Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.mft
File: knEFydH7BpBVSXH0ZMoh9KRcEGo.mft (raw, json)
Hash identifier: uygiszPnyerVS6YWlWT7ztcg7iIgvpdK79SniCq7xPI=
Subject key identifier: BA:75:02:48:74:66:AB:F3:FB:45:8A:84:D7:31:F4:91:69:94:5A:ED
Authority key identifier: 92:71:05:C9:D1:FB:06:90:55:49:71:F4:64:CA:21:F4:A4:5C:10:6A
Certificate issuer: /CN=927105c9d1fb0690554971f464ca21f4a45c106a
Certificate serial: 0198752C3C7E9F4540C58AA50471183AB347
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knEFydH7BpBVSXH0ZMoh9KRcEGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.mft
Manifest number: 0CEE
Signing time: Mon 04 Aug 2025 13:01:30 +0000
Manifest this update: Mon 04 Aug 2025 13:01:30 +0000
Manifest next update: Tue 05 Aug 2025 13:01:30 +0000
Files and hashes: 1: ipQ4XqSuTpQi-re2ZW_sK3VHNnQ.roa (hash: poFgPveu8J3ZCztPp1XhAex84n6Kit4aGgJE9uzT+QM=)
2: knEFydH7BpBVSXH0ZMoh9KRcEGo.crl (hash: LBesC4JDX15bKrsnQ+fkWzBMmv9QnxiPFjmnM7K9Chk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/knEFydH7BpBVSXH0ZMoh9KRcEGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:2c:3c:7e:9f:45:40:c5:8a:a5:04:71:18:3a:b3:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927105c9d1fb0690554971f464ca21f4a45c106a
Validity
Not Before: Aug 4 13:01:30 2025 GMT
Not After : Aug 5 13:01:30 2025 GMT
Subject: CN=ba7502487466abf3fb458a84d731f49169945aed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:55:c0:d4:92:3d:ea:b2:40:74:bc:f1:a5:c1:
2a:81:ab:6d:8e:ae:dd:37:1a:89:25:86:1f:8f:28:
87:16:84:19:f7:a6:04:44:11:97:c5:31:35:1a:1a:
f4:7f:b1:47:d4:90:3e:5c:9a:66:c5:69:b0:10:f3:
ec:50:38:14:3f:c4:f9:d1:88:25:18:f9:b2:66:0e:
07:20:6c:87:2d:74:f1:8d:d3:93:2f:22:67:64:00:
28:ac:a2:3b:14:bf:75:15:ba:e7:73:cf:a8:55:9a:
c4:6b:cb:c5:aa:8b:80:31:08:c5:51:75:c2:da:f7:
d3:27:57:66:22:44:e7:39:ab:2f:c0:fe:46:dc:fa:
7c:b5:56:d0:29:e7:f2:cc:07:ff:6c:c4:65:00:12:
c1:e1:a6:8b:0e:49:8e:d9:cd:5d:b0:b2:a9:58:d1:
ca:e0:b8:85:5e:e2:6c:0a:a5:19:ad:3c:ea:4a:7e:
6c:b0:18:c6:67:1b:ae:da:cb:fe:b9:ea:76:7f:85:
36:6e:dc:52:91:74:ea:35:5a:73:6b:57:63:f6:14:
23:8f:8e:cc:3d:ed:1c:58:ca:9e:76:6f:de:d9:e8:
b7:a6:70:2a:a0:0b:4c:18:24:ad:f1:23:89:79:48:
09:e5:a9:2d:07:e3:56:4d:70:68:1a:0a:43:ea:74:
f4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:75:02:48:74:66:AB:F3:FB:45:8A:84:D7:31:F4:91:69:94:5A:ED
X509v3 Authority Key Identifier:
keyid:92:71:05:C9:D1:FB:06:90:55:49:71:F4:64:CA:21:F4:A4:5C:10:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knEFydH7BpBVSXH0ZMoh9KRcEGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:16:eb:50:9d:3b:ef:20:1a:26:98:4b:99:c1:2f:b5:36:71:
0e:0b:a0:a2:85:34:c6:20:5d:84:8c:ac:09:fd:07:05:47:da:
dc:92:8c:bf:30:13:23:a4:86:24:5b:4f:33:18:9c:41:b2:ad:
68:e4:e7:98:23:84:f2:28:9a:93:08:cd:16:bf:12:e4:84:cc:
0c:62:90:a6:52:08:11:6c:e6:72:f9:af:83:46:4c:74:ed:c8:
0b:45:15:34:88:65:f1:b2:5c:08:b8:22:7e:36:35:99:22:10:
66:65:4b:21:26:a6:bd:25:a4:23:82:05:a2:01:ff:43:2c:ad:
c4:e6:83:c0:3c:07:42:6f:67:25:9c:50:c9:5e:ba:65:f7:77:
e8:41:fa:e4:fe:1b:31:0e:ec:01:09:64:60:d5:67:72:f5:9d:
8d:ad:d5:f7:9f:74:9d:b6:00:a3:5b:bf:83:bd:e3:40:64:2c:
03:4c:6a:bf:46:6b:a0:0f:8d:d4:07:7a:9d:dc:41:34:2a:b3:
20:7d:11:47:91:84:b5:d5:1d:a3:a8:33:3c:49:ed:b4:36:f5:
65:a9:3d:23:eb:4e:a0:07:08:74:00:81:ca:e0:e1:d4:3a:b6:
35:1e:87:37:48:6f:d5:e5:2a:14:a9:2b:47:82:2e:09:71:55:
ce:2a:d2:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:14:43 2025 by rpki-client