Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.mft
File: knpH10d_JWifZNBks-yglkfozqI.mft (raw, json)
Hash identifier: tw/KUVyw3+/I8VizwVFoEwMFcuJmNpCGy1r+yNhkFw8=
Subject key identifier: 27:46:F9:16:52:2F:46:2E:8A:3C:67:B9:F7:65:A4:6E:C8:68:5F:3A
Authority key identifier: 92:7A:47:D7:47:7F:25:68:9F:64:D0:64:B3:EC:A0:96:47:E8:CE:A2
Certificate issuer: /CN=927a47d7477f25689f64d064b3eca09647e8cea2
Certificate serial: 0199FDD8ECB0EC41CFBE6D0482845135F1A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knpH10d_JWifZNBks-yglkfozqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.mft
Manifest number: 11E1
Signing time: Sun 19 Oct 2025 19:01:15 +0000
Manifest this update: Sun 19 Oct 2025 19:01:15 +0000
Manifest next update: Mon 20 Oct 2025 19:01:15 +0000
Files and hashes: 1: Lb4_w3xo3b2R5NUCynuhYVfd8F0.roa (hash: InJIfmRDJ+fA/aUu2uO9nwQjhMlW3TmyfkS552qt2Xg=)
2: knpH10d_JWifZNBks-yglkfozqI.crl (hash: 9XMN3UJMg2Ot2azUcSw3NZx8AeVKpneMn6ck/ajXNIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/knpH10d_JWifZNBks-yglkfozqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:ec:b0:ec:41:cf:be:6d:04:82:84:51:35:f1:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927a47d7477f25689f64d064b3eca09647e8cea2
Validity
Not Before: Oct 19 19:01:15 2025 GMT
Not After : Oct 20 19:01:15 2025 GMT
Subject: CN=2746f916522f462e8a3c67b9f765a46ec8685f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:b5:b2:f3:3a:ff:89:96:77:c2:37:b4:87:06:
8c:7e:e7:00:e8:3a:12:f8:e7:07:60:9e:47:64:70:
8f:23:3a:7d:a9:a5:50:eb:2f:5b:26:2e:27:88:3a:
5f:96:93:50:13:dc:dd:60:62:dd:09:ff:88:20:d9:
67:0d:fb:6f:5d:14:b0:52:c1:0f:e6:06:8a:43:21:
34:90:25:19:85:92:00:e6:c0:81:a9:a4:37:72:65:
25:35:60:b9:0e:54:16:34:f7:f7:b6:a8:61:60:81:
50:93:b0:2a:44:d3:4d:11:16:58:f6:0f:cd:d3:16:
22:3c:f3:e8:e2:58:fd:d8:43:c4:8a:f3:44:77:10:
f8:7e:55:85:a0:42:c3:7e:b8:58:9f:12:2a:f6:d7:
b7:a1:7e:a9:11:f0:95:f7:e8:33:81:92:29:63:95:
3c:9c:55:c8:f5:62:5c:62:9d:7d:d4:0b:61:12:71:
fa:49:91:fe:c8:21:41:19:23:f9:0b:5e:e3:36:9f:
4d:27:0d:de:1c:8c:52:ea:2a:f4:fc:13:f4:7a:40:
04:6c:9d:92:86:6a:ef:ef:e9:24:98:b5:ab:a2:a9:
48:10:76:80:3a:49:e8:c5:2c:82:6a:e1:43:06:0d:
4d:cd:b7:ca:fc:08:60:f4:aa:e0:32:7a:0d:70:4c:
91:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:46:F9:16:52:2F:46:2E:8A:3C:67:B9:F7:65:A4:6E:C8:68:5F:3A
X509v3 Authority Key Identifier:
keyid:92:7A:47:D7:47:7F:25:68:9F:64:D0:64:B3:EC:A0:96:47:E8:CE:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knpH10d_JWifZNBks-yglkfozqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:c6:92:e8:e2:5d:af:5b:c4:da:8b:fd:3d:48:f8:bf:72:b6:
3b:18:2c:12:b3:43:f8:46:9e:89:80:e6:fb:09:bc:d3:86:96:
c8:e8:08:ed:61:3d:ca:19:fc:e2:8c:69:62:a8:b3:c4:e5:d8:
62:b5:29:b8:48:3d:d5:6d:66:fd:d8:37:8a:b2:4a:4e:f3:b2:
f7:c0:65:85:9d:f4:be:11:70:af:f2:55:1f:db:74:a1:f4:d7:
21:31:33:d0:03:4d:70:a3:32:b9:fc:93:7b:ec:66:85:08:3a:
3b:e2:1a:7e:ce:c9:fa:bc:24:e2:f8:cc:3f:4b:ca:eb:81:d2:
ca:26:63:ab:2b:d5:3e:ae:d3:9a:bc:d4:25:fd:1c:8b:80:87:
90:14:7d:f4:56:89:89:76:b9:0e:53:5c:1d:85:c5:5d:0d:8e:
1c:ea:61:ae:7c:13:64:27:66:30:8f:54:f8:0a:66:d4:33:7c:
87:9e:0e:35:0a:8c:47:fb:2f:18:2d:aa:06:cc:32:d7:02:1a:
e9:39:ef:0a:40:fd:d8:48:de:a0:ea:f5:41:e4:a1:17:4c:64:
85:ec:16:81:a2:b6:fd:19:40:05:17:3b:02:90:69:bd:32:a8:
25:13:bf:26:fd:4a:3b:12:5e:cf:4d:df:c2:99:83:b3:23:da:
4c:dc:41:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:51:55 2025 by rpki-client