Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f11dea-305e-4898-9192-365347f416c0/1/knseVqx9B4AsRWfEZ5Q1FZtCIJY.mft
File: knseVqx9B4AsRWfEZ5Q1FZtCIJY.mft (raw, json)
Hash identifier: uwBQVzcnQkS8mDf1IuBuJU2O7nypKM3onQOPrTlDBUc=
Subject key identifier: D7:8F:3A:51:9B:CE:A8:E6:93:3B:17:F4:57:D7:B4:E4:31:D0:78:A8
Authority key identifier: 92:7B:1E:56:AC:7D:07:80:2C:45:67:C4:67:94:35:15:9B:42:20:96
Certificate issuer: /CN=927b1e56ac7d07802c4567c4679435159b422096
Certificate serial: 0197722CDFFFB1963D0F1621700C960A8D81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knseVqx9B4AsRWfEZ5Q1FZtCIJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f11dea-305e-4898-9192-365347f416c0/1/knseVqx9B4AsRWfEZ5Q1FZtCIJY.mft
Manifest number: 1593
Signing time: Sun 15 Jun 2025 06:00:32 +0000
Manifest this update: Sun 15 Jun 2025 06:00:32 +0000
Manifest next update: Mon 16 Jun 2025 06:00:32 +0000
Files and hashes: 1: ZZutCOlh3Ali7o57VArVQ-r6xEQ.roa (hash: Z8oFv1O8k+i1SuyJDIP9mmTPP/Uv75FEkkBOgolEt4M=)
2: knseVqx9B4AsRWfEZ5Q1FZtCIJY.crl (hash: Id/xOU7OIVZknul57xzWA9yYjsEvAX7xpYZz0vtlVdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f11dea-305e-4898-9192-365347f416c0/1/knseVqx9B4AsRWfEZ5Q1FZtCIJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/f11dea-305e-4898-9192-365347f416c0/1/knseVqx9B4AsRWfEZ5Q1FZtCIJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/knseVqx9B4AsRWfEZ5Q1FZtCIJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:2c:df:ff:b1:96:3d:0f:16:21:70:0c:96:0a:8d:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927b1e56ac7d07802c4567c4679435159b422096
Validity
Not Before: Jun 15 06:00:32 2025 GMT
Not After : Jun 16 06:00:32 2025 GMT
Subject: CN=d78f3a519bcea8e6933b17f457d7b4e431d078a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:39:e6:22:47:23:52:05:88:d7:cb:bb:e9:83:
f8:e8:ff:3d:4b:65:19:a3:72:ca:de:ca:2f:60:76:
e5:0d:6d:b0:81:63:54:f1:e7:a4:f3:05:87:5b:af:
50:27:d1:8e:aa:47:9c:01:84:55:a8:b7:f8:c0:84:
0d:21:53:72:82:a2:da:0b:dd:b2:69:56:aa:72:d4:
e8:7a:24:7b:7c:ef:20:23:41:f2:0c:f9:7c:64:d3:
37:5b:27:f3:9a:98:6a:9d:86:c9:42:d0:64:57:3f:
b0:f1:01:bb:d5:21:88:66:52:ae:64:6e:80:e7:3c:
a6:43:b8:34:7c:60:46:1b:57:08:13:7f:8c:36:03:
af:73:b9:c1:49:01:b5:b8:f8:f4:7e:fd:3b:53:5a:
ec:68:86:6b:39:55:63:75:1e:c8:f7:3f:92:28:65:
ce:7d:4f:26:46:d0:5c:95:93:77:40:ad:4b:22:41:
73:af:bd:fe:42:c6:27:54:2c:ff:98:06:b2:8a:56:
5d:f2:89:dd:6e:13:0b:12:75:22:33:5e:80:c1:61:
ff:91:53:8e:6b:50:f6:a9:b0:2a:a1:61:c0:77:81:
96:ab:09:b2:71:ed:b0:33:15:46:3f:da:4f:4c:76:
66:d5:85:96:de:21:ae:f1:44:40:ca:f6:cc:f2:8f:
e9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:8F:3A:51:9B:CE:A8:E6:93:3B:17:F4:57:D7:B4:E4:31:D0:78:A8
X509v3 Authority Key Identifier:
keyid:92:7B:1E:56:AC:7D:07:80:2C:45:67:C4:67:94:35:15:9B:42:20:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knseVqx9B4AsRWfEZ5Q1FZtCIJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f11dea-305e-4898-9192-365347f416c0/1/knseVqx9B4AsRWfEZ5Q1FZtCIJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f11dea-305e-4898-9192-365347f416c0/1/knseVqx9B4AsRWfEZ5Q1FZtCIJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:1e:b2:e0:af:4e:08:51:aa:82:6b:d5:a8:4a:b8:69:a3:0f:
23:c1:e6:49:bb:70:56:cc:2b:b3:4d:47:3c:99:fa:f3:c9:4c:
21:3a:5b:a7:7a:76:9c:a4:10:e9:ca:83:9a:41:02:85:97:98:
1a:78:db:c6:db:46:f7:63:b6:66:f0:6e:21:59:4e:2f:ee:57:
1d:dd:8b:f4:5f:1d:bb:60:47:e1:81:0e:35:a7:b6:fd:25:20:
4b:ed:fb:fa:60:70:7e:d3:5c:10:84:60:2a:55:af:85:49:6f:
b8:1d:e2:ae:8d:59:f9:79:a3:b5:64:3f:f7:06:80:e5:80:eb:
5c:21:1d:a9:f3:05:dd:df:86:d0:d8:ef:68:df:29:39:58:c7:
0e:c0:29:51:53:eb:bd:de:7c:01:0e:bc:3f:14:0a:f2:bb:e6:
ab:a6:24:d6:87:86:d2:37:9c:5b:99:56:f0:8f:1c:11:51:e1:
0a:13:95:ac:b5:ea:0e:b0:ab:f3:97:c7:d9:93:84:f0:03:69:
96:15:ff:64:2c:c2:30:86:57:db:57:ca:f2:92:68:86:24:db:
85:2c:80:35:c8:15:a5:0c:16:8d:89:1a:28:45:57:13:75:73:
84:68:33:12:3d:fd:93:fa:55:82:20:36:fe:6e:fa:fd:ce:86:
8f:ea:bb:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:44:38 2025 by rpki-client