Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/3fa92f-cabd-413b-ae5c-69b733cbc528/1/knaysJMpLF-nXm4UwqSZrIR-QWs.mft
File: knaysJMpLF-nXm4UwqSZrIR-QWs.mft (raw, json)
Hash identifier: 2gVii91zkr989Qt7gKSqlDj161X63DOPPB8aZ20Oftk=
Subject key identifier: 0B:C8:C3:9F:6B:1D:46:1D:7B:B7:31:58:BA:B7:67:FF:D2:CD:9B:9B
Authority key identifier: 92:76:B2:B0:93:29:2C:5F:A7:5E:6E:14:C2:A4:99:AC:84:7E:41:6B
Certificate issuer: /CN=9276b2b093292c5fa75e6e14c2a499ac847e416b
Certificate serial: 019881682E92B816CB84A7402F7374624358
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knaysJMpLF-nXm4UwqSZrIR-QWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/3fa92f-cabd-413b-ae5c-69b733cbc528/1/knaysJMpLF-nXm4UwqSZrIR-QWs.mft
Manifest number: 13EE
Signing time: Wed 06 Aug 2025 22:02:25 +0000
Manifest this update: Wed 06 Aug 2025 22:02:25 +0000
Manifest next update: Thu 07 Aug 2025 22:02:25 +0000
Files and hashes: 1: knaysJMpLF-nXm4UwqSZrIR-QWs.crl (hash: ajPZuOwjByuE0idlj8mjv+k+1DvYY5fjYiX6SEdWA3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/3fa92f-cabd-413b-ae5c-69b733cbc528/1/knaysJMpLF-nXm4UwqSZrIR-QWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/3fa92f-cabd-413b-ae5c-69b733cbc528/1/knaysJMpLF-nXm4UwqSZrIR-QWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/knaysJMpLF-nXm4UwqSZrIR-QWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:68:2e:92:b8:16:cb:84:a7:40:2f:73:74:62:43:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9276b2b093292c5fa75e6e14c2a499ac847e416b
Validity
Not Before: Aug 6 22:02:25 2025 GMT
Not After : Aug 7 22:02:25 2025 GMT
Subject: CN=0bc8c39f6b1d461d7bb73158bab767ffd2cd9b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ea:1b:1c:f8:d2:35:b9:8a:c5:3f:6f:9f:0a:
3a:b6:c5:f3:3a:07:d1:d8:70:8e:92:bb:0c:5a:0b:
b5:5b:9f:02:ec:f9:e0:e3:56:45:f2:b3:d3:4b:58:
61:64:12:0f:72:0c:b4:90:f3:95:3f:ce:90:bd:3f:
a6:a0:a1:c6:0c:01:c7:11:ea:d3:47:80:29:b5:e5:
3d:b4:91:85:b5:86:74:69:70:d3:ff:0e:b8:66:4e:
3a:1d:63:d1:5c:0c:29:53:4b:60:27:82:53:06:19:
a6:00:79:ce:69:dd:1a:93:f1:27:fb:d2:22:cc:dc:
84:ec:62:3d:69:4e:eb:27:9b:a3:b5:82:1a:32:d8:
9d:57:4f:80:2e:0c:58:63:5e:b7:96:04:98:32:5b:
cf:c3:15:fd:4a:5b:ec:40:5b:82:7a:8c:04:7b:ef:
5c:8e:4d:81:84:a4:4b:44:b3:35:a6:e8:dc:4e:27:
bc:ea:50:64:65:7c:7a:e3:cc:3d:69:8d:0c:c6:ff:
35:41:a5:7f:82:cf:1f:0b:7f:f8:e1:a6:73:01:cb:
c0:24:00:11:91:6d:2c:c4:0d:8a:e8:86:c5:d0:ec:
7f:5a:23:65:75:7f:b3:fa:ab:44:d8:19:3a:d8:e1:
49:c8:95:e1:62:bc:bf:3e:56:b5:f6:0e:7d:75:b5:
7d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:C8:C3:9F:6B:1D:46:1D:7B:B7:31:58:BA:B7:67:FF:D2:CD:9B:9B
X509v3 Authority Key Identifier:
keyid:92:76:B2:B0:93:29:2C:5F:A7:5E:6E:14:C2:A4:99:AC:84:7E:41:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knaysJMpLF-nXm4UwqSZrIR-QWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3fa92f-cabd-413b-ae5c-69b733cbc528/1/knaysJMpLF-nXm4UwqSZrIR-QWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3fa92f-cabd-413b-ae5c-69b733cbc528/1/knaysJMpLF-nXm4UwqSZrIR-QWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:12:fb:0c:c5:58:59:55:2d:55:65:ef:6b:51:1a:0d:01:2f:
6c:5a:65:b7:b7:1a:7d:cb:27:49:27:4c:d2:2f:2d:db:87:18:
72:4e:b0:c2:54:30:d3:fc:34:01:1d:ac:1b:12:82:17:13:a0:
c0:01:39:2a:29:9f:3c:ba:b8:dc:ac:a7:57:84:db:70:7e:f4:
f1:59:8f:d4:4a:f4:68:99:c4:9c:08:40:1b:5c:80:33:30:ef:
7f:ab:47:bc:f2:4e:0c:ef:da:7d:7d:50:2e:cf:1d:c1:84:13:
f6:4d:7b:d6:68:69:31:03:33:d5:13:2e:fb:e7:10:ba:46:d1:
61:14:ab:9b:1b:ea:7b:43:cf:89:c7:2b:99:09:37:2a:aa:67:
d0:66:b8:98:c3:76:57:f1:72:b3:55:c0:c2:67:cb:05:c2:fe:
4a:8a:49:15:12:65:e7:e6:0a:2d:a0:9f:4e:b8:7b:2f:7c:4d:
bc:13:1b:c5:c9:de:cf:22:0b:c5:2c:eb:eb:fe:89:46:a7:db:
f8:f2:b7:60:32:b2:a4:6d:45:d1:f9:95:17:35:81:f3:4f:37:
71:91:5c:76:71:07:93:ea:95:fc:86:9a:cf:70:be:56:ab:36:
30:b9:ca:ed:2f:42:bc:f6:9d:fd:a2:b7:cd:35:0c:11:12:7d:
e8:fc:51:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:25:06 2025 by rpki-client