Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.mft
File: knpH10d_JWifZNBks-yglkfozqI.mft (raw, json)
Hash identifier: mTo7QNszQn8zCuz+W5SzSHx3l7nJi1nmyzUJ4f3penM=
Subject key identifier: D0:99:FF:31:D5:24:F6:C2:AD:DE:64:E6:17:33:98:37:E4:B3:E0:C7
Authority key identifier: 92:7A:47:D7:47:7F:25:68:9F:64:D0:64:B3:EC:A0:96:47:E8:CE:A2
Certificate issuer: /CN=927a47d7477f25689f64d064b3eca09647e8cea2
Certificate serial: 01974667059ADF99556D5CD8D0FACED0B5C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knpH10d_JWifZNBks-yglkfozqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.mft
Manifest number: 1079
Signing time: Fri 06 Jun 2025 18:00:45 +0000
Manifest this update: Fri 06 Jun 2025 18:00:45 +0000
Manifest next update: Sat 07 Jun 2025 18:00:45 +0000
Files and hashes: 1: Lb4_w3xo3b2R5NUCynuhYVfd8F0.roa (hash: InJIfmRDJ+fA/aUu2uO9nwQjhMlW3TmyfkS552qt2Xg=)
2: knpH10d_JWifZNBks-yglkfozqI.crl (hash: +BEyQAHO2u+VRhURwrcjrA82eY01SmXFCWokw+kavb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/knpH10d_JWifZNBks-yglkfozqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 18:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:67:05:9a:df:99:55:6d:5c:d8:d0:fa:ce:d0:b5:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927a47d7477f25689f64d064b3eca09647e8cea2
Validity
Not Before: Jun 6 18:00:45 2025 GMT
Not After : Jun 7 18:00:45 2025 GMT
Subject: CN=d099ff31d524f6c2adde64e617339837e4b3e0c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2c:2f:fd:0b:d6:d1:61:f3:25:18:4f:84:d8:
fc:aa:01:34:a1:17:44:bf:99:42:14:03:b2:af:35:
0b:33:eb:bb:55:39:69:75:60:ec:c4:56:49:dd:9c:
2f:4a:ed:b9:7f:2f:3b:03:e1:ea:1a:a6:9b:b3:56:
ba:68:c8:84:44:03:e3:c4:55:47:1a:51:f8:54:f4:
73:45:a1:b4:f1:cc:6f:56:43:fd:0c:85:9f:8f:03:
3f:7c:0b:9e:af:41:f3:67:a0:70:f4:cd:92:e5:37:
f5:5c:54:67:eb:83:32:8d:33:20:a5:19:f3:c6:27:
a5:25:04:a7:ba:88:8d:87:e4:e6:9c:fa:c5:59:e1:
f1:1a:a4:31:0c:d5:31:f2:05:9d:64:70:bc:f4:a9:
d4:f9:7b:b4:bb:0c:d4:a0:47:00:c3:d8:93:50:79:
2b:5c:09:0d:f5:b5:ff:cf:cf:6a:ab:6e:a0:1e:2e:
0b:a3:ce:a4:17:34:82:78:38:54:c0:62:8f:76:d5:
e4:3a:c5:e0:c8:95:d6:a3:d6:4e:52:35:80:11:cc:
c3:68:1e:9b:d3:99:e8:72:8b:ac:13:18:da:77:82:
6f:ad:14:f7:20:c7:01:95:73:b4:d7:89:f8:19:64:
5e:0f:04:7b:b7:99:83:77:05:0b:dc:e3:c0:f0:2b:
4c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:99:FF:31:D5:24:F6:C2:AD:DE:64:E6:17:33:98:37:E4:B3:E0:C7
X509v3 Authority Key Identifier:
