Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
File: KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft (raw, json)
Hash identifier: LmU+uYuagwyi49PJjfeUCRfQznTRBRVDsawy4rCQW1I=
Subject key identifier: 93:B7:99:BC:0B:40:81:FD:F0:E1:44:DE:FD:E8:E4:B5:51:A2:A7:38
Authority key identifier: 2A:73:4E:AB:CF:B5:B6:C2:A4:E4:83:88:ED:B3:AF:8F:50:6B:1F:AB
Certificate issuer: /CN=2a734eabcfb5b6c2a4e48388edb3af8f506b1fab
Certificate serial: 0198D65F4FC8F271948EA1B1CE7BA11497A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 10:00:27 +0000
Manifest this update: Sat 23 Aug 2025 10:00:27 +0000
Manifest next update: Sun 24 Aug 2025 10:00:27 +0000
Files and hashes: 1: KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl (hash: gP5ddubHRSR/E67cNZEYc+jCFH8AGydmS4GPwj9dj+w=)
2: cjk16MmGa9VAbHsgngJUOkSp08A.roa (hash: vjUqfCV04EKTU6LoX8huXEuT5umrktch7/fsTB3KR0w=)
3: k2Uppl8G01BcsH3g3-MinVDILtU.roa (hash: lp7j+Bb3bbdsfLwcfqn/iR6o1CoScaVkVKl5uGRp5+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:4f:c8:f2:71:94:8e:a1:b1:ce:7b:a1:14:97:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a734eabcfb5b6c2a4e48388edb3af8f506b1fab
Validity
Not Before: Aug 23 10:00:27 2025 GMT
Not After : Aug 24 10:00:27 2025 GMT
Subject: CN=93b799bc0b4081fdf0e144defde8e4b551a2a738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ff:df:62:8b:87:76:c0:69:fd:29:6e:54:4a:
fc:63:0f:d2:8a:b1:9d:0e:34:1f:cc:b9:f3:3e:d5:
24:98:0c:c6:30:96:37:b7:97:3e:06:a7:a4:03:2f:
54:d9:ad:c7:c3:5f:03:70:d1:fe:36:86:11:d7:fc:
91:0a:88:8e:f6:f0:19:33:3f:ec:98:15:b6:75:70:
f2:c6:0c:07:d3:fb:f6:65:35:b2:df:ca:8c:b1:fc:
2c:30:52:58:44:2e:e7:de:17:0b:f0:ac:6b:1b:5a:
8f:3e:5e:c3:75:be:1d:c7:7c:2a:31:57:a7:b0:34:
a5:d7:3d:9b:29:82:8a:77:91:12:84:ed:64:51:e8:
e6:e9:e5:91:5f:f3:86:6c:63:8b:27:79:f6:ad:04:
3b:24:ec:f0:9b:1c:0e:7c:8c:48:a4:b8:07:ed:ab:
92:72:ff:7c:1e:c3:d3:3f:b3:d9:bd:4b:a1:4f:47:
fa:63:68:25:87:c8:0b:26:dc:19:80:ec:5e:1c:1d:
05:44:64:a9:dc:80:7c:d2:9c:fe:26:35:bd:b5:1f:
14:c6:43:2f:32:fe:56:4b:be:5d:1a:4e:97:31:5a:
2a:f3:25:a7:87:81:78:b8:7c:04:0d:c6:c7:e1:5f:
b7:23:d4:93:4e:01:e5:6e:d0:d5:3d:7f:71:b0:ef:
be:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B7:99:BC:0B:40:81:FD:F0:E1:44:DE:FD:E8:E4:B5:51:A2:A7:38
X509v3 Authority Key Identifier:
keyid:2A:73:4E:AB:CF:B5:B6:C2:A4:E4:83:88:ED:B3:AF:8F:50:6B:1F:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:95:63:a7:bf:50:f7:bb:63:e7:50:32:09:55:2a:56:c4:c1:
00:f1:87:7d:33:34:3b:8c:1e:b2:b0:ef:d0:41:15:d6:b4:28:
87:6f:b6:9a:bb:2d:ea:65:49:5a:7b:4a:a6:48:39:b0:cb:f0:
fe:44:73:8c:7b:42:e2:dd:0b:2a:47:ee:f1:cc:18:54:c0:56:
f4:a6:ba:4b:7b:e1:96:10:6f:4f:f1:74:d6:d9:7b:7d:5b:e8:
90:6a:51:7d:91:b2:2e:2b:6d:c8:f3:13:70:35:1c:3a:b6:0a:
21:8f:ac:22:29:1a:a5:19:95:ff:99:06:35:6f:ce:9e:bc:f6:
cc:47:34:0a:92:f5:8e:bb:80:5c:28:f8:95:66:6a:99:cc:b5:
97:da:36:34:ff:bc:13:a1:be:fe:e7:a9:27:dd:fc:dc:57:d5:
4c:02:d6:e9:3b:ca:43:38:8f:72:14:e8:8c:8d:b3:7f:65:61:
0b:6c:98:ed:7d:62:5f:cc:a5:7d:08:cd:47:2c:3e:f3:5c:c2:
86:e3:0f:6c:f6:81:52:ca:17:eb:41:23:27:97:c5:7f:73:65:
96:07:cd:29:43:ca:cb:fc:64:f8:6a:87:9e:5b:28:24:21:61:
ee:c5:69:fe:b0:32:93:46:f9:b8:7e:63:e1:cf:a3:73:5e:82:
c4:2c:2e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:28:51 2025 by rpki-client