:4b:7c:8e:2f:b0:6d:31:51:24:63:2f:61:42:85:23:52:99:
a2:48:84:a6:14:d9:db:79:e7:bc:32:b4:18:54:d9:c1:80:2a:
47:b8:38:39:13:9c:f8:39:7c:71:a3:54:6c:08:af:09:0e:c3:
6f:03:ab:71:33:ff:e1:2f:cb:2b:30:49:fd:7e:6a:83:ea:5e:
3e:f9:92:2f:56:98:24:c2:85:fd:e5:0d:56:95:c2:e8:61:df:
a7:af:b8:aa:24:54:49:4a:c1:ac:00:c9:85:cf:d4:63:86:59:
9a:d2:9c:1c:56:b8:77:67:8e:54:64:fb:46:9a:f4:c3:9b:ea:
5d:34:b7:4f:50:c1:4b:6f:ed:66:62:e9:fb:80:82:cc:68:5b:
c4:35:a3:97:33:e3:f9:38:ab:84:9f:09:3c:1e:5e:ce:97:fc:
80:56:79:c6:36:ea:f2:1b:ed:4a:6c:6c:dd:84:04:7b:5d:71:
3a:69:60:57:58:19:e1:1a:55:33:f9:34:b8:35:ca:2b:c9:bd:
76:f5:f3:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:14:42 2025 by rpki-client