Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/kniPTrt0HAw2mg_TBZTNAQHcdHY.mft
File: kniPTrt0HAw2mg_TBZTNAQHcdHY.mft (raw, json)
Hash identifier: xMmJpZ61InFC9cSglnpTa76RwMf44NBCO53FozpqGi0=
Subject key identifier: 2F:97:F6:9F:2A:18:86:56:52:CD:B4:66:C3:E6:E7:77:61:79:FD:72
Authority key identifier: 92:78:8F:4E:BB:74:1C:0C:36:9A:0F:D3:05:94:CD:01:01:DC:74:76
Certificate issuer: /CN=92788f4ebb741c0c369a0fd30594cd0101dc7476
Certificate serial: 019A54BFF5E97B4732C83F27E10E747280D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kniPTrt0HAw2mg_TBZTNAQHcdHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/kniPTrt0HAw2mg_TBZTNAQHcdHY.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 16:00:57 +0000
Manifest this update: Wed 05 Nov 2025 16:00:57 +0000
Manifest next update: Thu 06 Nov 2025 16:00:57 +0000
Files and hashes: 1: K-YJm4wOeLJG8aJ7KI41BLWAM-4.roa (hash: +ltmXAJQfzovJoKfgWj4x9gqmeiriedONmDgSBwWFc4=)
2: kniPTrt0HAw2mg_TBZTNAQHcdHY.crl (hash: ojKO+3+TUogv47HMYH7fQRXxzgvnaA5ZWrAz74OOvrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/kniPTrt0HAw2mg_TBZTNAQHcdHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/kniPTrt0HAw2mg_TBZTNAQHcdHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kniPTrt0HAw2mg_TBZTNAQHcdHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 16:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:bf:f5:e9:7b:47:32:c8:3f:27:e1:0e:74:72:80:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92788f4ebb741c0c369a0fd30594cd0101dc7476
Validity
Not Before: Nov 5 16:00:57 2025 GMT
Not After : Nov 6 16:00:57 2025 GMT
Subject: CN=2f97f69f2a18865652cdb466c3e6e7776179fd72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:06:72:7f:44:8d:b1:77:10:51:e3:f9:9c:c5:
ff:b8:17:18:d4:99:c6:d1:e9:67:72:79:8b:df:c2:
41:36:1b:cf:0c:96:2c:6e:91:41:ec:d2:59:e8:b6:
97:2e:0b:04:88:3b:07:77:09:f5:9b:32:d3:95:1c:
bc:19:bf:42:19:c1:7f:b8:a9:85:b2:56:11:c8:28:
36:9f:02:f9:0b:c4:96:a1:62:7c:23:dd:8c:ef:26:
9f:82:6f:a2:4b:de:60:dd:d6:39:3e:18:bd:f5:1d:
ba:67:b6:fe:27:0c:0b:6e:fc:6d:6a:85:8b:83:17:
7a:e2:0e:db:19:88:75:7c:b1:24:61:23:20:30:41:
92:45:a9:38:1e:a6:21:96:bc:f2:84:42:88:a1:c2:
c5:64:dd:e4:dd:3c:7b:69:35:86:83:d6:ec:11:9b:
e9:89:9c:2c:5d:96:2d:bf:c6:66:7a:a7:16:f3:fb:
06:a4:80:e0:d0:47:9f:12:47:01:4c:59:7a:c9:d3:
d8:eb:aa:fc:5e:e6:88:79:3c:2d:74:de:5b:13:2d:
dd:ba:59:bd:7c:da:08:fb:f4:34:8a:2e:74:32:33:
46:81:5e:61:ae:94:de:69:ab:fd:71:05:90:ab:5e:
d9:f0:ad:84:43:9c:c2:8b:20:ca:c8:e1:f5:75:52:
c1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:97:F6:9F:2A:18:86:56:52:CD:B4:66:C3:E6:E7:77:61:79:FD:72
X509v3 Authority Key Identifier:
