Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/kniPTrt0HAw2mg_TBZTNAQHcdHY.mft
File: kniPTrt0HAw2mg_TBZTNAQHcdHY.mft (raw, json)
Hash identifier: f95TF96ONBqFTTDP2Y3NpoTbw/hOUhfAsIY2X05ndtA=
Subject key identifier: 51:F0:4A:E4:E0:2E:2B:DD:B3:56:2D:81:D7:45:6B:14:33:85:08:F6
Authority key identifier: 92:78:8F:4E:BB:74:1C:0C:36:9A:0F:D3:05:94:CD:01:01:DC:74:76
Certificate issuer: /CN=92788f4ebb741c0c369a0fd30594cd0101dc7476
Certificate serial: 019856EAEE3FD603CD9B5D2AC8F4EE8221B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kniPTrt0HAw2mg_TBZTNAQHcdHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/kniPTrt0HAw2mg_TBZTNAQHcdHY.mft
Manifest number: 1608
Signing time: Tue 29 Jul 2025 16:01:33 +0000
Manifest this update: Tue 29 Jul 2025 16:01:33 +0000
Manifest next update: Wed 30 Jul 2025 16:01:33 +0000
Files and hashes: 1: K-YJm4wOeLJG8aJ7KI41BLWAM-4.roa (hash: +ltmXAJQfzovJoKfgWj4x9gqmeiriedONmDgSBwWFc4=)
2: kniPTrt0HAw2mg_TBZTNAQHcdHY.crl (hash: HKCRJpa80+fuZEFo8h3+VeQyXNlYjlnqGuQuBCqSmuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/kniPTrt0HAw2mg_TBZTNAQHcdHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/kniPTrt0HAw2mg_TBZTNAQHcdHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kniPTrt0HAw2mg_TBZTNAQHcdHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 14:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:56:ea:ee:3f:d6:03:cd:9b:5d:2a:c8:f4:ee:82:21:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92788f4ebb741c0c369a0fd30594cd0101dc7476
Validity
Not Before: Jul 29 16:01:33 2025 GMT
Not After : Jul 30 16:01:33 2025 GMT
Subject: CN=51f04ae4e02e2bddb3562d81d7456b14338508f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:bb:e7:30:30:5a:40:5f:d1:20:09:b3:8a:01:
fc:69:e7:ee:0c:f0:79:7b:6b:8f:98:ef:db:1f:04:
74:38:47:33:65:f2:45:63:f3:e8:bd:31:7d:ed:a0:
b0:b4:96:ae:33:24:f4:f4:2b:dc:a1:78:08:af:c2:
a2:58:23:11:0b:66:bf:f2:63:29:f1:68:51:be:08:
9f:a7:9d:f3:a1:3c:37:97:71:a4:8e:b1:cc:e6:62:
5b:e9:77:23:c4:df:9c:56:ed:a4:1f:35:89:d1:dd:
83:cc:24:22:86:d1:52:4c:46:39:22:42:8e:09:14:
8d:38:3f:81:02:a1:51:fd:76:26:c8:d2:50:63:af:
de:bc:8c:01:8b:da:4a:af:ac:f6:c4:40:51:13:a8:
e4:93:6c:1e:3f:23:e8:bd:fe:bc:71:e2:46:b1:5a:
ea:ce:a0:dc:73:64:e7:5d:c8:17:3e:80:9e:35:b9:
55:65:88:57:8e:98:c7:be:5b:45:ab:45:ba:21:b5:
05:09:94:27:fa:8b:c2:b4:60:ef:e7:c1:79:f2:0a:
50:90:de:6d:cf:9d:82:02:d3:97:92:3c:d4:24:f6:
2e:04:eb:1f:9b:3c:00:67:f0:63:7c:60:1c:99:97:
e9:c4:f0:e2:11:e2:7d:91:98:09:6d:ac:dd:7b:2f:
40:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:F0:4A:E4:E0:2E:2B:DD:B3:56:2D:81:D7:45:6B:14:33:85:08:F6
X509v3 Authority Key Identifier:
keyid:92:78:8F:4E:BB:74:1C:0C:36:9A:0F:D3:05:94:CD:01:01:DC:74:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kniPTrt0HAw2mg_TBZTNAQHcdHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/kniPTrt0HAw2mg_TBZTNAQHcdHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/kniPTrt0HAw2mg_TBZTNAQHcdHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:86:9b:d7:f2:9c:c1:60:b3:1c:48:27:e4:ce:3a:12:6e:30:
dc:c4:72:ee:8e:6f:03:7e:cd:c7:91:62:71:a3:15:a3:da:3e:
ca:bd:10:a5:75:be:41:4c:16:60:a2:09:24:28:ae:8c:d6:b4:
51:3d:ed:2b:6b:1f:32:9d:1d:50:8b:a1:15:93:fc:97:52:25:
4f:56:5d:f9:11:bc:61:02:9c:34:06:c6:74:8f:e2:be:2e:db:
23:ee:2e:a8:0c:eb:4d:97:36:59:21:5c:55:48:3f:8d:0f:c7:
ea:84:f0:eb:0e:ee:63:a3:4c:68:90:6a:74:07:8a:3d:bb:33:
2a:a9:89:d7:ae:4f:36:ce:99:2b:a6:73:18:f4:18:03:39:98:
55:3f:4d:b8:6a:f2:25:79:2d:31:eb:92:c2:e9:50:d3:4c:95:
de:e7:5c:10:db:3c:61:95:fc:13:9c:6a:c5:16:d2:c0:10:95:
91:e0:c9:6a:4b:c0:44:02:2b:84:11:53:eb:eb:80:e9:13:ea:
6a:29:77:b9:d5:23:2e:36:24:54:36:b4:21:74:54:5e:71:12:
cf:d7:b0:42:9b:85:16:8f:ad:42:a1:b3:e3:81:cc:2c:eb:a1:
ad:ee:f3:0f:a5:c3:9d:eb:d2:29:41:04:58:3d:bf:f0:eb:1d:
fb:8e:0b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 22:11:27 2025 by rpki-client