Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.mft
File: KNyB6jid1qrE77w01S13jrp6f8Q.mft (raw, json)
Hash identifier: RVlOEPQJ0Z/JdTeA7cIyMremcMtcFNGLmrvNdWBU8c8=
Subject key identifier: FE:17:F3:F2:D1:69:E6:23:E3:DD:E7:E8:FF:23:F0:C8:B4:C8:12:2F
Authority key identifier: 28:DC:81:EA:38:9D:D6:AA:C4:EF:BC:34:D5:2D:77:8E:BA:7A:7F:C4
Certificate issuer: /CN=28dc81ea389dd6aac4efbc34d52d778eba7a7fc4
Certificate serial: 0199221EC4E15617ED8A8AB191ED4A1C860A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KNyB6jid1qrE77w01S13jrp6f8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.mft
Manifest number: 15F4
Signing time: Sun 07 Sep 2025 03:01:05 +0000
Manifest this update: Sun 07 Sep 2025 03:01:05 +0000
Manifest next update: Mon 08 Sep 2025 03:01:05 +0000
Files and hashes: 1: KNyB6jid1qrE77w01S13jrp6f8Q.crl (hash: Jsvja3gzhAO4jtM3AGjUwdA8xkw+TYVfUwI3T2X6A50=)
2: jzeNLpSr6ZsmMJ4zfkQyfVqA2rE.roa (hash: DE+RSjvcm7xMKntvmhh9CpWW/88iCje6f36L/NDszxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/KNyB6jid1qrE77w01S13jrp6f8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:c4:e1:56:17:ed:8a:8a:b1:91:ed:4a:1c:86:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28dc81ea389dd6aac4efbc34d52d778eba7a7fc4
Validity
Not Before: Sep 7 03:01:05 2025 GMT
Not After : Sep 8 03:01:05 2025 GMT
Subject: CN=fe17f3f2d169e623e3dde7e8ff23f0c8b4c8122f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:40:b3:ea:5e:c7:dc:8c:1f:d1:94:f8:d7:ba:
72:31:54:da:9f:1a:cb:67:57:6d:b1:0f:79:5e:27:
b0:65:34:21:4c:4e:6a:70:2a:c9:4e:a2:d8:37:04:
60:bb:22:b3:a2:02:8b:6a:7f:75:90:73:03:2f:0b:
28:44:63:c1:9c:14:4c:6d:73:e9:75:d3:bd:75:f3:
96:32:00:6a:e7:c4:cd:94:51:a6:4c:17:7d:25:95:
52:e8:1a:88:6e:ce:a0:81:4b:89:15:46:01:2a:f4:
35:45:78:32:17:50:0e:ed:a7:01:8f:9d:1f:44:81:
4e:53:97:a2:ac:9d:cf:74:94:f3:1c:55:bb:1d:a7:
8a:37:06:f2:c7:c0:2f:1e:60:62:0d:df:d5:66:57:
a0:f8:61:53:8a:30:ee:0d:07:17:eb:fd:29:e5:7d:
22:5d:6f:70:99:28:c2:f0:8e:44:7b:06:ef:94:62:
31:f7:cd:66:6c:d3:82:ea:06:2b:fa:9e:3a:4d:91:
30:8b:be:6a:1d:c3:11:20:dd:22:31:5d:89:a9:a8:
92:6c:74:5a:b8:df:7e:49:1d:12:1e:b9:1d:95:78:
1d:d0:80:d1:67:08:8e:56:9a:33:03:ae:7a:e5:42:
f0:5f:cc:7c:34:bc:a7:0b:97:83:06:a7:30:71:95:
b3:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:17:F3:F2:D1:69:E6:23:E3:DD:E7:E8:FF:23:F0:C8:B4:C8:12:2F
X509v3 Authority Key Identifier:
keyid:28:DC:81:EA:38:9D:D6:AA:C4:EF:BC:34:D5:2D:77:8E:BA:7A:7F:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KNyB6jid1qrE77w01S13jrp6f8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:e8:4f:8d:fd:ea:c6:85:25:6d:15:f2:7b:4c:cd:5e:de:88:
d5:de:fd:64:c5:9c:2a:27:c4:a8:f9:ed:09:ac:8c:bc:ad:b7:
a0:0c:0b:31:1c:e2:0c:28:04:eb:5b:fc:86:41:e3:b1:f5:b3:
d8:38:d2:0c:bb:c6:40:2e:25:67:ab:0b:da:f5:50:2d:6e:13:
3c:75:7b:27:53:f2:e4:b5:04:b5:57:78:81:f4:76:e3:d7:5f:
6c:31:29:9f:95:f6:a6:e8:2b:67:9d:e0:87:af:df:9a:a2:29:
c7:dd:6e:20:3d:99:a1:cd:b1:01:89:53:17:68:8c:7f:25:d8:
aa:d9:66:6a:35:15:1a:06:c5:e3:27:f6:0d:6a:af:33:f3:4e:
ac:a9:af:8f:5e:c6:00:be:55:15:0b:cb:5a:2a:8f:ef:95:cf:
7e:f8:af:43:4d:52:2b:3b:14:a5:53:a1:6b:8e:55:41:ad:71:
53:93:59:5f:80:89:d1:02:0f:20:4b:81:f1:b0:c6:81:31:89:
76:70:cb:e9:ae:76:b7:4c:cc:da:74:44:b4:21:a5:69:9a:37:
4c:77:03:d2:e6:0d:b0:e5:d1:79:f5:5f:99:b7:fa:d9:30:65:
f8:7e:55:82:05:f1:2e:3a:3c:ad:30:43:21:45:fd:6c:aa:31:
82:2e:42:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:48:42 2025 by rpki-client