keyid:92:7A:47:D7:47:7F:25:68:9F:64:D0:64:B3:EC:A0:96:47:E8:CE:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knpH10d_JWifZNBks-yglkfozqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:4d:a3:ee:ab:25:f3:c7:c0:02:d1:8f:b3:63:69:0b:b1:7e:
7f:7e:92:3a:7b:27:24:a1:ff:83:37:3c:ab:6a:a2:07:bf:15:
56:97:d2:d3:8b:95:44:e1:3c:39:90:41:1a:8b:08:f7:88:74:
13:ff:45:25:fa:8e:77:31:6e:e2:b1:eb:eb:e7:55:59:5b:ca:
94:fd:46:c9:ac:4d:f0:46:9c:6f:55:34:9b:b9:3f:7b:a1:ef:
e3:74:4f:47:b3:40:c8:7e:18:d5:d0:db:18:7b:e8:c1:25:28:
24:96:69:fd:90:88:77:8e:99:75:fb:df:ea:4f:24:67:e1:90:
b5:4f:fe:8f:e3:e4:ae:a9:55:a7:ec:e1:e3:87:e6:ac:00:4b:
de:84:60:07:65:32:5b:bd:a6:6d:67:7d:08:a9:01:1c:3c:a1:
90:4a:62:ad:46:68:fa:b2:b0:7c:84:d4:9c:0f:f3:f4:8f:5a:
37:86:b4:be:28:15:65:cc:82:77:12:47:dd:ee:a9:c2:e6:1e:
29:67:df:fe:c3:28:fd:c4:5c:5c:a3:73:14:7d:ce:2c:8f:93:
39:e9:99:24:8e:05:e2:87:37:ba:a9:73:6a:68:8c:0a:aa:0c:
2e:55:51:e4:3f:09:a5:e6:7c:ba:ed:d6:de:84:46:f2:0c:2b:
e6:b7:97:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdGZwWa35lVbVzY0PrO0LXJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyN2E0N2Q3NDc3ZjI1Njg5ZjY0ZDA2NGIzZWNhMDk2NDdl
OGNlYTIwHhcNMjUwNjA2MTgwMDQ1WhcNMjUwNjA3MTgwMDQ1WjAzMTEwLwYDVQQD
EyhkMDk5ZmYzMWQ1MjRmNmMyYWRkZTY0ZTYxNzMzOTgzN2U0YjNlMGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiwv/QvW0WHzJRhPhNj8qgE0oRdE
v5lCFAOyrzULM+u7VTlpdWDsxFZJ3ZwvSu25fy87A+HqGqabs1a6aMiERAPjxFVH
GlH4VPRzRaG08cxvVkP9DIWfjwM/fAuer0HzZ6Bw9M2S5Tf1XFRn64MyjTMgpRnz
xielJQSnuoiNh+TmnPrFWeHxGqQxDNUx8gWdZHC89KnU+Xu0uwzUoEcAw9iTUHkr
XAkN9bX/z89qq26gHi4Lo86kFzSCeDhUwGKPdtXkOsXgyJXWo9ZOUjWAEczDaB6b
05nocousExjad4JvrRT3IMcBlXO014n4GWReDwR7t5mDdwUL3OPA8CtMXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNCZ/zHVJPbCrd5k5hczmDfks+DHMB8GA1UdIwQY
MBaAFJJ6R9dHfyVon2TQZLPsoJZH6M6iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva25wSDEwZF9KV2lmWk5Ca3MteWdsa2ZvenFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9iOGM2ODctYTIzZC00N2IwLTg0NjIt
OTMyNTIwMTRjY2Y4LzEva25wSDEwZF9KV2lmWk5Ca3MteWdsa2ZvenFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9iOGM2ODctYTIzZC00N2IwLTg0NjItOTMyNTIwMTRjY2Y4
LzEva25wSDEwZF9KV2lmWk5Ca3MteWdsa2ZvenFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiU2j7qsl
88fAAtGPs2NpC7F+f36SOnsnJKH/gzc8q2qiB78VVpfS04uVROE8OZBBGosI94h0
E/9FJfqOdzFu4rHr6+dVWVvKlP1GyaxN8Eacb1U0m7k/e6Hv43RPR7NAyH4Y1dDb
GHvowSUoJJZp/ZCId46Zdfvf6k8kZ+GQtU/+j+PkrqlVp+zh44fmrABL3oRgB2Uy
W72mbWd9CKkBHDyhkEpirUZo+rKwfITUnA/z9I9aN4a0vigVZcyCdxJH3e6pwuYe
KWff/sMo/cRcXKNzFH3OLI+TOemZJI4F4oc3uqlzamiMCqoMLlVR5D8JpeZ8uu3W
3oRG8gwr5reXlg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 03:26:27 2025 by rpki-client