Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.mft
File: knpH10d_JWifZNBks-yglkfozqI.mft (raw, json)
Hash identifier: o6hT23/0VXADKi2SdKc3HRCOlGX4pHNauRekflieMYo=
Subject key identifier: 36:D0:F8:96:5D:DC:89:C3:0C:05:16:1B:83:41:4D:4A:ED:59:DE:90
Authority key identifier: 92:7A:47:D7:47:7F:25:68:9F:64:D0:64:B3:EC:A0:96:47:E8:CE:A2
Certificate issuer: /CN=927a47d7477f25689f64d064b3eca09647e8cea2
Certificate serial: 0196C3149F1B506583633AD6DF0A44F41FD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knpH10d_JWifZNBks-yglkfozqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.mft
Manifest number: 1035
Signing time: Mon 12 May 2025 06:00:30 +0000
Manifest this update: Mon 12 May 2025 06:00:30 +0000
Manifest next update: Tue 13 May 2025 06:00:30 +0000
Files and hashes: 1: Lb4_w3xo3b2R5NUCynuhYVfd8F0.roa (hash: InJIfmRDJ+fA/aUu2uO9nwQjhMlW3TmyfkS552qt2Xg=)
2: knpH10d_JWifZNBks-yglkfozqI.crl (hash: 861/We0w9GWJ/258DT4kqecKK6dwar2WdheqttIPR/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/knpH10d_JWifZNBks-yglkfozqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:14:9f:1b:50:65:83:63:3a:d6:df:0a:44:f4:1f:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927a47d7477f25689f64d064b3eca09647e8cea2
Validity
Not Before: May 12 06:00:30 2025 GMT
Not After : May 13 06:00:30 2025 GMT
Subject: CN=36d0f8965ddc89c30c05161b83414d4aed59de90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f5:ed:cb:9e:66:88:03:a1:cf:28:34:25:ef:
18:19:36:5a:f5:08:23:d3:15:8a:15:49:c6:e2:1b:
b8:23:fa:33:26:a8:27:f0:2c:f8:5f:0a:4f:f1:8b:
01:56:d9:cc:69:ff:82:d6:22:3d:1a:94:31:f9:dd:
53:c0:4d:d7:93:3e:d7:13:ce:1a:0f:d6:ca:b6:23:
b8:67:3a:19:04:4f:e8:3b:37:a7:c7:59:75:54:d5:
7e:43:16:fa:9a:85:60:75:bb:42:49:53:05:a5:40:
c1:ad:16:d0:29:36:e4:5f:09:79:42:10:50:55:9a:
80:d0:f0:49:af:1d:c7:73:f2:84:63:51:e1:53:23:
2f:cb:f8:04:2b:a2:a1:22:52:c0:86:97:58:0e:21:
32:70:33:84:78:9f:4d:57:1e:56:23:5a:1c:e0:e4:
e5:01:b7:a5:07:82:4a:4c:a6:15:6e:30:f2:95:26:
42:bc:41:fe:d2:4f:04:33:8b:8b:de:98:62:82:9f:
f1:8c:45:e2:06:92:ea:5f:29:8a:e2:fa:39:a5:d1:
33:64:f0:bc:16:61:86:39:bd:a1:ba:de:92:4e:79:
9c:c4:91:24:b7:91:df:8f:20:c7:87:a4:fb:73:1f:
7f:a9:5d:a7:53:6e:79:72:c6:2a:3d:4e:8d:31:f0:
b3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:D0:F8:96:5D:DC:89:C3:0C:05:16:1B:83:41:4D:4A:ED:59:DE:90
X509v3 Authority Key Identifier:
keyid:92:7A:47:D7:47:7F:25:68:9F:64:D0:64:B3:EC:A0:96:47:E8:CE:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knpH10d_JWifZNBks-yglkfozqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:7a:1a:64:9c:94:09:1c:05:1c:0a:1a:f2:d5:f4:d5:88:09:
72:56:ce:92:57:ff:ab:57:b0:f2:2c:0a:1b:1c:a4:1f:4e:b9:
50:53:d0:19:f5:c8:37:ec:c2:eb:62:83:58:b0:c4:9e:a5:0f:
03:04:66:77:af:42:3c:ff:e5:6b:0f:14:73:77:72:24:d4:81:
e1:56:77:a5:85:ab:d5:9c:c5:8a:5e:58:34:d4:8c:3e:2a:4d:
7a:37:01:e9:c8:8d:32:89:1d:66:64:42:9a:83:cf:bc:d7:cd:
e3:5a:73:b6:49:a3:d7:77:4c:06:40:3b:cf:b7:e0:ba:3f:4e:
b9:99:c3:29:38:e9:0f:22:fa:4c:90:b0:6d:a9:5b:8f:d9:f0:
5a:d7:c4:4d:13:e6:b9:60:3e:57:28:65:e4:cb:46:00:e2:2c:
8c:3d:e5:94:ef:aa:38:c7:e2:53:da:ef:0f:9b:9d:5c:99:e1:
57:22:68:a8:b9:1d:0a:b3:88:d5:51:5b:1c:c5:24:9f:54:7e:
c2:3a:0a:ca:9d:43:50:58:78:ea:37:18:d5:d6:fd:c7:a6:77:
1d:98:8d:37:ae:71:d4:ad:f0:1a:26:b2:b0:c1:e0:81:34:3e:
56:23:96:9e:12:d4:4e:a3:4b:21:3a:9e:3f:79:de:ff:b5:c0:
2c:ef:2f:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:22:42 2025 by rpki-client