Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f11dea-305e-4898-9192-365347f416c0/1/knseVqx9B4AsRWfEZ5Q1FZtCIJY.mft
File: knseVqx9B4AsRWfEZ5Q1FZtCIJY.mft (raw, json)
Hash identifier: k5SWBOb8eylCoCfOCqpC+jcc2jEeMR//05Trdubj+tc=
Subject key identifier: 70:3B:63:F3:47:C5:AA:12:42:EA:D8:83:6F:B4:DB:7E:C1:27:56:79
Authority key identifier: 92:7B:1E:56:AC:7D:07:80:2C:45:67:C4:67:94:35:15:9B:42:20:96
Certificate issuer: /CN=927b1e56ac7d07802c4567c4679435159b422096
Certificate serial: 01976696C5222355EAE369B23F5E1D1D80AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knseVqx9B4AsRWfEZ5Q1FZtCIJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f11dea-305e-4898-9192-365347f416c0/1/knseVqx9B4AsRWfEZ5Q1FZtCIJY.mft
Manifest number: 158D
Signing time: Fri 13 Jun 2025 00:00:46 +0000
Manifest this update: Fri 13 Jun 2025 00:00:46 +0000
Manifest next update: Sat 14 Jun 2025 00:00:46 +0000
Files and hashes: 1: ZZutCOlh3Ali7o57VArVQ-r6xEQ.roa (hash: Z8oFv1O8k+i1SuyJDIP9mmTPP/Uv75FEkkBOgolEt4M=)
2: knseVqx9B4AsRWfEZ5Q1FZtCIJY.crl (hash: hNaUEGAxlWoVgMm7JWXft682ociVhRSnYOGi3N1Vr6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f11dea-305e-4898-9192-365347f416c0/1/knseVqx9B4AsRWfEZ5Q1FZtCIJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/f11dea-305e-4898-9192-365347f416c0/1/knseVqx9B4AsRWfEZ5Q1FZtCIJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/knseVqx9B4AsRWfEZ5Q1FZtCIJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:66:96:c5:22:23:55:ea:e3:69:b2:3f:5e:1d:1d:80:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927b1e56ac7d07802c4567c4679435159b422096
Validity
Not Before: Jun 13 00:00:46 2025 GMT
Not After : Jun 14 00:00:46 2025 GMT
Subject: CN=703b63f347c5aa1242ead8836fb4db7ec1275679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3f:ea:e8:c0:40:74:1c:fb:64:99:31:25:ad:
e2:09:7e:7f:e1:21:ad:9f:58:d0:58:0a:14:c0:81:
de:99:17:03:e7:d1:26:df:14:c7:d4:22:aa:0a:d5:
f5:5f:e6:43:21:1e:b5:b8:2a:06:fd:5b:7c:43:68:
a5:61:7b:4d:94:1d:aa:47:d0:26:53:06:06:00:8d:
c6:1c:01:95:77:7c:ad:73:27:e2:19:89:91:eb:cb:
34:a0:8f:13:42:73:07:f3:e5:d1:9d:62:18:c8:ac:
f1:2d:3e:98:14:36:f0:f3:47:83:08:94:d4:bf:f2:
68:89:65:66:cf:08:7c:79:39:3f:cb:82:d1:0b:bc:
47:9c:36:0d:f6:cb:22:91:bb:f4:c2:72:5c:54:ee:
a0:e4:50:be:a1:f7:a0:3b:0c:7d:37:ae:85:4c:66:
02:d7:3f:08:44:60:ca:e8:d7:99:5f:ed:82:83:d3:
9b:89:21:2f:6e:31:e5:5b:47:0b:61:2c:6c:63:4e:
c1:33:25:cf:e5:b7:db:c8:77:1d:07:6e:b4:fe:c3:
68:96:b0:50:fa:bb:3b:f4:d2:15:95:42:cd:2d:a5:
8d:be:7a:d5:7c:91:98:cc:e5:ce:ec:fd:2b:e8:bc:
a1:cd:19:8f:4a:26:6e:91:44:e9:5b:bf:b8:00:d6:
6e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:3B:63:F3:47:C5:AA:12:42:EA:D8:83:6F:B4:DB:7E:C1:27:56:79
X509v3 Authority Key Identifier:
