Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/9e81f3-2e02-4857-af49-61be8a06f3af/1/KNX3dyLGFlf4HJ965JznKbWA9ng.mft
File: KNX3dyLGFlf4HJ965JznKbWA9ng.mft (raw, json)
Hash identifier: +rSYlnfnQsMqZ1373pwT1y5HqSqbexrZOapHzkm5K9I=
Subject key identifier: E0:88:D1:B6:B2:93:9C:DC:71:E3:B6:AE:93:78:25:BA:6C:2D:89:7B
Authority key identifier: 28:D5:F7:77:22:C6:16:57:F8:1C:9F:7A:E4:9C:E7:29:B5:80:F6:78
Certificate issuer: /CN=28d5f77722c61657f81c9f7ae49ce729b580f678
Certificate serial: 019769619FB382A0BF0071C1FF0EB8A5FDE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KNX3dyLGFlf4HJ965JznKbWA9ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/9e81f3-2e02-4857-af49-61be8a06f3af/1/KNX3dyLGFlf4HJ965JznKbWA9ng.mft
Manifest number: 158A
Signing time: Fri 13 Jun 2025 13:01:34 +0000
Manifest this update: Fri 13 Jun 2025 13:01:34 +0000
Manifest next update: Sat 14 Jun 2025 13:01:34 +0000
Files and hashes: 1: KNX3dyLGFlf4HJ965JznKbWA9ng.crl (hash: su2bVefeTSCqNtRqz16YHqCOyIgo+CVbmi84JIn6aDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/9e81f3-2e02-4857-af49-61be8a06f3af/1/KNX3dyLGFlf4HJ965JznKbWA9ng.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/9e81f3-2e02-4857-af49-61be8a06f3af/1/KNX3dyLGFlf4HJ965JznKbWA9ng.mft
rsync://rpki.ripe.net/repository/DEFAULT/KNX3dyLGFlf4HJ965JznKbWA9ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:9f:b3:82:a0:bf:00:71:c1:ff:0e:b8:a5:fd:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28d5f77722c61657f81c9f7ae49ce729b580f678
Validity
Not Before: Jun 13 13:01:34 2025 GMT
Not After : Jun 14 13:01:34 2025 GMT
Subject: CN=e088d1b6b2939cdc71e3b6ae937825ba6c2d897b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ab:d5:e9:2e:c5:5f:f2:40:a3:37:59:28:c4:
24:90:7b:de:25:aa:74:45:f3:3d:3f:ef:41:c5:1e:
be:bb:10:19:24:86:43:ce:8a:43:78:82:3d:a2:b2:
7e:96:97:c8:4f:c8:aa:ce:43:ed:38:56:62:16:3d:
6c:21:3d:4e:b0:bb:47:63:e0:e2:d7:45:2c:46:c5:
78:ee:5a:13:ed:d0:52:6e:ba:e0:d9:c5:04:a5:7c:
f1:a1:0b:cd:92:80:2b:8f:db:bc:f5:94:0e:b4:6b:
77:7a:5a:79:bb:0e:9f:bc:02:4c:a6:a1:c5:36:d4:
9f:5b:fe:b0:f8:f3:46:1d:09:17:b4:27:7d:10:0b:
ba:ec:99:31:fe:dd:4e:71:54:df:97:49:f6:cc:8d:
cc:e9:1d:14:58:66:f3:30:db:ba:f1:a0:f6:7b:7c:
f4:5c:bf:e1:d5:de:be:a6:93:d3:b4:06:79:79:79:
5a:15:02:5b:31:be:7f:3a:fb:08:5f:55:d4:33:b2:
29:6c:a8:4f:76:ac:ab:4a:33:83:6e:ae:55:b5:b4:
67:d1:71:30:e9:b5:7b:bb:51:be:c4:f1:ed:d0:65:
ec:43:b7:a0:a5:5d:13:c6:00:74:6c:72:86:4e:c6:
57:d6:1c:41:97:b2:56:be:54:a3:4b:97:65:09:51:
5e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:88:D1:B6:B2:93:9C:DC:71:E3:B6:AE:93:78:25:BA:6C:2D:89:7B
X509v3 Authority Key Identifier:
keyid:28:D5:F7:77:22:C6:16:57:F8:1C:9F:7A:E4:9C:E7:29:B5:80:F6:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KNX3dyLGFlf4HJ965JznKbWA9ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9e81f3-2e02-4857-af49-61be8a06f3af/1/KNX3dyLGFlf4HJ965JznKbWA9ng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9e81f3-2e02-4857-af49-61be8a06f3af/1/KNX3dyLGFlf4HJ965JznKbWA9ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:53:78:19:d5:8f:e1:91:da:54:ab:93:67:41:b3:a0:1a:d7:
f5:e8:bb:89:e8:b4:6f:78:6d:3d:54:de:96:13:e3:7b:ff:36:
ab:91:53:0b:39:d9:72:11:a5:df:2d:3d:0e:0c:0c:b1:67:8f:
3a:9f:ea:50:de:37:54:95:1c:33:e9:2a:f5:3b:aa:7f:a8:74:
fe:f8:34:23:0b:d0:27:e7:7a:85:00:c7:53:21:9e:3a:6a:0e:
d4:aa:60:77:14:0b:6c:9e:1f:61:eb:7f:5b:ea:6a:91:72:64:
8f:b8:4f:09:49:de:73:64:63:7a:44:69:c3:1d:ad:cb:5c:a6:
27:7e:7b:85:7f:68:d4:c1:d8:bc:78:47:97:1c:ab:8f:8e:a1:
64:fa:15:34:ef:47:f6:78:7d:86:3c:78:6b:5b:f3:e4:1d:59:
68:50:05:5a:db:05:3b:10:b7:ac:07:a4:8a:d6:e3:36:b7:5d:
de:4b:e1:94:a2:eb:1c:f7:dd:02:86:ae:b3:8f:d4:2b:8a:85:
be:46:f2:ce:c6:07:5e:52:d9:3e:8f:28:6c:4c:b7:d3:54:3b:
f4:b3:ab:24:15:90:b2:d9:5a:6c:28:7e:34:3c:65:a5:b6:b1:
ff:af:f0:78:72:99:8f:99:42:36:09:5d:67:1c:55:ce:0e:6f:
d7:ce:25:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:19:24 2025 by rpki-client