Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.mft
File: knpH10d_JWifZNBks-yglkfozqI.mft (raw, json)
Hash identifier: O3x4yBpbO96SyoBIaA4HoTX/ok3LshQZK+YyZ8TqEqM=
Subject key identifier: 66:97:DD:4D:A3:4C:86:13:4F:77:71:E7:6C:15:1F:91:57:26:DC:44
Authority key identifier: 92:7A:47:D7:47:7F:25:68:9F:64:D0:64:B3:EC:A0:96:47:E8:CE:A2
Certificate issuer: /CN=927a47d7477f25689f64d064b3eca09647e8cea2
Certificate serial: 019923A021DAD45E41A85A388067B721D46C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knpH10d_JWifZNBks-yglkfozqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.mft
Manifest number: 1170
Signing time: Sun 07 Sep 2025 10:02:00 +0000
Manifest this update: Sun 07 Sep 2025 10:02:00 +0000
Manifest next update: Mon 08 Sep 2025 10:02:00 +0000
Files and hashes: 1: Lb4_w3xo3b2R5NUCynuhYVfd8F0.roa (hash: InJIfmRDJ+fA/aUu2uO9nwQjhMlW3TmyfkS552qt2Xg=)
2: knpH10d_JWifZNBks-yglkfozqI.crl (hash: pMMNDXME1NIjhs0d24HNT6XLmPdm90y4+w+uHiU3P5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/knpH10d_JWifZNBks-yglkfozqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:21:da:d4:5e:41:a8:5a:38:80:67:b7:21:d4:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927a47d7477f25689f64d064b3eca09647e8cea2
Validity
Not Before: Sep 7 10:02:00 2025 GMT
Not After : Sep 8 10:02:00 2025 GMT
Subject: CN=6697dd4da34c86134f7771e76c151f915726dc44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:15:6b:a9:f0:76:6d:ab:0f:46:2c:49:06:7f:
dc:5b:53:66:ce:1b:47:a6:17:c7:06:f1:47:0a:41:
dc:08:0d:d5:57:64:eb:2e:af:b1:85:4f:f3:f7:53:
ed:73:8e:9c:0a:29:f7:a8:a2:29:b3:72:a7:db:88:
40:f7:ce:38:da:80:c3:5d:f2:34:97:5e:db:91:3b:
90:ab:45:c6:3e:1f:9e:a5:66:07:cc:e5:ca:00:9f:
ac:bb:56:56:4c:50:a9:46:3d:7a:53:1a:42:15:85:
4b:c9:cb:10:b3:c5:d7:e8:8c:28:cf:68:18:5a:d2:
b5:5b:df:41:ca:64:aa:93:93:e7:6f:23:8e:48:0f:
33:7e:d7:bc:49:49:3d:92:82:3f:b6:a4:38:c9:f0:
f0:d7:f3:78:67:16:61:62:4f:b3:a0:18:41:72:85:
bf:c0:f0:5c:b0:51:f3:de:16:1d:b2:e4:f2:6b:08:
aa:ba:fe:db:74:1d:15:bf:e5:f7:e1:2a:db:12:a4:
b4:c2:b0:5c:b3:d1:c0:10:76:51:c0:d5:16:f2:d0:
9b:a5:cd:b3:8b:f0:7f:46:88:7e:a8:50:dc:fe:35:
d9:a5:7c:1c:cd:67:12:8f:bb:41:89:15:a8:61:82:
f5:4d:3c:75:e6:4e:7a:be:36:c3:ae:63:74:60:46:
07:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:97:DD:4D:A3:4C:86:13:4F:77:71:E7:6C:15:1F:91:57:26:DC:44
X509v3 Authority Key Identifier:
keyid:92:7A:47:D7:47:7F:25:68:9F:64:D0:64:B3:EC:A0:96:47:E8:CE:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knpH10d_JWifZNBks-yglkfozqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:ae:8e:01:db:27:05:21:20:5f:1a:c0:81:2e:2a:ce:69:7e:
16:2f:92:b5:1c:ae:08:0d:59:4b:0f:de:87:ba:9f:96:08:7b:
71:95:21:e1:2d:c0:e2:1b:68:04:f2:0d:48:c1:f9:f7:bc:f4:
e2:36:9d:8f:e2:12:9a:24:c9:7a:e5:13:11:5d:0c:06:e1:b0:
d8:1a:60:5a:0d:a6:1b:91:ce:c5:fa:51:f4:3b:f6:a1:c8:f5:
54:a2:25:cc:20:13:64:0e:60:e4:f9:82:b1:63:0f:98:13:2d:
cd:1c:25:5d:e3:24:5b:f7:df:c1:aa:db:3c:a0:5b:7d:79:3f:
47:59:59:b2:8f:cf:a2:53:1f:af:70:fd:25:1d:f2:c0:24:1d:
5b:c6:5f:c8:d9:22:ce:3c:07:7e:41:4f:4e:3e:5c:21:26:45:
dc:7f:cc:9f:3c:33:30:d0:88:35:03:7d:21:08:03:97:3e:70:
9b:10:3f:88:42:a4:83:93:1a:d1:b8:04:ee:0a:5c:e8:aa:0c:
4d:5c:c6:4f:32:02:56:0a:7f:ac:40:25:81:e2:8c:4d:33:ed:
bf:27:91:24:46:52:16:04:36:01:12:03:af:97:22:f4:71:99:
80:88:25:46:ac:36:43:b7:1a:00:96:a8:f3:f6:93:c2:75:2f:
b5:04:5a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:52:38 2025 by rpki-client