Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.mft
File: knpH10d_JWifZNBks-yglkfozqI.mft (raw, json)
Hash identifier: 2u5jXMczrZc3SZ1RmLJxjCnPk0U5rc6v3XO3X4zEJjI=
Subject key identifier: B8:56:93:25:5C:72:13:AE:29:18:98:E1:29:B2:64:15:32:50:31:B6
Authority key identifier: 92:7A:47:D7:47:7F:25:68:9F:64:D0:64:B3:EC:A0:96:47:E8:CE:A2
Certificate issuer: /CN=927a47d7477f25689f64d064b3eca09647e8cea2
Certificate serial: 01965500CD1BF78F89737FC4E138C840D50F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knpH10d_JWifZNBks-yglkfozqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.mft
Manifest number: 0FFC
Signing time: Sun 20 Apr 2025 21:00:37 +0000
Manifest this update: Sun 20 Apr 2025 21:00:37 +0000
Manifest next update: Mon 21 Apr 2025 21:00:37 +0000
Files and hashes: 1: Lb4_w3xo3b2R5NUCynuhYVfd8F0.roa (hash: InJIfmRDJ+fA/aUu2uO9nwQjhMlW3TmyfkS552qt2Xg=)
2: knpH10d_JWifZNBks-yglkfozqI.crl (hash: gWYbI9yslVUBcZOMtAPytyGsSIWSWRGdnNdShb4rmqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/knpH10d_JWifZNBks-yglkfozqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 21:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:cd:1b:f7:8f:89:73:7f:c4:e1:38:c8:40:d5:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927a47d7477f25689f64d064b3eca09647e8cea2
Validity
Not Before: Apr 20 21:00:37 2025 GMT
Not After : Apr 21 21:00:37 2025 GMT
Subject: CN=b85693255c7213ae291898e129b26415325031b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:18:2c:00:33:0e:bf:34:77:67:46:3f:63:b7:
85:0f:2b:9f:53:a7:c5:c9:ef:24:47:c2:05:f5:c6:
0a:18:ab:0a:cf:4d:ee:56:61:d3:30:de:5f:ad:9d:
34:d3:c1:cc:81:33:49:9c:75:10:45:4b:bb:be:a9:
6d:a3:1c:b7:e4:da:08:cc:cd:b3:26:ec:86:01:fa:
e9:ea:db:88:f3:07:ad:cf:77:33:e6:16:1a:81:30:
8c:56:e3:6d:c7:d2:29:27:06:1a:b8:10:e8:7d:28:
b5:3a:b1:51:f7:db:d7:75:8e:d9:ac:2c:b2:d0:4f:
b5:bd:97:fc:dc:77:f1:61:81:83:db:89:74:5e:46:
11:c8:81:2d:a0:d2:cc:7a:03:03:1a:42:a5:a0:20:
a6:c2:77:74:e1:23:07:ed:7c:a1:b0:5c:3b:cc:9a:
c1:3b:a9:69:8b:f6:88:ee:71:1c:10:d4:2e:23:5c:
18:23:20:77:82:32:9f:98:c5:d4:95:1d:93:8f:8c:
3d:30:94:55:a4:d7:13:29:10:61:94:3b:42:23:32:
f2:37:24:c7:43:c9:3a:4f:ed:0a:cf:9b:fa:95:18:
94:bb:43:bc:dc:05:bb:b3:42:1a:3c:fc:c6:e0:fd:
41:cf:03:1e:8d:9b:d9:c6:ec:62:dc:77:62:4b:aa:
2d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:56:93:25:5C:72:13:AE:29:18:98:E1:29:B2:64:15:32:50:31:B6
X509v3 Authority Key Identifier:
