Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.mft
File: knpH10d_JWifZNBks-yglkfozqI.mft (raw, json)
Hash identifier: Jz8/ImH8p9helCOQe5NmegMfvHGQRkIuoyI+GqF+Tts=
Subject key identifier: AE:B9:3D:1B:06:69:6C:69:2B:38:F0:A1:98:D9:EE:C3:05:B5:C3:B3
Authority key identifier: 92:7A:47:D7:47:7F:25:68:9F:64:D0:64:B3:EC:A0:96:47:E8:CE:A2
Certificate issuer: /CN=927a47d7477f25689f64d064b3eca09647e8cea2
Certificate serial: 0197C049EB9C1F1FCA0EE5E3FD1599B79A22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knpH10d_JWifZNBks-yglkfozqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.mft
Manifest number: 10B8
Signing time: Mon 30 Jun 2025 10:02:39 +0000
Manifest this update: Mon 30 Jun 2025 10:02:39 +0000
Manifest next update: Tue 01 Jul 2025 10:02:39 +0000
Files and hashes: 1: Lb4_w3xo3b2R5NUCynuhYVfd8F0.roa (hash: InJIfmRDJ+fA/aUu2uO9nwQjhMlW3TmyfkS552qt2Xg=)
2: knpH10d_JWifZNBks-yglkfozqI.crl (hash: 2gmMvl/Wqt3g9ZBOFQgbj5UcpesburpnlQt676q7+ew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/knpH10d_JWifZNBks-yglkfozqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 10:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:49:eb:9c:1f:1f:ca:0e:e5:e3:fd:15:99:b7:9a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927a47d7477f25689f64d064b3eca09647e8cea2
Validity
Not Before: Jun 30 10:02:39 2025 GMT
Not After : Jul 1 10:02:39 2025 GMT
Subject: CN=aeb93d1b06696c692b38f0a198d9eec305b5c3b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:82:43:ce:30:f2:18:b3:d8:56:b6:93:7f:b6:
29:4c:31:e2:b2:19:f6:2c:2d:c3:85:75:52:a1:30:
5a:ae:f0:d0:aa:c5:c7:5b:51:ca:08:73:b9:01:a0:
84:a3:e4:7c:f3:47:1f:c9:73:83:94:e8:91:2b:77:
ab:53:bc:3a:9b:3f:80:50:51:f9:47:7a:c9:58:49:
2b:79:e1:f1:c7:e7:4e:48:5a:84:07:d3:60:16:47:
d4:15:cf:5c:0c:f9:5e:cd:f0:2a:c8:45:60:6a:59:
00:16:eb:f4:53:07:ac:e9:29:97:69:98:f0:14:bf:
9b:aa:c3:d6:e3:44:50:81:6a:e0:cd:28:ac:c5:90:
40:da:4c:aa:71:54:4c:e0:f4:0b:31:91:e2:a9:90:
ef:65:4e:e1:7d:9f:0b:29:31:cc:c5:52:38:6c:11:
31:9e:d6:42:20:fd:89:00:e2:73:fb:35:90:77:04:
ab:51:02:3f:94:49:94:0a:2e:63:a9:55:b6:f9:84:
4e:6e:95:69:56:3f:b4:84:2a:18:d7:3b:58:3d:3e:
14:da:fb:bf:b3:77:04:86:da:32:a9:80:fe:66:2f:
92:be:8d:48:a8:81:3a:e7:72:97:d6:18:9e:5d:e3:
eb:65:5a:94:d8:ca:f4:a9:71:49:e4:d4:f2:ee:81:
2f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B9:3D:1B:06:69:6C:69:2B:38:F0:A1:98:D9:EE:C3:05:B5:C3:B3
X509v3 Authority Key Identifier:
keyid:92:7A:47:D7:47:7F:25:68:9F:64:D0:64:B3:EC:A0:96:47:E8:CE:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knpH10d_JWifZNBks-yglkfozqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:ba:88:11:21:9f:ba:52:21:73:8f:0f:4c:55:92:52:7b:b7:
1f:eb:bc:c9:98:d6:07:d2:fe:ab:35:8c:8a:a1:92:de:ab:76:
e0:5e:b5:a3:50:94:33:23:73:ae:4d:81:49:30:e1:6b:21:cb:
99:7e:89:df:82:5d:9b:a7:ba:62:8b:60:4f:c3:5c:55:cc:d5:
09:fe:26:0f:15:48:f4:c6:98:40:95:a2:25:02:f2:f8:8f:4e:
3a:51:6e:94:96:82:11:13:3f:51:83:72:e6:8d:19:91:85:2d:
70:58:6e:0a:38:e0:04:c1:ed:a0:9e:8f:3a:48:8a:7a:e8:ec:
b5:62:84:dd:e5:d8:c2:e4:f2:c9:49:a0:23:9a:81:3a:90:8b:
d5:39:d0:18:84:12:2a:bf:b3:83:6d:19:9b:35:1d:6b:7e:fd:
5f:73:e8:74:d4:8b:73:9b:a7:68:27:a6:12:ab:11:3f:0d:73:
a6:6c:1a:7b:8f:7a:09:1c:9b:ad:b2:8b:28:89:ec:01:19:a1:
94:1c:cb:8a:ba:67:7c:d8:ed:53:e4:29:0c:c4:14:a5:27:97:
d7:cd:27:cd:05:e8:f4:75:8e:20:18:9a:86:7e:fc:b5:5a:80:
a6:3f:b6:6c:d2:df:9d:f4:62:18:10:39:78:ad:a6:6f:ac:3c:
b1:d6:33:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:59:05 2025 by rpki-client