Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/9e81f3-2e02-4857-af49-61be8a06f3af/1/KNX3dyLGFlf4HJ965JznKbWA9ng.mft
File: KNX3dyLGFlf4HJ965JznKbWA9ng.mft (raw, json)
Hash identifier: 0CmHBw7H41eKyVIC7svPr2wTk12enCvMxfOg5cIUX1Y=
Subject key identifier: 62:F3:95:4D:0B:E7:FC:80:58:36:CD:A3:E3:30:DF:92:30:92:88:75
Authority key identifier: 28:D5:F7:77:22:C6:16:57:F8:1C:9F:7A:E4:9C:E7:29:B5:80:F6:78
Certificate issuer: /CN=28d5f77722c61657f81c9f7ae49ce729b580f678
Certificate serial: 019873E3D9E413F2AB32383B6AD368B81A3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KNX3dyLGFlf4HJ965JznKbWA9ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/9e81f3-2e02-4857-af49-61be8a06f3af/1/KNX3dyLGFlf4HJ965JznKbWA9ng.mft
Manifest number: 1614
Signing time: Mon 04 Aug 2025 07:02:48 +0000
Manifest this update: Mon 04 Aug 2025 07:02:48 +0000
Manifest next update: Tue 05 Aug 2025 07:02:48 +0000
Files and hashes: 1: KNX3dyLGFlf4HJ965JznKbWA9ng.crl (hash: 3hy7Bro193G5GncSql2+VK3K4LFCO7eeGMxEwxh5edk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/9e81f3-2e02-4857-af49-61be8a06f3af/1/KNX3dyLGFlf4HJ965JznKbWA9ng.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/9e81f3-2e02-4857-af49-61be8a06f3af/1/KNX3dyLGFlf4HJ965JznKbWA9ng.mft
rsync://rpki.ripe.net/repository/DEFAULT/KNX3dyLGFlf4HJ965JznKbWA9ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:d9:e4:13:f2:ab:32:38:3b:6a:d3:68:b8:1a:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28d5f77722c61657f81c9f7ae49ce729b580f678
Validity
Not Before: Aug 4 07:02:48 2025 GMT
Not After : Aug 5 07:02:48 2025 GMT
Subject: CN=62f3954d0be7fc805836cda3e330df9230928875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5d:08:d2:ee:fb:10:52:cb:05:48:ab:ad:29:
dc:22:ff:e1:aa:b6:70:a3:49:10:74:f4:cb:98:8c:
85:97:6d:31:f1:44:4f:90:8c:fe:ba:af:f5:0c:5f:
24:a6:7b:a0:a7:d5:0f:b5:42:aa:c5:6c:16:4f:13:
53:cc:c2:53:2a:d1:16:41:cf:8c:e3:39:e9:98:96:
18:9b:7d:da:85:92:5b:84:f8:db:ac:d0:c4:3c:17:
b1:cd:3d:92:7c:7e:9e:2a:d7:01:3e:53:36:33:54:
5a:d4:3e:f4:70:90:7d:49:15:64:63:27:52:be:8b:
f3:3b:65:04:0d:e4:b3:04:dd:ce:d2:2b:a7:98:87:
c0:c6:53:06:6b:06:f3:be:30:05:93:d3:9a:8d:00:
b5:d0:0f:6c:a9:a5:8d:85:89:1d:5d:f1:8b:26:7c:
b3:69:07:15:a4:1c:02:b7:58:52:40:11:14:11:e1:
4d:32:f0:cf:d0:3b:8d:e3:d1:b7:f2:3c:c5:ef:78:
02:c5:78:af:ed:f6:1a:f6:ff:01:18:54:1a:a8:c9:
2e:14:f6:07:f1:1a:f3:e8:11:1e:22:35:4d:7f:db:
34:30:94:27:71:12:17:49:fc:45:38:d2:df:5a:37:
17:07:66:96:22:79:31:cf:d4:66:d8:ca:6e:2d:2c:
11:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:F3:95:4D:0B:E7:FC:80:58:36:CD:A3:E3:30:DF:92:30:92:88:75
X509v3 Authority Key Identifier:
keyid:28:D5:F7:77:22:C6:16:57:F8:1C:9F:7A:E4:9C:E7:29:B5:80:F6:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KNX3dyLGFlf4HJ965JznKbWA9ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9e81f3-2e02-4857-af49-61be8a06f3af/1/KNX3dyLGFlf4HJ965JznKbWA9ng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9e81f3-2e02-4857-af49-61be8a06f3af/1/KNX3dyLGFlf4HJ965JznKbWA9ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:67:8d:cc:ba:1d:10:4e:a9:b4:bc:38:af:a0:f3:af:97:5a:
d2:fd:cd:10:07:47:e7:f1:14:e2:2d:7c:43:04:ae:4c:1c:78:
ea:10:9e:5c:ff:94:c3:74:3c:9c:1a:09:d3:90:4e:81:fd:02:
a0:18:e7:e7:2e:a3:7f:00:0a:f7:09:df:29:57:03:28:e9:57:
58:36:0d:a1:b8:7f:59:f2:9e:51:f1:07:16:ee:b4:12:af:b4:
05:0a:28:2f:6d:30:44:a3:0c:9b:62:d5:7b:43:a1:d8:61:bd:
7d:d7:45:c6:e6:31:25:f3:1f:88:06:99:62:a0:c6:0c:ab:dd:
ba:46:be:9b:ad:c7:3f:44:6a:d4:40:c8:06:70:e5:c9:ba:5b:
34:d6:0d:dc:f1:3a:29:3f:cf:e8:9d:ca:48:aa:30:b6:44:20:
1c:44:a5:3f:a5:32:c2:4c:02:3d:88:d0:d0:cb:76:ad:13:2d:
05:fc:3e:28:85:fe:ea:60:53:23:e7:32:04:e5:29:e7:fb:a4:
cf:aa:33:9d:2f:7e:6f:df:65:6d:e4:7f:8f:e1:15:cb:22:fa:
bb:11:ae:76:19:f7:c3:ed:ef:e2:d8:8d:b6:76:0f:ee:c4:80:
c1:13:21:db:1c:8c:4b:88:4c:c6:d3:71:08:b0:f7:1b:dc:bc:
62:f5:68:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:25:32 2025 by rpki-client