keyid:92:7A:47:D7:47:7F:25:68:9F:64:D0:64:B3:EC:A0:96:47:E8:CE:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knpH10d_JWifZNBks-yglkfozqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:f5:3e:6b:13:c8:c4:b4:81:c0:cd:44:44:80:42:d3:bb:65:
42:fe:41:41:10:86:91:33:9c:6f:0e:6b:11:fc:75:f1:57:96:
1c:2d:50:dc:50:64:f6:a7:b7:02:3c:fa:cc:44:4d:88:f8:56:
35:e2:a8:06:b5:86:fc:d6:5b:66:2f:ae:f2:83:58:66:12:47:
8a:55:a9:2e:1a:79:45:fa:2d:37:08:b5:eb:2c:b5:ce:c6:8c:
45:fc:08:87:b1:eb:5a:73:59:c1:bb:c7:1d:f6:a9:69:73:f2:
0e:61:e1:b1:da:7b:0e:c2:48:8f:b5:73:9a:96:2e:db:34:b8:
97:73:6c:54:28:57:0d:01:12:28:65:28:55:85:be:9f:66:84:
32:ef:11:45:e6:1a:b5:31:c6:4d:32:96:46:58:99:81:eb:77:
2f:09:a5:c9:4f:89:34:78:7a:1e:cf:7b:d7:28:d5:6c:13:3c:
96:fa:b9:06:ec:2c:78:55:c1:72:f7:06:94:de:f7:9a:1c:3e:
46:f1:71:bd:c6:30:5e:3f:d9:e3:4c:38:5f:34:b4:c0:4c:d4:
c6:b6:cb:6f:07:58:ae:c9:4b:8a:88:0c:86:d2:ab:72:60:f5:
62:18:9d:ed:d3:7e:6b:85:70:e3:76:ad:9f:b6:ba:24:d2:22:
14:c6:fc:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZVAM0b94+Jc3/E4TjIQNUPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyN2E0N2Q3NDc3ZjI1Njg5ZjY0ZDA2NGIzZWNhMDk2NDdl
OGNlYTIwHhcNMjUwNDIwMjEwMDM3WhcNMjUwNDIxMjEwMDM3WjAzMTEwLwYDVQQD
EyhiODU2OTMyNTVjNzIxM2FlMjkxODk4ZTEyOWIyNjQxNTMyNTAzMWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxgsADMOvzR3Z0Y/Y7eFDyufU6fF
ye8kR8IF9cYKGKsKz03uVmHTMN5frZ0008HMgTNJnHUQRUu7vqltoxy35NoIzM2z
JuyGAfrp6tuI8wetz3cz5hYagTCMVuNtx9IpJwYauBDofSi1OrFR99vXdY7ZrCyy
0E+1vZf83HfxYYGD24l0XkYRyIEtoNLMegMDGkKloCCmwnd04SMH7XyhsFw7zJrB
O6lpi/aI7nEcENQuI1wYIyB3gjKfmMXUlR2Tj4w9MJRVpNcTKRBhlDtCIzLyNyTH
Q8k6T+0Kz5v6lRiUu0O83AW7s0IaPPzG4P1BzwMejZvZxuxi3HdiS6otYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLhWkyVcchOuKRiY4SmyZBUyUDG2MB8GA1UdIwQY
MBaAFJJ6R9dHfyVon2TQZLPsoJZH6M6iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva25wSDEwZF9KV2lmWk5Ca3MteWdsa2ZvenFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9iOGM2ODctYTIzZC00N2IwLTg0NjIt
OTMyNTIwMTRjY2Y4LzEva25wSDEwZF9KV2lmWk5Ca3MteWdsa2ZvenFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9iOGM2ODctYTIzZC00N2IwLTg0NjItOTMyNTIwMTRjY2Y4
LzEva25wSDEwZF9KV2lmWk5Ca3MteWdsa2ZvenFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZPU+axPI
xLSBwM1ERIBC07tlQv5BQRCGkTOcbw5rEfx18VeWHC1Q3FBk9qe3Ajz6zERNiPhW
NeKoBrWG/NZbZi+u8oNYZhJHilWpLhp5RfotNwi16yy1zsaMRfwIh7HrWnNZwbvH
HfapaXPyDmHhsdp7DsJIj7VzmpYu2zS4l3NsVChXDQESKGUoVYW+n2aEMu8RReYa
tTHGTTKWRliZget3LwmlyU+JNHh6Hs971yjVbBM8lvq5BuwseFXBcvcGlN73mhw+
RvFxvcYwXj/Z40w4XzS0wEzUxrbLbwdYrslLiogMhtKrcmD1Yhid7dN+a4Vw43at
n7a6JNIiFMb8Jg==
-----END CERTIFICATE-----
Generated at Mon Apr 21 02:55:50 2025 by rpki-client