Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/kniPTrt0HAw2mg_TBZTNAQHcdHY.mft
File: kniPTrt0HAw2mg_TBZTNAQHcdHY.mft (raw, json)
Hash identifier: +40GtSDHyH7zSw6ZNYUPCjWC3pohyTWD6LvOzfgGOJk=
Subject key identifier: 98:11:E6:65:34:4B:9E:45:7E:1F:13:44:76:DD:68:7A:69:F8:D9:EC
Authority key identifier: 92:78:8F:4E:BB:74:1C:0C:36:9A:0F:D3:05:94:CD:01:01:DC:74:76
Certificate issuer: /CN=92788f4ebb741c0c369a0fd30594cd0101dc7476
Certificate serial: 0197808DF2AA4BCEDB7106AC3E521E9597C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kniPTrt0HAw2mg_TBZTNAQHcdHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/kniPTrt0HAw2mg_TBZTNAQHcdHY.mft
Manifest number: 1599
Signing time: Wed 18 Jun 2025 01:01:15 +0000
Manifest this update: Wed 18 Jun 2025 01:01:15 +0000
Manifest next update: Thu 19 Jun 2025 01:01:15 +0000
Files and hashes: 1: K-YJm4wOeLJG8aJ7KI41BLWAM-4.roa (hash: +ltmXAJQfzovJoKfgWj4x9gqmeiriedONmDgSBwWFc4=)
2: kniPTrt0HAw2mg_TBZTNAQHcdHY.crl (hash: q/tmEHgGh/fx/RPHVOmsydGo3fRaZ7CHje7EtttEPKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/kniPTrt0HAw2mg_TBZTNAQHcdHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/kniPTrt0HAw2mg_TBZTNAQHcdHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kniPTrt0HAw2mg_TBZTNAQHcdHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:80:8d:f2:aa:4b:ce:db:71:06:ac:3e:52:1e:95:97:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92788f4ebb741c0c369a0fd30594cd0101dc7476
Validity
Not Before: Jun 18 01:01:15 2025 GMT
Not After : Jun 19 01:01:15 2025 GMT
Subject: CN=9811e665344b9e457e1f134476dd687a69f8d9ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e7:6f:1a:93:6a:fb:ee:51:89:73:dc:fd:8f:
fd:00:ea:f1:25:3d:19:d4:df:d7:aa:09:fe:98:22:
07:1a:ed:0c:08:99:ac:7b:21:52:ec:a9:81:53:c6:
04:32:9a:6b:e1:f4:6e:b2:3b:5c:93:d0:b0:ba:c5:
8b:f6:d5:44:65:7a:c5:09:57:d2:fd:e0:56:67:98:
c0:71:20:07:a9:58:10:11:35:c2:99:5c:f6:43:6f:
6a:c1:5b:de:b7:c7:60:ba:04:e0:f0:cb:a0:51:5a:
c9:04:a0:cf:a1:e6:13:3f:7d:74:31:82:04:85:79:
5e:7e:95:be:69:3e:80:0a:02:67:d7:7b:97:4e:ff:
6c:47:15:6f:2e:aa:c8:05:10:4c:17:98:9d:5c:8e:
ae:33:46:0b:4b:eb:20:9c:9a:43:64:7f:85:a7:a1:
f8:74:be:c5:1d:83:3b:b4:6a:d6:d1:66:5b:af:cb:
f3:89:70:82:bc:c3:d6:f6:66:4d:33:b0:25:fc:63:
7c:9b:a9:08:68:51:96:8d:b9:b4:cf:c9:20:9d:21:
1c:2b:a6:9b:f0:cd:88:e9:67:48:19:c7:0a:29:15:
45:75:e4:84:5a:93:9a:f4:6c:64:76:4e:cf:44:30:
64:06:d2:c5:02:b8:72:69:cd:49:7a:80:f6:e7:b1:
df:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:11:E6:65:34:4B:9E:45:7E:1F:13:44:76:DD:68:7A:69:F8:D9:EC
X509v3 Authority Key Identifier:
keyid:92:78:8F:4E:BB:74:1C:0C:36:9A:0F:D3:05:94:CD:01:01:DC:74:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kniPTrt0HAw2mg_TBZTNAQHcdHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/kniPTrt0HAw2mg_TBZTNAQHcdHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/kniPTrt0HAw2mg_TBZTNAQHcdHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:95:4f:9d:cd:ea:85:15:a3:30:30:a8:6e:12:61:9f:bc:43:
a9:b1:c7:ea:67:b2:f9:a3:2d:7a:10:87:d3:a5:b0:4b:a4:0b:
89:f8:86:82:77:4c:0d:10:d6:ef:fe:d2:be:d0:cf:3c:2a:6b:
ae:4c:3a:59:a5:bf:12:8b:e3:ad:31:56:60:57:ec:c5:bd:02:
47:3b:8a:df:57:95:38:71:0e:9d:46:d9:c6:e4:0e:c7:a7:0e:
6d:eb:02:04:c0:3f:3b:28:b0:e8:3a:ee:3e:29:18:06:88:76:
3e:be:7a:ac:f1:95:c3:6a:89:81:8a:ed:4b:63:d9:59:5b:e6:
f7:a1:35:04:9d:ec:1c:e4:17:a8:48:fb:0e:ba:bc:a1:70:8d:
15:57:12:57:91:c0:cd:6d:18:14:0e:f8:20:ee:f8:76:2a:34:
ac:fd:a2:24:69:06:a2:42:d8:2a:28:f3:1c:94:a8:60:26:75:
ea:90:88:8e:ca:23:51:b2:0f:35:d5:30:83:1b:31:4e:2c:47:
bd:c2:04:02:1d:fa:01:2b:f3:6a:5e:76:91:28:b0:4c:c7:49:
16:f4:f6:02:2e:05:ad:a8:69:0f:7b:9f:b7:84:78:d3:f5:37:
01:24:3a:46:58:15:c6:85:c6:3c:92:09:6a:e6:68:1f:c8:bb:
b4:5e:55:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 08:50:30 2025 by rpki-client