Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
File: KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft (raw, json)
Hash identifier: H1bwqh16gHKKfZLMo60wCyXWzFxFUIwbXIKWCb0Zj0Q=
Subject key identifier: 8A:7F:4A:53:69:75:A3:43:76:1E:E1:E8:B5:22:7C:76:87:92:52:3F
Authority key identifier: 2A:73:4E:AB:CF:B5:B6:C2:A4:E4:83:88:ED:B3:AF:8F:50:6B:1F:AB
Certificate issuer: /CN=2a734eabcfb5b6c2a4e48388edb3af8f506b1fab
Certificate serial: 01974A7B9DF3B1F68F2EEC752854DA1AE6C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 13:01:44 +0000
Manifest this update: Sat 07 Jun 2025 13:01:44 +0000
Manifest next update: Sun 08 Jun 2025 13:01:44 +0000
Files and hashes: 1: KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl (hash: Tl5Eb1nNtlO9zRGXgJs2lXbE2qODb0/t527+PK0q2sY=)
2: cjk16MmGa9VAbHsgngJUOkSp08A.roa (hash: vjUqfCV04EKTU6LoX8huXEuT5umrktch7/fsTB3KR0w=)
3: k2Uppl8G01BcsH3g3-MinVDILtU.roa (hash: lp7j+Bb3bbdsfLwcfqn/iR6o1CoScaVkVKl5uGRp5+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 13:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:9d:f3:b1:f6:8f:2e:ec:75:28:54:da:1a:e6:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a734eabcfb5b6c2a4e48388edb3af8f506b1fab
Validity
Not Before: Jun 7 13:01:44 2025 GMT
Not After : Jun 8 13:01:44 2025 GMT
Subject: CN=8a7f4a536975a343761ee1e8b5227c768792523f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0c:a6:9b:a9:16:45:49:3a:ee:56:97:a0:cd:
f9:e8:2d:2d:58:14:df:75:f6:0b:53:33:90:87:60:
e2:7e:be:56:8e:89:97:78:34:51:85:a4:2c:ef:d6:
6e:46:72:65:37:8c:a4:50:2a:aa:43:8a:cf:ec:cf:
59:85:f3:34:2d:17:a8:a6:02:42:0d:0f:bd:6d:b5:
f6:c5:58:9f:d5:97:0a:e2:6a:d8:d6:fa:43:d9:d9:
41:a7:58:e5:86:85:f5:e0:1e:1c:87:79:7f:bf:4a:
e6:cc:07:c5:81:c5:0e:e5:9c:92:ed:04:d4:22:a6:
a9:c9:1a:1c:41:64:9c:e5:aa:cd:f5:6b:0d:e2:0f:
4e:9f:01:81:3e:cc:35:48:c9:3a:5a:a0:ee:42:ed:
fd:58:dd:b1:77:20:96:36:72:46:d5:39:41:76:16:
cf:b0:ab:82:39:ba:28:b7:c2:d6:54:41:70:df:cf:
64:69:4c:06:4f:e1:0b:90:15:63:36:54:16:da:c8:
04:fa:71:a7:14:21:ea:b4:88:b9:12:17:de:16:50:
d9:65:a3:0a:e2:d0:8f:59:a4:12:40:fa:7a:a1:4d:
21:51:50:0a:e9:80:07:1b:75:44:c1:95:d4:df:c8:
98:f7:72:11:26:be:4c:d1:76:d8:8f:3a:5a:55:46:
b5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:7F:4A:53:69:75:A3:43:76:1E:E1:E8:B5:22:7C:76:87:92:52:3F
X509v3 Authority Key Identifier:
keyid:2A:73:4E:AB:CF:B5:B6:C2:A4:E4:83:88:ED:B3:AF:8F:50:6B:1F:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:fb:75:b6:19:30:12:43:4c:e6:61:47:11:4c:14:b1:38:0d:
fc:79:0a:67:af:49:2a:0d:b4:fe:74:06:fe:08:77:33:e7:d1:
c8:7b:2c:23:ec:1c:97:dc:a7:0f:93:05:20:7f:ee:d2:90:14:
21:e8:1f:1e:33:61:72:3f:1e:a8:b0:21:9c:61:20:e2:2c:24:
f4:26:f2:42:ff:95:ae:82:31:35:40:a3:4e:58:7a:d5:c3:38:
f1:07:8a:bf:88:f3:c6:13:53:2f:a6:ba:0f:4e:4c:d8:5e:12:
a5:e6:61:99:b2:f1:05:34:fc:6c:2e:b5:f5:96:35:86:ee:a5:
73:00:d4:3a:79:ab:f6:ee:ee:03:8e:a3:71:92:42:fb:12:99:
be:96:cf:7f:d9:f5:09:99:54:51:55:eb:5c:5c:ba:03:29:79:
a0:44:38:f4:d4:78:dc:d7:20:c2:33:c2:52:aa:be:25:5f:ef:
49:a1:63:43:e5:fb:2f:bb:1d:9f:61:69:33:fd:1b:fe:be:23:
af:1e:00:b9:f2:31:7c:21:67:bc:05:78:6f:2a:23:93:aa:c1:
97:f3:4b:ed:0d:02:8b:cf:9d:bd:31:f0:bf:d8:a7:61:e1:b3:
d2:e3:64:d4:50:a1:67:2f:3b:bb:81:9c:76:1b:07:22:91:17:
98:56:f7:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:17:15 2025 by rpki-client