keyid:92:78:8F:4E:BB:74:1C:0C:36:9A:0F:D3:05:94:CD:01:01:DC:74:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kniPTrt0HAw2mg_TBZTNAQHcdHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/kniPTrt0HAw2mg_TBZTNAQHcdHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/kniPTrt0HAw2mg_TBZTNAQHcdHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:09:56:bc:66:cb:0a:02:f0:3e:8e:9b:cc:16:86:ec:c1:84:
0c:ea:f5:a5:aa:fa:1d:1a:a7:02:75:70:ca:54:00:b4:88:c8:
3b:0a:ad:bb:31:d9:51:e9:6d:d2:56:22:c0:82:b6:da:d8:60:
fc:0e:b5:70:32:1b:d0:3c:23:ed:e7:93:84:eb:ec:c4:08:c8:
c6:bf:16:1d:a6:5b:f5:70:d5:4c:16:7c:07:0e:32:22:3a:93:
c4:e4:56:9e:30:e3:6c:ea:2a:f1:53:29:1b:29:45:06:02:6c:
3e:b2:1b:97:a9:36:c6:e7:47:87:21:c5:47:93:9b:b9:76:ec:
57:33:15:6c:57:54:cf:ab:e4:8a:28:62:16:c4:4e:03:19:c4:
fa:f9:b2:c8:e2:49:de:cd:c9:da:6a:57:29:ef:17:eb:4e:ee:
6e:d1:f2:80:31:d5:80:d3:47:28:8b:18:bd:fc:57:48:a6:ef:
75:da:b4:d3:e1:a7:e4:24:8e:88:15:8a:75:b2:a4:c4:81:e4:
2f:d2:26:e7:f1:60:c3:30:37:cc:fb:60:e7:77:db:92:98:79:
04:5b:51:dc:35:d7:26:20:68:92:59:9a:39:10:43:c5:a4:57:
9f:c6:5c:0f:73:a3:01:43:05:2b:b0:65:a7:ba:3d:8e:1d:aa:
3c:ac:a2:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpUv/Xpe0cyyD8n4Q50coDTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNzg4ZjRlYmI3NDFjMGMzNjlhMGZkMzA1OTRjZDAxMDFk
Yzc0NzYwHhcNMjUxMTA1MTYwMDU3WhcNMjUxMTA2MTYwMDU3WjAzMTEwLwYDVQQD
EygyZjk3ZjY5ZjJhMTg4NjU2NTJjZGI0NjZjM2U2ZTc3NzYxNzlmZDcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngZyf0SNsXcQUeP5nMX/uBcY1JnG
0elncnmL38JBNhvPDJYsbpFB7NJZ6LaXLgsEiDsHdwn1mzLTlRy8Gb9CGcF/uKmF
slYRyCg2nwL5C8SWoWJ8I92M7yafgm+iS95g3dY5Phi99R26Z7b+JwwLbvxtaoWL
gxd64g7bGYh1fLEkYSMgMEGSRak4HqYhlrzyhEKIocLFZN3k3Tx7aTWGg9bsEZvp
iZwsXZYtv8ZmeqcW8/sGpIDg0EefEkcBTFl6ydPY66r8XuaIeTwtdN5bEy3dulm9
fNoI+/Q0ii50MjNGgV5hrpTeaav9cQWQq17Z8K2EQ5zCiyDKyOH1dVLBZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC+X9p8qGIZWUs20ZsPm53dhef1yMB8GA1UdIwQY
MBaAFJJ4j067dBwMNpoP0wWUzQEB3HR2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva25pUFRydDBIQXcybWdfVEJaVE5BUUhjZEhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83NzFlNzctYzY0OS00N2YzLTk5YTgt
ZGJmYWMwMGZiMGVmLzEva25pUFRydDBIQXcybWdfVEJaVE5BUUhjZEhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83NzFlNzctYzY0OS00N2YzLTk5YTgtZGJmYWMwMGZiMGVm
LzEva25pUFRydDBIQXcybWdfVEJaVE5BUUhjZEhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUAlWvGbL
CgLwPo6bzBaG7MGEDOr1par6HRqnAnVwylQAtIjIOwqtuzHZUelt0lYiwIK22thg
/A61cDIb0Dwj7eeThOvsxAjIxr8WHaZb9XDVTBZ8Bw4yIjqTxORWnjDjbOoq8VMp
GylFBgJsPrIbl6k2xudHhyHFR5ObuXbsVzMVbFdUz6vkiihiFsROAxnE+vmyyOJJ
3s3J2mpXKe8X607ubtHygDHVgNNHKIsYvfxXSKbvddq00+Gn5CSOiBWKdbKkxIHk
L9Im5/FgwzA3zPtg53fbkph5BFtR3DXXJiBoklmaORBDxaRXn8ZcD3OjAUMFK7Bl
p7o9jh2qPKyiWQ==
-----END CERTIFICATE-----
Generated at Thu Nov 6 00:23:23 2025 by rpki-client