Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.mft
File: knEFydH7BpBVSXH0ZMoh9KRcEGo.mft (raw, json)
Hash identifier: wK/QP8RzhILgdGID7DCzdOHxkrub1jQZwhGFJr4W7CU=
Subject key identifier: 75:2D:E6:CD:2F:04:39:C1:23:EA:BB:BE:10:1F:93:B3:D3:57:3D:D6
Authority key identifier: 92:71:05:C9:D1:FB:06:90:55:49:71:F4:64:CA:21:F4:A4:5C:10:6A
Certificate issuer: /CN=927105c9d1fb0690554971f464ca21f4a45c106a
Certificate serial: 019749D604A3464A2BAC45DD336962BF15E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knEFydH7BpBVSXH0ZMoh9KRcEGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.mft
Manifest number: 0C53
Signing time: Sat 07 Jun 2025 10:00:51 +0000
Manifest this update: Sat 07 Jun 2025 10:00:51 +0000
Manifest next update: Sun 08 Jun 2025 10:00:51 +0000
Files and hashes: 1: ipQ4XqSuTpQi-re2ZW_sK3VHNnQ.roa (hash: poFgPveu8J3ZCztPp1XhAex84n6Kit4aGgJE9uzT+QM=)
2: knEFydH7BpBVSXH0ZMoh9KRcEGo.crl (hash: 2ndykReI7oTVscZsfUErA60G17z2AU2hPfEXneBSNWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/knEFydH7BpBVSXH0ZMoh9KRcEGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d6:04:a3:46:4a:2b:ac:45:dd:33:69:62:bf:15:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927105c9d1fb0690554971f464ca21f4a45c106a
Validity
Not Before: Jun 7 10:00:51 2025 GMT
Not After : Jun 8 10:00:51 2025 GMT
Subject: CN=752de6cd2f0439c123eabbbe101f93b3d3573dd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:11:4e:cb:5d:06:08:4b:6a:8c:0d:b5:d6:22:
1c:01:13:18:ef:f8:63:74:6d:8e:53:07:cd:17:ca:
7b:d8:27:96:fb:66:f3:39:6d:f6:bc:57:05:6d:55:
ac:23:ff:4b:b8:27:05:c8:2a:e4:91:cc:ed:7b:ff:
71:c9:0f:26:e8:60:ed:ac:6b:f4:3e:14:b0:c9:f1:
19:66:f1:d0:34:83:e2:1b:12:79:36:c8:37:ff:3f:
1d:f3:76:c3:00:7d:ce:c8:15:20:0b:0a:8f:c6:95:
ea:99:0a:58:8a:4b:c4:14:dc:d5:96:41:3b:53:24:
4b:3d:8e:07:8b:6a:45:9b:1b:aa:24:f0:14:f5:bd:
6f:18:ce:4f:d8:c4:a1:33:d6:50:47:27:12:c0:ef:
56:9e:21:80:cc:63:54:5c:7d:d4:70:aa:ca:f1:9b:
50:48:3c:f7:07:56:08:77:d6:b1:ac:de:4b:e6:16:
a6:50:5e:6c:8b:f0:86:1a:01:dd:f4:5a:21:57:6c:
c0:81:f8:6e:8c:52:5d:fa:76:e3:9d:d5:f4:e0:00:
f9:bb:22:bc:e8:9a:a0:32:f4:da:28:82:6c:da:94:
c1:71:ad:39:ea:7f:e2:81:b3:da:53:1d:8a:92:f9:
88:cf:88:99:fa:1d:1e:99:03:e4:80:2c:14:5a:20:
89:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:2D:E6:CD:2F:04:39:C1:23:EA:BB:BE:10:1F:93:B3:D3:57:3D:D6
X509v3 Authority Key Identifier:
keyid:92:71:05:C9:D1:FB:06:90:55:49:71:F4:64:CA:21:F4:A4:5C:10:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knEFydH7BpBVSXH0ZMoh9KRcEGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:8f:f4:26:99:97:b7:78:4e:e0:b2:3d:b4:fc:57:4f:71:85:
e9:41:b6:d2:45:f8:71:9e:c0:af:20:f3:c9:83:56:2c:b9:19:
5b:82:02:2f:1b:a9:80:96:e0:2d:af:05:69:40:c0:96:b4:2c:
0b:06:2a:e8:a2:2e:64:7f:e4:79:d6:41:f2:c9:00:b7:18:9f:
38:0d:b4:4f:fc:a5:67:b5:9a:90:b2:48:20:74:bd:3a:d1:91:
08:90:7e:b2:57:ab:5e:00:02:e8:7c:af:d6:9a:c4:de:82:6f:
b2:73:e3:9f:1d:0d:38:c4:91:1f:e2:ec:2e:d6:82:7a:84:ac:
b8:74:b9:19:07:c4:5b:20:c7:bc:9e:1f:2d:7f:c1:fa:a2:ab:
fa:3c:df:9a:2d:de:8c:b7:77:cb:f9:42:ef:f1:5a:e7:33:80:
75:4c:89:38:13:46:3d:d3:c7:6b:b7:04:06:60:ac:97:0f:d5:
46:eb:01:45:4a:e8:b2:02:d0:a0:f7:55:4a:b5:5a:5d:ee:9e:
d5:8a:7a:01:0d:cf:8e:9b:1e:a0:76:97:5d:38:7e:8b:37:10:
f1:84:ee:69:90:44:e8:44:61:4c:3c:ab:0f:d6:e9:63:b8:63:
e8:ae:8b:c3:42:d0:7e:ef:c2:7b:26:bf:d5:b8:dc:20:34:97:
c5:69:c9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:57:31 2025 by rpki-client