Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f11dea-305e-4898-9192-365347f416c0/1/knseVqx9B4AsRWfEZ5Q1FZtCIJY.mft
File: knseVqx9B4AsRWfEZ5Q1FZtCIJY.mft (raw, json)
Hash identifier: sGQFskN/NVeezEsfxXSqzZz6o78UvPF/sW0pg71RydI=
Subject key identifier: 57:66:D3:36:4E:97:33:8B:0F:60:DC:0A:3A:4B:87:11:8C:11:E5:37
Authority key identifier: 92:7B:1E:56:AC:7D:07:80:2C:45:67:C4:67:94:35:15:9B:42:20:96
Certificate issuer: /CN=927b1e56ac7d07802c4567c4679435159b422096
Certificate serial: 01988FFDFD4FD265A71274D63CB3BFC6DE9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knseVqx9B4AsRWfEZ5Q1FZtCIJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f11dea-305e-4898-9192-365347f416c0/1/knseVqx9B4AsRWfEZ5Q1FZtCIJY.mft
Manifest number: 1627
Signing time: Sat 09 Aug 2025 18:00:43 +0000
Manifest this update: Sat 09 Aug 2025 18:00:43 +0000
Manifest next update: Sun 10 Aug 2025 18:00:43 +0000
Files and hashes: 1: ZZutCOlh3Ali7o57VArVQ-r6xEQ.roa (hash: Z8oFv1O8k+i1SuyJDIP9mmTPP/Uv75FEkkBOgolEt4M=)
2: knseVqx9B4AsRWfEZ5Q1FZtCIJY.crl (hash: zVwfrBDefmCo6i6P+5vgt4ODhxPcRh50Ais9P+2Jj+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f11dea-305e-4898-9192-365347f416c0/1/knseVqx9B4AsRWfEZ5Q1FZtCIJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/f11dea-305e-4898-9192-365347f416c0/1/knseVqx9B4AsRWfEZ5Q1FZtCIJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/knseVqx9B4AsRWfEZ5Q1FZtCIJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:fd:fd:4f:d2:65:a7:12:74:d6:3c:b3:bf:c6:de:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927b1e56ac7d07802c4567c4679435159b422096
Validity
Not Before: Aug 9 18:00:43 2025 GMT
Not After : Aug 10 18:00:43 2025 GMT
Subject: CN=5766d3364e97338b0f60dc0a3a4b87118c11e537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:2c:86:88:66:20:d1:14:b1:38:45:5a:6d:f1:
fb:b6:10:83:d3:a9:db:dc:a7:92:fa:4c:db:a8:2d:
d6:f9:d7:69:3e:ac:e7:ee:a6:e0:9c:88:ba:90:00:
ad:05:f1:fc:46:46:f4:e5:1e:ba:87:93:83:f4:c4:
12:2b:d4:e3:24:1d:14:2b:52:99:ff:5d:e3:45:12:
91:0a:be:d0:d3:43:eb:9e:21:5a:4d:a8:fa:0a:d5:
27:f2:dd:2e:d6:86:b5:85:1c:f3:ca:c6:e5:41:eb:
df:57:c8:7f:2f:fe:dd:ff:c5:06:4e:d6:e5:82:17:
7b:2b:d1:48:73:3d:5f:9a:57:30:0d:35:c5:0d:6e:
f5:2d:b2:90:ed:34:9d:16:8f:d1:09:4f:b5:ea:d9:
2c:53:07:2a:7c:c6:1d:d8:51:66:17:9d:13:8b:c2:
a5:ef:45:f8:a0:89:72:95:9d:0c:e2:98:ed:45:c6:
a7:99:c0:33:a5:b9:25:90:8b:c1:db:ec:d6:1d:c1:
9c:4c:9a:0c:63:04:01:73:2a:1b:02:ed:00:0c:a8:
7c:48:63:63:39:d6:03:d2:9b:b4:64:b5:b7:76:bb:
7b:51:9f:18:f2:b5:ba:9b:c8:86:ee:e0:40:9c:9c:
f8:e8:b5:57:6f:f7:fa:65:26:16:c3:89:b0:0b:71:
e2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:66:D3:36:4E:97:33:8B:0F:60:DC:0A:3A:4B:87:11:8C:11:E5:37
X509v3 Authority Key Identifier:
keyid:92:7B:1E:56:AC:7D:07:80:2C:45:67:C4:67:94:35:15:9B:42:20:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knseVqx9B4AsRWfEZ5Q1FZtCIJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f11dea-305e-4898-9192-365347f416c0/1/knseVqx9B4AsRWfEZ5Q1FZtCIJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f11dea-305e-4898-9192-365347f416c0/1/knseVqx9B4AsRWfEZ5Q1FZtCIJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:80:3a:2e:4d:0f:ef:a2:e1:79:a7:b9:51:6a:ec:12:95:eb:
f1:21:5a:d7:e3:07:54:fb:a7:b4:28:49:c7:a6:6a:d1:d2:2e:
8c:6c:8e:0a:6c:dd:f7:8f:14:ee:a2:d9:4a:3a:7d:e0:d2:ce:
e7:fd:15:d9:b3:dd:ce:36:60:55:35:3a:e2:21:87:96:aa:dc:
cf:82:3a:73:d3:39:8c:da:db:24:80:f7:a1:a2:d0:0a:02:55:
ca:ba:64:4c:00:a7:85:58:f9:b9:d7:8b:38:59:7c:a8:76:01:
0c:f2:01:a3:a9:98:59:36:38:cb:78:dd:19:21:f1:24:7c:d7:
10:ab:63:81:ab:6d:b1:a1:b8:e2:48:c2:b5:ac:84:63:68:5a:
4a:8f:ac:7f:b6:9a:15:10:3c:f8:76:f4:0f:b3:f1:43:b7:d9:
2e:d6:e6:0c:af:5d:52:1a:92:fa:ea:ad:41:df:4d:9f:02:cb:
4e:2c:5a:02:88:a7:2a:36:f2:ed:7a:19:45:3e:81:2e:a2:95:
04:26:c9:cd:32:9f:29:38:c9:0f:01:eb:81:ed:7e:a1:11:61:
d6:af:1f:ae:05:5d:ba:da:e8:82:50:7b:42:d1:66:56:30:35:
f1:a0:60:05:9a:72:1c:63:bb:13:9a:ed:c1:4b:75:5d:f2:e1:
ca:55:20:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiP/f1P0mWnEnTWPLO/xt6bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyN2IxZTU2YWM3ZDA3ODAyYzQ1NjdjNDY3OTQzNTE1OWI0
MjIwOTYwHhcNMjUwODA5MTgwMDQzWhcNMjUwODEwMTgwMDQzWjAzMTEwLwYDVQQD
Eyg1NzY2ZDMzNjRlOTczMzhiMGY2MGRjMGEzYTRiODcxMThjMTFlNTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7CyGiGYg0RSxOEVabfH7thCD06nb
3KeS+kzbqC3W+ddpPqzn7qbgnIi6kACtBfH8Rkb05R66h5OD9MQSK9TjJB0UK1KZ
/13jRRKRCr7Q00PrniFaTaj6CtUn8t0u1oa1hRzzysblQevfV8h/L/7d/8UGTtbl
ghd7K9FIcz1fmlcwDTXFDW71LbKQ7TSdFo/RCU+16tksUwcqfMYd2FFmF50Ti8Kl
70X4oIlylZ0M4pjtRcanmcAzpbklkIvB2+zWHcGcTJoMYwQBcyobAu0ADKh8SGNj
OdYD0pu0ZLW3drt7UZ8Y8rW6m8iG7uBAnJz46LVXb/f6ZSYWw4mwC3HibQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFdm0zZOlzOLD2DcCjpLhxGMEeU3MB8GA1UdIwQY
MBaAFJJ7HlasfQeALEVnxGeUNRWbQiCWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva25zZVZxeDlCNEFzUldmRVo1UTFGWnRDSUpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mMTFkZWEtMzA1ZS00ODk4LTkxOTIt
MzY1MzQ3ZjQxNmMwLzEva25zZVZxeDlCNEFzUldmRVo1UTFGWnRDSUpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9mMTFkZWEtMzA1ZS00ODk4LTkxOTItMzY1MzQ3ZjQxNmMw
LzEva25zZVZxeDlCNEFzUldmRVo1UTFGWnRDSUpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIIA6Lk0P
76Lheae5UWrsEpXr8SFa1+MHVPuntChJx6Zq0dIujGyOCmzd948U7qLZSjp94NLO
5/0V2bPdzjZgVTU64iGHlqrcz4I6c9M5jNrbJID3oaLQCgJVyrpkTACnhVj5udeL
OFl8qHYBDPIBo6mYWTY4y3jdGSHxJHzXEKtjgattsaG44kjCtayEY2haSo+sf7aa
FRA8+Hb0D7PxQ7fZLtbmDK9dUhqS+uqtQd9NnwLLTixaAoinKjby7XoZRT6BLqKV
BCbJzTKfKTjJDwHrge1+oRFh1q8frgVdutroglB7QtFmVjA18aBgBZpyHGO7E5rt
wUt1XfLhylUgeg==
-----END CERTIFICATE-----
Generated at Sat Aug 9 23:15:05 2025 by rpki-client