Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.mft
File: knEFydH7BpBVSXH0ZMoh9KRcEGo.mft (raw, json)
Hash identifier: 79YSo4ySS5cCw/FlP1F1RLuA9M8AEEE0BERnaS34rnI=
Subject key identifier: B0:02:EB:32:61:1B:66:8A:02:25:25:8F:A3:40:23:01:39:80:6D:88
Authority key identifier: 92:71:05:C9:D1:FB:06:90:55:49:71:F4:64:CA:21:F4:A4:5C:10:6A
Certificate issuer: /CN=927105c9d1fb0690554971f464ca21f4a45c106a
Certificate serial: 019947AB86503B6030B27925EC2707022A32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knEFydH7BpBVSXH0ZMoh9KRcEGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.mft
Manifest number: 0D5B
Signing time: Sun 14 Sep 2025 10:00:47 +0000
Manifest this update: Sun 14 Sep 2025 10:00:47 +0000
Manifest next update: Mon 15 Sep 2025 10:00:47 +0000
Files and hashes: 1: ipQ4XqSuTpQi-re2ZW_sK3VHNnQ.roa (hash: poFgPveu8J3ZCztPp1XhAex84n6Kit4aGgJE9uzT+QM=)
2: knEFydH7BpBVSXH0ZMoh9KRcEGo.crl (hash: tq7kvlYW6RbUCDwIu89ZVAuHcPPkdNDbNLJmP+nsAVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/knEFydH7BpBVSXH0ZMoh9KRcEGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Sep 2025 10:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:47:ab:86:50:3b:60:30:b2:79:25:ec:27:07:02:2a:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927105c9d1fb0690554971f464ca21f4a45c106a
Validity
Not Before: Sep 14 10:00:47 2025 GMT
Not After : Sep 15 10:00:47 2025 GMT
Subject: CN=b002eb32611b668a0225258fa340230139806d88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b1:78:e7:7e:97:d0:a9:a2:57:da:7b:58:8c:
1f:cc:7a:6e:49:15:3d:a6:15:21:d7:65:80:0f:ab:
46:6e:15:e3:13:57:a5:1b:45:a5:9d:cd:73:f3:e5:
1b:59:89:45:df:b1:b2:35:2c:4e:66:8e:4d:0f:d3:
5f:29:46:0f:ad:f8:56:35:d1:0a:30:c7:6f:ac:12:
08:97:65:9b:ec:40:63:d3:f3:5b:19:e4:4c:e8:2e:
11:f3:08:57:40:62:a3:11:9c:3b:26:4a:97:04:74:
d4:a5:f8:d4:e3:35:c0:3a:e6:44:6d:70:5b:5b:ce:
4d:59:6d:ae:49:bb:59:f9:fa:70:a7:9d:67:70:25:
c7:a8:66:07:e6:db:f2:54:f9:ed:a6:02:df:63:3e:
42:b9:55:5a:66:62:99:fb:c2:30:c0:e6:3f:fe:62:
8b:c3:95:23:6d:87:65:5f:54:ff:1a:bf:09:e3:87:
78:66:3c:7b:94:ec:48:d1:6a:6a:18:01:44:68:ad:
31:00:77:74:a5:ad:75:c1:6c:10:50:68:37:57:a0:
8a:a6:c4:e2:b2:f4:05:1a:88:8b:0c:74:0d:40:7c:
c5:d2:8b:59:74:5d:7f:de:44:6d:bd:56:89:99:d5:
c3:58:3b:35:ea:d5:3e:ea:25:9f:b0:83:09:da:01:
7a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:02:EB:32:61:1B:66:8A:02:25:25:8F:A3:40:23:01:39:80:6D:88
X509v3 Authority Key Identifier:
keyid:92:71:05:C9:D1:FB:06:90:55:49:71:F4:64:CA:21:F4:A4:5C:10:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knEFydH7BpBVSXH0ZMoh9KRcEGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:94:ca:ac:dd:46:db:96:4f:eb:66:65:fd:6b:af:87:92:99:
12:e1:13:bc:e3:9d:9f:b9:56:c2:00:dd:16:63:32:4a:15:f2:
a9:23:62:0a:6a:f9:2f:3e:75:66:e9:3e:87:84:aa:a3:a1:bd:
39:88:86:70:d6:a1:0c:19:a7:40:4f:26:3a:dc:fa:a2:57:ee:
63:59:c2:c9:28:14:41:3d:b0:ec:e7:8b:4a:59:67:fa:99:6e:
8c:c4:57:d6:68:26:14:c4:c8:c6:a6:86:92:6a:6b:27:8d:cd:
af:dd:d0:e7:48:cb:99:ba:30:6e:1d:df:e1:44:4a:45:72:09:
15:3c:79:08:da:b8:a6:07:56:b4:74:a2:a6:58:93:97:d7:c0:
d9:af:36:94:91:03:de:05:12:a0:1e:b3:25:2f:25:e9:9c:f1:
b1:74:43:8a:88:ad:39:aa:29:8c:86:63:13:64:95:0c:c7:a5:
81:be:ff:c2:db:6f:11:8c:49:8d:d9:16:f4:a6:47:fa:e5:e0:
be:45:d5:47:45:8b:5e:1a:f5:1f:23:b7:37:c8:18:eb:9a:d1:
fe:f5:c5:c9:80:f9:6a:29:6e:09:dd:14:7e:a9:91:8c:d6:a7:
6e:ba:74:1b:37:2c:01:0e:09:76:10:35:31:44:a1:50:07:fe:
05:80:ef:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 14 17:16:58 2025 by rpki-client