Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.mft
File: knpH10d_JWifZNBks-yglkfozqI.mft (raw, json)
Hash identifier: t6xQoFFMElGOSKdmktaY35qX8xMCbjPjlDgQx3wyzI0=
Subject key identifier: E4:66:6B:B6:7F:2D:87:16:E4:E5:FA:D0:5A:99:ED:C6:C7:AC:05:1F
Authority key identifier: 92:7A:47:D7:47:7F:25:68:9F:64:D0:64:B3:EC:A0:96:47:E8:CE:A2
Certificate issuer: /CN=927a47d7477f25689f64d064b3eca09647e8cea2
Certificate serial: 019A71B82E61ACAC0BA0600510ADD0A8D7B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knpH10d_JWifZNBks-yglkfozqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.mft
Manifest number: 121D
Signing time: Tue 11 Nov 2025 07:01:27 +0000
Manifest this update: Tue 11 Nov 2025 07:01:27 +0000
Manifest next update: Wed 12 Nov 2025 07:01:27 +0000
Files and hashes: 1: Lb4_w3xo3b2R5NUCynuhYVfd8F0.roa (hash: InJIfmRDJ+fA/aUu2uO9nwQjhMlW3TmyfkS552qt2Xg=)
2: knpH10d_JWifZNBks-yglkfozqI.crl (hash: K3O6n0Yx7yEjER2Y39zldbhkOTQUcqfcJSJEDxLi4ng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/knpH10d_JWifZNBks-yglkfozqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:2e:61:ac:ac:0b:a0:60:05:10:ad:d0:a8:d7:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927a47d7477f25689f64d064b3eca09647e8cea2
Validity
Not Before: Nov 11 07:01:27 2025 GMT
Not After : Nov 12 07:01:27 2025 GMT
Subject: CN=e4666bb67f2d8716e4e5fad05a99edc6c7ac051f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:80:cf:c0:34:2c:63:34:04:c9:0e:f6:b4:b6:
c1:2f:e2:aa:3e:12:31:d2:6f:85:96:e1:12:c4:7d:
cb:3f:3a:d0:11:5f:60:b6:d2:95:7c:e5:30:0c:18:
e0:e1:fc:74:d8:86:a1:31:97:8b:18:53:ac:6f:16:
14:71:f7:47:ca:43:1e:72:c7:0b:b0:9c:34:32:56:
85:ac:51:ff:39:23:8a:f1:f5:1d:2b:d4:2b:4f:cd:
38:f0:79:5e:ea:05:fb:c3:c5:07:7c:18:90:f5:b9:
3e:ca:82:50:67:3a:aa:77:f4:34:ea:a9:7d:e3:22:
d8:84:2e:dc:20:6b:02:27:97:91:a3:96:62:e8:27:
2a:ec:75:65:36:54:97:54:b3:68:8a:72:a5:c4:ce:
9a:3f:89:b3:2a:31:08:63:a4:de:93:58:c5:cd:d2:
1e:30:b6:70:2e:9b:a8:7c:c2:1d:77:6f:4a:84:b5:
62:ea:e1:54:9a:84:45:48:e9:ae:5c:f6:b6:be:23:
38:67:2f:95:84:80:bd:87:ca:93:0d:2a:45:97:26:
40:5b:d9:87:fe:5a:44:47:b4:b2:46:d9:3a:a0:d4:
e1:e5:0d:51:18:35:4a:6c:2a:fe:44:aa:8c:cc:20:
4f:7f:91:91:22:73:a6:9f:2e:82:ab:c7:92:5a:17:
f3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:66:6B:B6:7F:2D:87:16:E4:E5:FA:D0:5A:99:ED:C6:C7:AC:05:1F
X509v3 Authority Key Identifier:
keyid:92:7A:47:D7:47:7F:25:68:9F:64:D0:64:B3:EC:A0:96:47:E8:CE:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knpH10d_JWifZNBks-yglkfozqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:de:59:48:75:cd:da:26:f5:b1:49:24:e9:cd:bc:50:d2:80:
6e:d6:60:b8:38:2e:ed:38:8c:7b:80:c9:cc:26:30:6d:cc:9b:
c4:81:0a:a3:a0:f3:b0:0f:98:6f:ec:09:3b:a2:64:c9:a4:3c:
a0:51:cb:bb:fc:47:ac:7b:c3:32:88:1b:44:c3:ab:3d:7a:0b:
4a:8d:57:95:7f:c6:c9:46:ce:d4:84:7b:1b:74:8d:e0:6b:6b:
f5:e7:c5:87:00:ea:11:8f:0d:ab:b0:63:97:c3:f8:70:83:ad:
54:8b:fc:91:e3:41:dc:59:58:1b:57:47:8c:5d:8f:5f:03:be:
ec:eb:c6:50:24:f2:d6:3c:50:a9:0b:c6:ea:df:bd:71:8d:c6:
13:6b:71:d6:cf:20:45:de:f7:45:7b:df:43:c9:85:a0:db:fc:
db:e0:35:1c:b1:db:22:cc:f1:55:6a:36:8b:23:32:4f:b7:e4:
36:c5:26:f7:27:d7:6c:37:d1:ce:83:a9:e9:f4:78:31:68:b2:
f4:c0:ff:dc:35:a9:71:5b:8e:31:51:af:8c:2f:51:86:cc:a2:
20:f6:57:b2:a3:0e:24:df:49:ec:4f:e5:72:e5:a9:1b:2e:54:
77:db:72:91:c7:f8:4b:e4:fd:6b:79:70:4d:9e:13:55:38:a5:
31:65:5f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:40 2025 by rpki-client