Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
File: KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft (raw, json)
Hash identifier: JDh5BD7U+z6iZPdzhypcL6DryGp7pdCKjFWFQ9hdSNc=
Subject key identifier: 48:88:72:CD:2A:54:0C:25:3F:58:94:A1:67:4B:30:76:13:58:37:EC
Authority key identifier: 2A:73:4E:AB:CF:B5:B6:C2:A4:E4:83:88:ED:B3:AF:8F:50:6B:1F:AB
Certificate issuer: /CN=2a734eabcfb5b6c2a4e48388edb3af8f506b1fab
Certificate serial: 0199FFC7D160D17CDD203BE7EDF416475A94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
Manifest number: 16E5
Signing time: Mon 20 Oct 2025 04:01:49 +0000
Manifest this update: Mon 20 Oct 2025 04:01:49 +0000
Manifest next update: Tue 21 Oct 2025 04:01:49 +0000
Files and hashes: 1: KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl (hash: ugWP9zGw6eZ/3fnC5vugvRLOhvWnqcT6F+bDKfC638A=)
2: cjk16MmGa9VAbHsgngJUOkSp08A.roa (hash: vjUqfCV04EKTU6LoX8huXEuT5umrktch7/fsTB3KR0w=)
3: k2Uppl8G01BcsH3g3-MinVDILtU.roa (hash: lp7j+Bb3bbdsfLwcfqn/iR6o1CoScaVkVKl5uGRp5+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:d1:60:d1:7c:dd:20:3b:e7:ed:f4:16:47:5a:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a734eabcfb5b6c2a4e48388edb3af8f506b1fab
Validity
Not Before: Oct 20 04:01:49 2025 GMT
Not After : Oct 21 04:01:49 2025 GMT
Subject: CN=488872cd2a540c253f5894a1674b3076135837ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:72:e5:71:d1:25:e8:44:27:f3:92:4a:86:86:
86:cd:9f:0c:c8:9f:21:07:69:34:59:5a:a4:bb:f7:
73:ee:04:49:f0:61:10:6e:c4:3e:d0:05:f0:25:41:
96:e4:73:40:88:3e:f7:16:77:9c:0e:2d:f2:49:e9:
99:6f:69:1c:e0:85:b7:e9:a5:8e:b8:fa:a0:1e:06:
f9:40:be:9c:d9:dc:0d:32:58:2d:73:b2:a9:a9:fe:
23:9b:61:c1:66:7d:75:fe:88:f1:e3:01:1b:8f:9b:
96:da:86:40:0f:64:c6:e9:12:80:36:e6:ce:1e:35:
15:e2:93:8b:99:7a:3b:13:27:87:4c:43:1c:f4:8a:
76:a4:12:f1:b1:a6:a2:25:6d:af:20:84:b2:ba:a0:
28:d1:a9:f4:bf:07:9f:19:3b:2c:c1:ee:e8:6a:1a:
b5:5e:70:e7:31:12:e9:94:19:94:35:8f:8c:f0:af:
64:a3:60:a6:f6:1f:6d:0b:07:59:24:90:37:d6:4d:
44:e2:14:2d:28:9f:ec:a4:90:cd:62:6b:b2:28:c5:
cf:67:5d:69:65:a1:78:a9:f2:5b:a1:2e:6b:88:b8:
36:16:5b:a5:88:3d:a8:63:32:ab:6e:db:36:f0:92:
43:dc:42:57:bf:88:b4:e2:9a:47:9f:fd:07:fc:10:
a1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:88:72:CD:2A:54:0C:25:3F:58:94:A1:67:4B:30:76:13:58:37:EC
X509v3 Authority Key Identifier:
keyid:2A:73:4E:AB:CF:B5:B6:C2:A4:E4:83:88:ED:B3:AF:8F:50:6B:1F:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:c7:48:48:bb:1b:8f:82:56:ae:87:26:ab:b7:4e:f5:9f:ba:
36:d3:cd:6a:86:02:28:75:d3:3e:c3:6e:74:6a:b8:a8:9a:eb:
ec:0d:74:6f:3b:60:3b:7c:06:3f:ab:02:0d:bc:3f:83:59:c9:
cc:8d:38:01:d7:d6:ef:62:6f:db:c1:06:d2:2a:bf:a1:5c:6b:
ff:57:14:e1:b8:d4:c7:8e:3f:89:c9:12:2f:5d:e1:ca:f8:b7:
e0:c1:2c:df:82:76:c3:ee:cc:18:ba:bf:e4:3c:a1:b2:c2:e6:
a1:cb:63:6a:46:9c:ef:41:6b:d9:f7:b0:57:47:1a:ef:58:5d:
90:41:c8:72:cc:cb:04:d2:47:1f:aa:38:86:02:3b:ca:45:2f:
a3:79:9d:dd:6a:7a:ff:1e:7d:b0:99:d1:f4:49:da:c2:90:fd:
aa:01:eb:28:0e:63:dc:0a:d1:3e:6e:be:54:6f:00:96:33:c6:
4c:72:43:70:a5:9e:84:8f:24:e4:b9:48:2b:e7:f2:aa:6b:ed:
72:3d:4a:a4:90:fe:b6:e5:d4:f1:ce:66:ac:f8:df:61:79:71:
96:3c:8e:72:6e:63:d4:83:08:a7:f0:12:a9:f6:b9:4f:68:40:
7c:4c:98:38:a2:30:19:56:83:5b:40:f1:f7:7f:58:c2:f1:01:
a2:f1:ee:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:03:08 2025 by rpki-client