Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
File: KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft (raw, json)
Hash identifier: XJhrFten32LYpaJnhWCtsY/VKhh430GLAnLTqShLBOk=
Subject key identifier: DD:3D:46:BD:24:D4:00:EA:DA:EF:AD:3F:64:E3:F2:40:77:B7:BB:6E
Authority key identifier: 2A:73:4E:AB:CF:B5:B6:C2:A4:E4:83:88:ED:B3:AF:8F:50:6B:1F:AB
Certificate issuer: /CN=2a734eabcfb5b6c2a4e48388edb3af8f506b1fab
Certificate serial: 019A1505A144790F4888B1E45A5D1DDC9F45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
Manifest number: 16F0
Signing time: Fri 24 Oct 2025 07:01:21 +0000
Manifest this update: Fri 24 Oct 2025 07:01:21 +0000
Manifest next update: Sat 25 Oct 2025 07:01:21 +0000
Files and hashes: 1: KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl (hash: F26dpCu7tyxOPWwMdAAegY0gCP2lsnft7d9hxOFMrRA=)
2: cjk16MmGa9VAbHsgngJUOkSp08A.roa (hash: vjUqfCV04EKTU6LoX8huXEuT5umrktch7/fsTB3KR0w=)
3: k2Uppl8G01BcsH3g3-MinVDILtU.roa (hash: lp7j+Bb3bbdsfLwcfqn/iR6o1CoScaVkVKl5uGRp5+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:15:05:a1:44:79:0f:48:88:b1:e4:5a:5d:1d:dc:9f:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a734eabcfb5b6c2a4e48388edb3af8f506b1fab
Validity
Not Before: Oct 24 07:01:21 2025 GMT
Not After : Oct 25 07:01:21 2025 GMT
Subject: CN=dd3d46bd24d400eadaefad3f64e3f24077b7bb6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8e:99:f2:f5:8f:9e:83:2b:3c:72:11:f8:e3:
97:c4:97:96:bf:eb:63:ce:43:cb:f4:f1:7f:79:87:
5f:f0:50:af:6b:3b:4c:6c:34:1b:d7:4c:04:65:a3:
92:0d:4c:91:2c:80:2d:8c:83:85:7d:cc:a5:8a:33:
d2:78:1f:d7:6e:8a:96:90:f1:49:51:c7:07:7a:46:
12:79:58:7c:4b:b5:b8:31:77:69:1b:da:fe:95:2c:
89:8a:da:10:fe:2f:59:4b:ac:18:4c:4c:35:3d:a4:
79:3c:09:f2:bf:22:a6:11:0f:f2:44:a8:e9:58:8c:
63:22:12:96:dd:b4:55:7d:04:4d:84:a4:48:6c:fa:
00:96:da:b1:fa:e2:5c:36:1a:74:cd:17:57:a9:46:
ba:91:6d:74:c5:87:f2:de:6f:fd:c4:1a:eb:f0:e2:
93:04:e3:88:81:d9:85:3b:91:8c:27:bf:94:36:1e:
1d:c6:df:b1:53:25:dd:77:83:11:95:a3:10:da:f0:
32:5f:48:28:af:aa:2b:a4:09:1b:62:bf:8e:1a:44:
78:a5:6e:31:f8:37:f6:f5:0c:40:b8:e2:22:1a:05:
4c:5c:78:e7:eb:50:b3:31:06:55:0a:06:3b:fd:5b:
d3:3e:2b:82:20:5b:ee:34:3f:17:ef:71:57:a8:3e:
d1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:3D:46:BD:24:D4:00:EA:DA:EF:AD:3F:64:E3:F2:40:77:B7:BB:6E
X509v3 Authority Key Identifier:
keyid:2A:73:4E:AB:CF:B5:B6:C2:A4:E4:83:88:ED:B3:AF:8F:50:6B:1F:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:15:e2:2f:ce:98:fe:b8:28:bd:54:53:cb:d4:06:c0:4f:7d:
87:78:68:85:df:d8:41:91:72:30:62:19:0b:58:13:df:62:4f:
bd:bb:3c:c2:1d:b8:01:12:3e:73:2b:36:09:8c:92:f1:46:cd:
e3:45:fa:26:a0:3e:96:fa:a3:a5:aa:c4:0f:eb:86:7b:2b:08:
91:e9:db:64:41:e7:ce:31:c8:b1:5b:67:2b:76:0e:18:3b:b2:
15:97:d6:96:8a:f8:f4:b0:0d:e3:dd:e9:b5:b7:8b:d2:bc:f7:
66:4c:05:36:2f:05:9a:2e:84:e9:d8:1a:07:69:47:4c:be:47:
3d:ce:60:4f:ce:81:d2:c0:9d:db:d7:0f:9b:91:18:7b:6f:25:
91:88:95:8f:32:37:cd:f3:27:7d:72:78:05:7f:33:85:56:35:
0a:74:ba:ae:0b:c7:1e:a7:07:e5:c9:2d:76:7e:08:d3:ae:03:
72:1c:c0:e8:c8:07:5a:d8:64:0e:ab:e0:58:e9:f6:8b:7c:54:
b5:dd:db:19:dd:cb:70:77:06:d6:8b:d0:cb:a2:d4:eb:cd:b4:
a6:2e:93:8f:7e:20:51:60:a1:aa:8f:d4:39:2c:39:37:8e:7f:
9e:84:c7:3c:35:41:95:14:af:fd:e6:ad:4f:35:86:19:af:8a:
a7:a2:9b:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoVBaFEeQ9IiLHkWl0d3J9FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhNzM0ZWFiY2ZiNWI2YzJhNGU0ODM4OGVkYjNhZjhmNTA2
YjFmYWIwHhcNMjUxMDI0MDcwMTIxWhcNMjUxMDI1MDcwMTIxWjAzMTEwLwYDVQQD
EyhkZDNkNDZiZDI0ZDQwMGVhZGFlZmFkM2Y2NGUzZjI0MDc3YjdiYjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzo6Z8vWPnoMrPHIR+OOXxJeWv+tj
zkPL9PF/eYdf8FCvaztMbDQb10wEZaOSDUyRLIAtjIOFfcylijPSeB/XboqWkPFJ
UccHekYSeVh8S7W4MXdpG9r+lSyJitoQ/i9ZS6wYTEw1PaR5PAnyvyKmEQ/yRKjp
WIxjIhKW3bRVfQRNhKRIbPoAltqx+uJcNhp0zRdXqUa6kW10xYfy3m/9xBrr8OKT
BOOIgdmFO5GMJ7+UNh4dxt+xUyXdd4MRlaMQ2vAyX0gor6orpAkbYr+OGkR4pW4x
+Df29QxAuOIiGgVMXHjn61CzMQZVCgY7/VvTPiuCIFvuND8X73FXqD7RPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN09Rr0k1ADq2u+tP2Tj8kB3t7tuMB8GA1UdIwQY
MBaAFCpzTqvPtbbCpOSDiO2zr49Qax+rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS25OT3E4LTF0c0trNUlPSTdiT3ZqMUJySDZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS82Zjk1MmEtYWQ1OS00YjlmLWI3Yzct
MDlhYWMwNzg5YjkzLzEvS25OT3E4LTF0c0trNUlPSTdiT3ZqMUJySDZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS82Zjk1MmEtYWQ1OS00YjlmLWI3YzctMDlhYWMwNzg5Yjkz
LzEvS25OT3E4LTF0c0trNUlPSTdiT3ZqMUJySDZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmBXiL86Y
/rgovVRTy9QGwE99h3hohd/YQZFyMGIZC1gT32JPvbs8wh24ARI+cys2CYyS8UbN
40X6JqA+lvqjparED+uGeysIkenbZEHnzjHIsVtnK3YOGDuyFZfWlor49LAN493p
tbeL0rz3ZkwFNi8Fmi6E6dgaB2lHTL5HPc5gT86B0sCd29cPm5EYe28lkYiVjzI3
zfMnfXJ4BX8zhVY1CnS6rgvHHqcH5cktdn4I064DchzA6MgHWthkDqvgWOn2i3xU
td3bGd3LcHcG1ovQy6LU6820pi6Tj34gUWChqo/UOSw5N45/noTHPDVBlRSv/eat
TzWGGa+Kp6Kbjg==
-----END CERTIFICATE-----
Generated at Fri Oct 24 09:17:47 2025 by rpki-client