keyid:92:7B:1E:56:AC:7D:07:80:2C:45:67:C4:67:94:35:15:9B:42:20:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knseVqx9B4AsRWfEZ5Q1FZtCIJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f11dea-305e-4898-9192-365347f416c0/1/knseVqx9B4AsRWfEZ5Q1FZtCIJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f11dea-305e-4898-9192-365347f416c0/1/knseVqx9B4AsRWfEZ5Q1FZtCIJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:fb:fb:a1:00:e5:5f:c6:86:69:a2:da:b5:6c:0a:2d:64:82:
20:29:de:06:04:95:e3:73:76:3b:34:c8:6b:44:ac:81:be:00:
fa:06:84:bc:7d:e3:34:02:b5:dc:6b:75:f4:1d:ac:e5:65:d6:
2d:77:24:c2:a2:06:c9:be:8b:19:c0:d4:4b:31:66:bf:fb:19:
ce:05:d2:d8:1c:8b:11:eb:e4:11:5c:91:8f:c5:79:41:40:2f:
33:ab:b3:4e:f9:00:88:41:ae:82:95:94:28:1e:48:10:85:54:
0f:36:55:13:4e:32:27:80:26:3b:75:4a:59:5a:f7:d2:c7:45:
ac:cf:38:b1:77:8c:ef:27:f4:37:0b:56:3b:c0:a6:d7:0b:69:
3c:10:30:8a:33:fc:2e:2d:ce:f0:a7:e3:67:8d:1d:b1:85:5a:
b2:73:27:79:2d:e5:31:93:98:3a:40:d8:dd:74:6d:e7:d6:b9:
88:6f:0b:a2:05:5a:37:09:28:dd:28:35:c1:c3:10:10:45:20:
20:bc:2d:1c:58:2a:8a:f9:a6:25:1a:df:24:8b:6f:06:03:4c:
92:ef:3e:35:fb:5a:28:02:f8:16:2c:0e:b6:1f:69:e8:79:27:
f3:e3:ec:c5:86:bc:dd:e3:46:cd:05:da:04:f9:27:47:d9:d9:
11:71:e4:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdmlsUiI1Xq42myP14dHYCqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyN2IxZTU2YWM3ZDA3ODAyYzQ1NjdjNDY3OTQzNTE1OWI0
MjIwOTYwHhcNMjUwNjEzMDAwMDQ2WhcNMjUwNjE0MDAwMDQ2WjAzMTEwLwYDVQQD
Eyg3MDNiNjNmMzQ3YzVhYTEyNDJlYWQ4ODM2ZmI0ZGI3ZWMxMjc1Njc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArD/q6MBAdBz7ZJkxJa3iCX5/4SGt
n1jQWAoUwIHemRcD59Em3xTH1CKqCtX1X+ZDIR61uCoG/Vt8Q2ilYXtNlB2qR9Am
UwYGAI3GHAGVd3ytcyfiGYmR68s0oI8TQnMH8+XRnWIYyKzxLT6YFDbw80eDCJTU
v/JoiWVmzwh8eTk/y4LRC7xHnDYN9ssikbv0wnJcVO6g5FC+ofegOwx9N66FTGYC
1z8IRGDK6NeZX+2Cg9ObiSEvbjHlW0cLYSxsY07BMyXP5bfbyHcdB260/sNolrBQ
+rs79NIVlULNLaWNvnrVfJGYzOXO7P0r6LyhzRmPSiZukUTpW7+4ANZu8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHA7Y/NHxaoSQurYg2+0237BJ1Z5MB8GA1UdIwQY
MBaAFJJ7HlasfQeALEVnxGeUNRWbQiCWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva25zZVZxeDlCNEFzUldmRVo1UTFGWnRDSUpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mMTFkZWEtMzA1ZS00ODk4LTkxOTIt
MzY1MzQ3ZjQxNmMwLzEva25zZVZxeDlCNEFzUldmRVo1UTFGWnRDSUpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9mMTFkZWEtMzA1ZS00ODk4LTkxOTItMzY1MzQ3ZjQxNmMw
LzEva25zZVZxeDlCNEFzUldmRVo1UTFGWnRDSUpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUPv7oQDl
X8aGaaLatWwKLWSCICneBgSV43N2OzTIa0Ssgb4A+gaEvH3jNAK13Gt19B2s5WXW
LXckwqIGyb6LGcDUSzFmv/sZzgXS2ByLEevkEVyRj8V5QUAvM6uzTvkAiEGugpWU
KB5IEIVUDzZVE04yJ4AmO3VKWVr30sdFrM84sXeM7yf0NwtWO8Cm1wtpPBAwijP8
Li3O8KfjZ40dsYVasnMneS3lMZOYOkDY3XRt59a5iG8LogVaNwko3Sg1wcMQEEUg
ILwtHFgqivmmJRrfJItvBgNMku8+NftaKAL4FiwOth9p6Hkn8+PsxYa83eNGzQXa
BPknR9nZEXHk4A==
-----END CERTIFICATE-----
Generated at Fri Jun 13 07:53:50 2025 by rpki-client