Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
File: KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft (raw, json)
Hash identifier: XO9vA4c7cKQgvdZDorTYKhoI6V90WCGDF8xM4xx9wD8=
Subject key identifier: 1B:9A:2E:A9:34:D1:7D:25:B7:FA:92:8A:0A:A2:07:E4:7C:39:B7:73
Authority key identifier: 2A:73:4E:AB:CF:B5:B6:C2:A4:E4:83:88:ED:B3:AF:8F:50:6B:1F:AB
Certificate issuer: /CN=2a734eabcfb5b6c2a4e48388edb3af8f506b1fab
Certificate serial: 01984B55378B6B13B02B3BF779F9E9847D12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 10:02:12 +0000
Manifest this update: Sun 27 Jul 2025 10:02:12 +0000
Manifest next update: Mon 28 Jul 2025 10:02:12 +0000
Files and hashes: 1: KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl (hash: wEkkVYyR1JNDQa/cziTfTYI13EA4Iolo69f+hU2mrAI=)
2: cjk16MmGa9VAbHsgngJUOkSp08A.roa (hash: vjUqfCV04EKTU6LoX8huXEuT5umrktch7/fsTB3KR0w=)
3: k2Uppl8G01BcsH3g3-MinVDILtU.roa (hash: lp7j+Bb3bbdsfLwcfqn/iR6o1CoScaVkVKl5uGRp5+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:55:37:8b:6b:13:b0:2b:3b:f7:79:f9:e9:84:7d:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a734eabcfb5b6c2a4e48388edb3af8f506b1fab
Validity
Not Before: Jul 27 10:02:12 2025 GMT
Not After : Jul 28 10:02:12 2025 GMT
Subject: CN=1b9a2ea934d17d25b7fa928a0aa207e47c39b773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:76:6a:83:b3:aa:c5:a2:e5:c4:80:46:fc:03:
fe:80:d8:81:73:f2:f7:66:97:90:53:2f:25:47:75:
ec:77:85:f3:d8:fe:67:fc:d2:31:80:a8:a0:0b:25:
9c:f0:be:39:92:3e:85:7d:63:87:eb:42:89:8c:ed:
99:17:16:44:2f:d7:0b:8a:e3:d8:45:99:04:72:20:
3c:b8:8a:9c:e7:23:b4:36:73:4e:c9:51:05:7b:e2:
7d:d1:6b:6f:f4:b2:60:78:1a:ac:5b:04:fc:d0:0d:
f5:58:e9:19:7d:35:73:04:87:a2:29:dc:8e:7b:7b:
c6:52:1f:1e:b1:96:a9:ec:3b:9a:82:d6:19:b5:50:
7d:f2:5f:6f:2f:5d:d6:07:bd:40:e9:21:9e:75:cf:
ed:42:38:12:49:d9:38:97:a0:5f:9c:97:9e:af:7a:
45:38:7b:6e:e8:a5:b6:a0:1f:eb:97:2b:f1:4c:1d:
12:96:d7:fe:6a:cb:ff:66:47:dc:71:b5:c5:11:a9:
2c:8a:7a:70:be:b3:61:80:c8:49:e2:8b:0e:a8:9f:
00:ea:49:0b:94:70:ce:8f:68:36:e6:07:4b:65:b0:
14:14:bc:4a:f5:6c:52:af:37:59:3a:a1:93:8f:6e:
de:f2:8e:47:95:b5:dd:68:a3:31:8f:2c:b9:c7:db:
09:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:9A:2E:A9:34:D1:7D:25:B7:FA:92:8A:0A:A2:07:E4:7C:39:B7:73
X509v3 Authority Key Identifier:
keyid:2A:73:4E:AB:CF:B5:B6:C2:A4:E4:83:88:ED:B3:AF:8F:50:6B:1F:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:53:8b:70:95:7e:c0:d1:1c:ed:ad:f1:87:43:79:6f:4d:f2:
98:c2:9b:8f:b2:d3:a3:c5:26:d7:23:a6:45:7a:10:aa:c5:ca:
eb:93:6a:0e:14:73:33:a6:80:40:42:b1:4e:67:b1:13:ef:f0:
06:ae:4c:b4:07:61:1e:53:cd:bb:b1:d9:be:93:be:b3:ac:bb:
82:29:2a:a1:a4:61:90:2b:f1:f5:a2:bb:05:2c:6f:4c:fa:be:
a8:bd:03:4f:2e:9a:65:ec:5b:34:e9:e0:fa:31:73:60:30:0f:
80:8a:a2:47:90:be:52:8f:3f:9a:70:cb:72:af:86:1d:6c:5a:
5b:80:34:8f:1b:6f:69:6a:33:a1:cd:60:ed:31:ef:24:41:80:
f7:eb:00:bf:5c:7c:7a:e2:ea:2b:50:f4:82:57:12:f3:20:da:
97:ce:6f:65:48:9c:58:ff:2f:c5:fc:cd:30:69:39:d8:04:67:
b7:d6:70:11:36:f3:4f:08:46:d7:89:e4:d3:36:5d:34:ec:0e:
ed:82:c5:b2:84:80:6c:e3:fa:5c:ee:22:7b:1c:d0:48:77:fa:
7a:3c:fa:df:52:a5:b6:d0:9e:2f:fd:60:dc:bf:8c:65:1c:b0:
9a:12:59:5e:ed:7b:01:ad:a9:2e:4f:9a:45:ad:31:aa:02:b8:
45:c5:26:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:04:33 2025 by rpki-client