Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
File: KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft (raw, json)
Hash identifier: V1moc0wFOEirD3APebE97c74D+JFoLnrXAip6XAAXg0=
Subject key identifier: F0:AB:00:E5:78:BC:B3:C5:9F:7C:BB:40:8C:26:4A:96:58:CD:56:82
Authority key identifier: 2A:73:4E:AB:CF:B5:B6:C2:A4:E4:83:88:ED:B3:AF:8F:50:6B:1F:AB
Certificate issuer: /CN=2a734eabcfb5b6c2a4e48388edb3af8f506b1fab
Certificate serial: 019A4EF59D6C6FF8F4977CF6519BF27E4376
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 13:01:50 +0000
Manifest this update: Tue 04 Nov 2025 13:01:50 +0000
Manifest next update: Wed 05 Nov 2025 13:01:50 +0000
Files and hashes: 1: KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl (hash: DuPzNzKN/LcLAXACO6VMMFrsGxtXhvlauTuHpJDIivc=)
2: cjk16MmGa9VAbHsgngJUOkSp08A.roa (hash: vjUqfCV04EKTU6LoX8huXEuT5umrktch7/fsTB3KR0w=)
3: k2Uppl8G01BcsH3g3-MinVDILtU.roa (hash: lp7j+Bb3bbdsfLwcfqn/iR6o1CoScaVkVKl5uGRp5+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:9d:6c:6f:f8:f4:97:7c:f6:51:9b:f2:7e:43:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a734eabcfb5b6c2a4e48388edb3af8f506b1fab
Validity
Not Before: Nov 4 13:01:50 2025 GMT
Not After : Nov 5 13:01:50 2025 GMT
Subject: CN=f0ab00e578bcb3c59f7cbb408c264a9658cd5682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0a:6d:ee:43:8e:05:e7:0f:29:c0:56:d9:bf:
54:57:35:17:93:24:1b:e0:40:f4:5f:db:a2:a2:f2:
e6:83:98:1b:43:9e:97:59:97:9a:1f:52:15:ec:50:
09:97:a2:89:4e:d1:11:ff:6f:7e:63:64:41:a0:de:
71:e5:79:15:0d:a7:47:16:2f:d9:c2:62:eb:27:8e:
8f:a7:86:46:aa:77:57:0f:c0:49:cd:65:a2:8b:0f:
35:ca:8d:72:59:53:b4:dd:3e:c6:6f:1f:5a:fe:c6:
5a:2c:9a:e4:cc:91:f3:d3:2e:03:3f:01:e9:a6:68:
37:6f:4e:f1:2f:f6:c2:bc:3f:48:a7:0d:10:d6:63:
54:0b:4d:f6:f9:0f:2f:55:5f:5c:7e:1c:dc:cb:50:
82:3e:ad:3b:27:ac:0f:a3:72:67:eb:98:7d:e2:fe:
02:e7:45:3d:0e:df:aa:47:a4:c4:ad:4e:8c:03:ca:
ee:ee:3f:ca:f6:08:30:b8:49:34:1e:89:e3:33:e1:
1f:7a:6c:f4:e8:61:1f:33:47:85:61:42:71:72:d9:
eb:4e:52:8c:c8:2d:d5:ee:d9:ca:a5:35:1c:55:b7:
ff:40:5e:01:b0:42:35:a8:b7:43:ae:dc:6b:5b:ec:
c3:3b:f4:ae:e4:db:8b:c9:5a:d5:89:8d:8a:34:4f:
bd:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:AB:00:E5:78:BC:B3:C5:9F:7C:BB:40:8C:26:4A:96:58:CD:56:82
X509v3 Authority Key Identifier:
keyid:2A:73:4E:AB:CF:B5:B6:C2:A4:E4:83:88:ED:B3:AF:8F:50:6B:1F:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:2a:78:d1:f0:84:8b:12:e3:ae:3c:67:59:ac:89:c0:7e:4d:
5e:c4:ee:8c:15:33:1c:54:dc:89:18:91:16:3c:78:00:b0:04:
46:fc:a4:4b:7d:c5:1d:41:30:d2:39:25:7d:65:4d:e3:83:ee:
f8:1a:ac:41:55:41:41:53:f4:96:85:64:1b:0a:95:77:04:f7:
3f:29:ff:3b:1b:d8:0a:0c:51:b5:cd:1c:01:ea:be:c0:21:43:
ea:3e:10:5f:c0:3c:0c:5a:da:90:7a:a5:68:2e:a1:d2:ab:ff:
45:07:04:c3:2b:a9:d1:f3:1a:de:b9:40:05:14:46:bc:68:9a:
c1:9c:d2:0e:e3:ac:ab:d2:e9:74:2c:c0:ae:81:63:93:11:fe:
eb:b4:e1:bf:7b:7a:e2:70:31:97:45:7b:ca:5f:d1:24:14:71:
29:53:81:f3:4b:2f:40:cb:f2:92:1f:4c:2b:4a:c1:58:52:00:
dc:32:21:01:7e:05:50:bd:6e:6a:25:ef:4d:d2:78:51:0c:6b:
f9:47:24:58:a7:34:77:56:fa:4d:22:24:a7:fa:21:aa:b0:a7:
b1:99:94:ec:fb:c8:fa:7f:c0:d6:44:ca:0c:c6:06:4a:b9:31:
50:32:83:f8:d4:be:7d:ea:b9:9c:96:50:a2:80:8a:76:20:8c:
4a:af:19:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:36:19 2025 by rpki-client