Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.mft
File: knpH10d_JWifZNBks-yglkfozqI.mft (raw, json)
Hash identifier: qStZhFhwdk6e0YdubLn3SbYRzXyQ1wgWPLffKb4xVhA=
Subject key identifier: C6:D7:0A:57:9F:C8:04:F8:1F:72:96:0B:1C:40:22:17:B3:21:FC:FC
Authority key identifier: 92:7A:47:D7:47:7F:25:68:9F:64:D0:64:B3:EC:A0:96:47:E8:CE:A2
Certificate issuer: /CN=927a47d7477f25689f64d064b3eca09647e8cea2
Certificate serial: 0198D472BC7CC428B7EE835A63D0AA8A3EA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knpH10d_JWifZNBks-yglkfozqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.mft
Manifest number: 1147
Signing time: Sat 23 Aug 2025 01:02:25 +0000
Manifest this update: Sat 23 Aug 2025 01:02:25 +0000
Manifest next update: Sun 24 Aug 2025 01:02:25 +0000
Files and hashes: 1: Lb4_w3xo3b2R5NUCynuhYVfd8F0.roa (hash: InJIfmRDJ+fA/aUu2uO9nwQjhMlW3TmyfkS552qt2Xg=)
2: knpH10d_JWifZNBks-yglkfozqI.crl (hash: EKdHI3cu7YPmmFZTH6/kDHs9giTuT0LyygsqOvP9anQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/knpH10d_JWifZNBks-yglkfozqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:bc:7c:c4:28:b7:ee:83:5a:63:d0:aa:8a:3e:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927a47d7477f25689f64d064b3eca09647e8cea2
Validity
Not Before: Aug 23 01:02:25 2025 GMT
Not After : Aug 24 01:02:25 2025 GMT
Subject: CN=c6d70a579fc804f81f72960b1c402217b321fcfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e6:b4:6f:50:66:13:5b:2f:62:57:47:18:a7:
7b:a5:49:a1:5b:ab:36:b2:12:20:af:ca:ee:70:01:
92:d4:24:ea:51:3d:f7:94:e1:4c:55:09:b2:d4:35:
30:42:48:3b:e5:11:b0:7a:21:0e:4a:a0:ba:b0:06:
1f:4e:b7:ec:cc:79:5e:0c:35:9b:28:c9:42:f8:eb:
ff:8a:c7:f1:54:72:6f:b0:38:64:e2:25:5c:81:16:
7f:01:80:83:6a:59:5d:95:c6:ee:55:fd:64:77:eb:
03:17:7a:fb:8c:aa:52:dd:19:00:80:1c:f5:ea:4a:
72:a1:7f:ec:57:c8:b8:27:d8:5b:3e:95:57:b5:88:
db:ed:a1:d7:fe:69:be:ba:d8:63:8e:02:59:c3:d3:
b3:76:73:4b:3e:d1:b3:d5:58:d1:c9:c6:66:3b:c0:
b3:67:9c:7e:10:65:e7:e0:4a:0e:a7:44:59:4f:a7:
e1:20:ba:18:1a:ab:81:ae:a3:07:72:f2:bb:9c:53:
7b:de:53:d3:6a:08:cc:10:58:0a:4d:ec:13:f6:64:
fd:87:07:3b:23:1d:48:13:34:a5:1a:23:b3:6b:bb:
d5:a4:6c:99:7f:91:6f:0b:f8:6c:1d:42:b8:26:b1:
43:f2:ab:3a:16:1e:fc:25:9c:c3:16:8e:0b:82:37:
8b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D7:0A:57:9F:C8:04:F8:1F:72:96:0B:1C:40:22:17:B3:21:FC:FC
X509v3 Authority Key Identifier:
keyid:92:7A:47:D7:47:7F:25:68:9F:64:D0:64:B3:EC:A0:96:47:E8:CE:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knpH10d_JWifZNBks-yglkfozqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:08:30:bd:b5:27:c6:2f:fb:61:06:78:42:68:bd:e9:33:d0:
35:eb:55:ac:d4:3e:75:c7:84:1d:3c:60:ee:a7:88:e8:5c:d3:
30:69:ed:25:ab:ad:69:4f:0f:56:12:cc:33:95:12:cf:12:06:
df:ed:f0:ae:6a:62:1c:87:1f:83:d3:f8:b9:8a:f5:96:f2:8d:
4e:6d:56:5b:31:f1:f7:e2:7f:32:81:e6:db:83:45:52:b7:94:
15:03:e2:5c:0b:78:fc:89:52:9d:c0:35:ae:ba:16:a6:19:fa:
05:b1:98:ae:1c:4d:3f:b2:d5:ec:6a:4f:41:a7:47:e0:b3:f4:
bd:fc:56:27:a2:a4:0a:9e:34:f8:4f:a7:c8:d9:73:2a:cd:61:
5b:18:51:77:2b:34:5d:cb:83:cd:3a:9b:43:73:3b:a4:7c:ad:
8f:bb:1e:de:a6:41:3f:4c:f1:4c:87:d0:33:b1:fb:3a:a4:4b:
4e:47:83:1c:12:61:7c:80:c0:aa:78:2b:47:ac:c9:b5:ab:2a:
0d:3a:41:a7:3c:c6:0d:c5:d1:a5:a1:3f:50:bb:69:2e:82:f2:
8e:52:bd:dc:7a:bd:b5:01:90:b2:5a:d7:c2:64:59:54:6a:22:
93:a3:76:45:3d:39:e2:68:59:fd:d9:93:f0:70:d0:67:7f:9d:
43:24:f3:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:58 2025 by rpki-client