Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/d81bd9-7d58-4380-9707-45b8b8573419/1/Kn-4HcfsycpmKnTuO347rS6k3nE.mft
File: Kn-4HcfsycpmKnTuO347rS6k3nE.mft (raw, json)
Hash identifier: 3oceJS7AgDASZ0HSfB81XCNvdDhMSBcBoRcvqve7HII=
Subject key identifier: F8:03:93:05:CD:DD:40:F9:E3:92:31:D1:B3:E9:36:66:0F:CB:67:14
Authority key identifier: 2A:7F:B8:1D:C7:EC:C9:CA:66:2A:74:EE:3B:7E:3B:AD:2E:A4:DE:71
Certificate issuer: /CN=2a7fb81dc7ecc9ca662a74ee3b7e3bad2ea4de71
Certificate serial: 0198906BDDB338258E4A585E193109195D17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kn-4HcfsycpmKnTuO347rS6k3nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/d81bd9-7d58-4380-9707-45b8b8573419/1/Kn-4HcfsycpmKnTuO347rS6k3nE.mft
Manifest number: 14
Signing time: Sat 09 Aug 2025 20:00:44 +0000
Manifest this update: Sat 09 Aug 2025 20:00:44 +0000
Manifest next update: Sun 10 Aug 2025 20:00:44 +0000
Files and hashes: 1: Kn-4HcfsycpmKnTuO347rS6k3nE.crl (hash: OFMiojSH2hZGNq+A4L2EheMY8QDR81gYhLEM1XDVeGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/d81bd9-7d58-4380-9707-45b8b8573419/1/Kn-4HcfsycpmKnTuO347rS6k3nE.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/d81bd9-7d58-4380-9707-45b8b8573419/1/Kn-4HcfsycpmKnTuO347rS6k3nE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kn-4HcfsycpmKnTuO347rS6k3nE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:6b:dd:b3:38:25:8e:4a:58:5e:19:31:09:19:5d:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a7fb81dc7ecc9ca662a74ee3b7e3bad2ea4de71
Validity
Not Before: Aug 9 20:00:44 2025 GMT
Not After : Aug 10 20:00:44 2025 GMT
Subject: CN=f8039305cddd40f9e39231d1b3e936660fcb6714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:51:e1:ff:12:dd:90:ce:39:6d:19:e1:75:c0:
4e:49:b7:79:4e:be:b7:c0:d6:41:01:b5:d5:77:15:
74:34:dc:e6:03:7e:23:1a:c9:80:ae:f1:14:6c:fb:
67:e2:91:2f:74:96:6e:ba:79:37:ff:9e:a2:68:cf:
18:b4:76:7f:5d:c1:ca:ea:c7:c9:4f:3f:3d:49:18:
1e:66:73:82:57:9f:97:d7:a7:b4:2f:e7:82:0f:4d:
a1:67:db:be:ab:ba:84:a2:20:2e:16:7d:9e:d8:84:
90:e8:6c:7a:9b:03:17:f6:f7:87:c4:f2:43:67:5c:
bc:0b:00:b8:12:fa:55:fe:0e:02:ba:c3:47:51:c3:
8e:80:0b:aa:ba:65:64:77:a9:6a:16:03:85:f1:4a:
94:37:7f:e9:1f:30:c2:bb:6f:34:36:20:68:ee:0f:
f7:20:48:9b:61:ea:c1:ca:e0:91:3a:08:c0:cb:b7:
61:93:53:ed:cc:b4:21:5e:a0:75:85:f1:59:cc:26:
33:d3:e5:65:0d:ab:3c:2c:44:32:6c:2e:87:75:73:
ba:eb:41:2b:32:f3:5d:ed:24:d9:de:0f:1d:46:08:
aa:c8:27:25:c0:ef:9f:e6:0a:ae:8b:be:e5:ba:b4:
80:29:80:1f:0a:2a:9b:0d:e5:1b:07:7a:bb:d7:fa:
27:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:03:93:05:CD:DD:40:F9:E3:92:31:D1:B3:E9:36:66:0F:CB:67:14
X509v3 Authority Key Identifier:
keyid:2A:7F:B8:1D:C7:EC:C9:CA:66:2A:74:EE:3B:7E:3B:AD:2E:A4:DE:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kn-4HcfsycpmKnTuO347rS6k3nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d81bd9-7d58-4380-9707-45b8b8573419/1/Kn-4HcfsycpmKnTuO347rS6k3nE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d81bd9-7d58-4380-9707-45b8b8573419/1/Kn-4HcfsycpmKnTuO347rS6k3nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:8a:14:c5:ae:a7:20:41:df:99:da:92:25:21:d6:f0:e1:84:
8f:b4:97:83:84:30:62:f7:8d:ae:92:54:f8:cc:fd:ba:71:8f:
fc:32:aa:65:f8:63:a6:28:37:4b:19:8b:24:38:66:c5:04:9c:
74:28:36:43:e1:80:71:ba:db:21:d9:58:38:ab:bf:cd:44:45:
29:7f:ec:d6:61:1f:e0:a5:b6:7a:f3:4c:d1:b2:31:d8:31:4e:
fa:ab:9e:3d:c5:5b:86:d9:bb:7c:a9:41:fe:40:bf:e9:b5:4a:
0d:c4:f6:56:15:a3:38:ca:c9:97:c4:56:b3:4d:78:32:2c:ed:
08:f6:f4:86:f9:e5:0c:2c:d6:c3:7f:fc:1d:33:0b:bb:f5:f9:
05:92:55:8e:db:95:4c:5a:cb:97:d9:8e:11:e8:6b:f6:9c:ed:
f4:56:9c:ce:0e:bd:85:86:4b:77:75:83:e7:e1:d7:93:a0:07:
dc:2b:e6:f0:91:22:29:59:ca:c3:ab:af:42:56:96:dc:ee:12:
b7:a3:3e:93:ec:28:6c:1a:ef:d4:2b:99:54:31:99:4c:44:15:
ab:f1:2f:6b:27:32:51:61:c2:6a:49:c3:a3:4f:1a:87:90:91:
e9:86:d2:fc:60:ff:94:c1:31:da:2a:6a:f9:e6:77:70:7f:45:
ac:49:0c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:34:50 2025 by rpki-client