Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.mft
File: KNyB6jid1qrE77w01S13jrp6f8Q.mft (raw, json)
Hash identifier: SQRMoUPFZ9JlUDE7wsOYlDLhzSikVxhwxf08/i3ht1E=
Subject key identifier: D7:24:0B:98:4C:B0:CF:42:B8:DD:73:74:65:80:00:A4:40:F5:F5:E1
Authority key identifier: 28:DC:81:EA:38:9D:D6:AA:C4:EF:BC:34:D5:2D:77:8E:BA:7A:7F:C4
Certificate issuer: /CN=28dc81ea389dd6aac4efbc34d52d778eba7a7fc4
Certificate serial: 019A7225F9A7FE4EAA21040C741A7DC3717D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KNyB6jid1qrE77w01S13jrp6f8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.mft
Manifest number: 16A2
Signing time: Tue 11 Nov 2025 09:01:22 +0000
Manifest this update: Tue 11 Nov 2025 09:01:22 +0000
Manifest next update: Wed 12 Nov 2025 09:01:22 +0000
Files and hashes: 1: KNyB6jid1qrE77w01S13jrp6f8Q.crl (hash: T6EtD3/hRlHk17V/NK0Od/5poJ3p6B77iixUWGEeRb8=)
2: jzeNLpSr6ZsmMJ4zfkQyfVqA2rE.roa (hash: DE+RSjvcm7xMKntvmhh9CpWW/88iCje6f36L/NDszxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/KNyB6jid1qrE77w01S13jrp6f8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:f9:a7:fe:4e:aa:21:04:0c:74:1a:7d:c3:71:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28dc81ea389dd6aac4efbc34d52d778eba7a7fc4
Validity
Not Before: Nov 11 09:01:22 2025 GMT
Not After : Nov 12 09:01:22 2025 GMT
Subject: CN=d7240b984cb0cf42b8dd7374658000a440f5f5e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:eb:04:9c:2c:9a:37:20:9f:74:7c:1f:60:80:
7b:05:d5:89:b9:72:f1:a7:9e:26:eb:66:de:b3:8f:
1f:b7:62:03:85:7d:43:c8:33:28:fa:4d:96:28:08:
58:31:d1:39:30:2d:05:8a:7b:7c:0e:63:fd:6f:d4:
68:e4:dd:84:0f:8a:70:68:d6:65:b0:1d:13:14:e3:
5c:20:b6:55:41:4b:e0:d9:4e:37:6c:e0:60:32:15:
d3:fe:bb:1a:36:08:7d:6b:38:f7:f9:40:fe:49:00:
ce:e7:fa:e5:6a:8e:9a:74:45:12:db:47:6b:d0:54:
54:56:b7:4a:ed:aa:d7:dd:ba:a8:29:53:38:53:f4:
18:e5:aa:ab:98:f7:78:6e:2e:c3:a7:f9:fd:f2:9e:
03:a4:ea:7c:ec:b1:f1:5a:a1:2d:80:a3:db:94:4d:
c8:f1:dd:03:c4:0d:00:23:88:ca:43:ec:b8:b3:d0:
d2:8f:a2:d9:09:0d:b9:0c:f7:25:44:33:99:3c:d3:
bf:18:bb:ef:6f:9d:c5:99:46:f8:22:1c:87:0b:f6:
cb:dc:45:a2:32:a2:5b:92:b7:d2:5d:83:63:61:76:
8e:b3:28:8b:26:5f:1c:0c:ae:a2:a9:49:e5:18:27:
06:b1:62:27:ab:14:24:3b:28:ad:71:ad:d9:72:41:
6f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:24:0B:98:4C:B0:CF:42:B8:DD:73:74:65:80:00:A4:40:F5:F5:E1
X509v3 Authority Key Identifier:
keyid:28:DC:81:EA:38:9D:D6:AA:C4:EF:BC:34:D5:2D:77:8E:BA:7A:7F:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KNyB6jid1qrE77w01S13jrp6f8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:2d:c0:42:af:f3:83:5c:6e:23:d6:11:80:c8:7e:58:3f:b6:
65:79:11:d9:66:71:86:d5:b5:b1:13:c8:12:08:a6:ab:4a:fd:
da:27:c4:8b:38:a0:f6:f1:40:06:40:0e:39:e4:4d:54:34:e6:
7f:82:68:2c:d2:fa:8a:c1:52:3b:a7:1e:77:69:42:c7:7e:66:
79:6d:e3:c3:b5:b4:75:e4:68:75:fa:3c:80:f8:db:05:db:5d:
c5:06:5f:37:20:3a:02:0c:6d:2f:31:04:07:ca:6f:4a:84:1c:
3b:bd:68:28:e6:bd:a2:af:da:f3:e2:08:b2:08:ce:ad:50:0a:
31:1d:72:4d:32:3b:54:5e:e4:bc:2f:a0:4a:1e:99:c1:90:3b:
a8:cc:7c:e9:cd:64:85:20:58:4d:36:13:c8:7e:86:01:64:31:
06:00:0b:0f:85:34:c9:28:1f:07:b3:ed:2e:7a:e8:88:d7:0f:
d5:59:13:b3:7d:8a:ce:87:43:2c:0c:fe:ca:32:01:2c:ba:78:
6a:69:db:0e:2f:9b:27:79:d3:00:ee:0a:a5:d2:4c:fe:6d:bc:
4c:58:4b:22:4b:9f:75:d5:f9:9d:dd:45:0e:04:dd:4b:e5:4f:
6f:a3:fb:45:83:bd:89:8b:03:91:69:e4:92:b9:e1:62:c1:bf:
b0:72:39:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:16:53 2025 by rpki-client