Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
File: KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft (raw, json)
Hash identifier: Q4oI4Ft/Y564IRAF0l5X3Hmw37I9mce6gUfCD/s7j80=
Subject key identifier: B4:B0:BB:E2:0C:48:1B:CE:BD:84:CC:79:07:15:77:E4:93:24:83:3E
Authority key identifier: 2A:73:4E:AB:CF:B5:B6:C2:A4:E4:83:88:ED:B3:AF:8F:50:6B:1F:AB
Certificate issuer: /CN=2a734eabcfb5b6c2a4e48388edb3af8f506b1fab
Certificate serial: 019875D124219483A70485D686D32368AA60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
Manifest number: 1619
Signing time: Mon 04 Aug 2025 16:01:37 +0000
Manifest this update: Mon 04 Aug 2025 16:01:37 +0000
Manifest next update: Tue 05 Aug 2025 16:01:37 +0000
Files and hashes: 1: KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl (hash: ws174sho6ybzs/5V0snoeo+w1pCHh4HSQWLqCW9twis=)
2: cjk16MmGa9VAbHsgngJUOkSp08A.roa (hash: vjUqfCV04EKTU6LoX8huXEuT5umrktch7/fsTB3KR0w=)
3: k2Uppl8G01BcsH3g3-MinVDILtU.roa (hash: lp7j+Bb3bbdsfLwcfqn/iR6o1CoScaVkVKl5uGRp5+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:d1:24:21:94:83:a7:04:85:d6:86:d3:23:68:aa:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a734eabcfb5b6c2a4e48388edb3af8f506b1fab
Validity
Not Before: Aug 4 16:01:37 2025 GMT
Not After : Aug 5 16:01:37 2025 GMT
Subject: CN=b4b0bbe20c481bcebd84cc79071577e49324833e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:64:4d:a1:01:57:5a:91:6c:3e:aa:26:d6:46:
c5:22:7c:69:4c:0b:a2:85:6e:c9:ea:a3:e8:55:1c:
01:3d:eb:22:4d:07:a3:d4:ae:db:d0:c9:49:db:10:
9c:3c:d0:be:f4:59:e9:09:90:94:7c:19:63:b7:82:
51:a3:48:ee:0a:6f:48:bc:7c:a6:78:ef:7d:77:a9:
8a:59:30:e2:41:ac:3e:4d:2c:8d:40:6b:52:9c:8d:
9f:e0:12:cc:a5:94:2d:16:cd:df:47:5a:17:8c:c5:
f0:12:b0:48:f9:40:d9:31:e6:bb:50:7f:17:fe:6a:
1e:04:e8:b7:29:13:4e:0f:98:87:ae:25:f2:71:47:
3b:bb:07:10:79:72:60:a0:7a:7e:fa:d2:3f:1d:1c:
72:01:9d:4c:20:13:8a:ab:40:9a:9c:3a:88:3a:5f:
74:3d:15:3b:c2:32:d7:33:89:56:fd:1e:c5:6a:87:
69:e7:c1:1f:5b:ec:99:3a:73:a0:5f:86:ac:a9:24:
20:02:2a:d0:4a:03:73:a6:42:e9:c8:06:f2:b0:ab:
f8:2e:dc:95:69:ee:bb:a9:ac:79:20:65:0d:08:75:
1d:21:d0:93:a0:9a:13:25:6d:c9:ea:d6:72:e3:41:
50:b0:ce:82:d8:e6:20:5f:5c:94:54:78:0d:76:b2:
bc:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B0:BB:E2:0C:48:1B:CE:BD:84:CC:79:07:15:77:E4:93:24:83:3E
X509v3 Authority Key Identifier:
keyid:2A:73:4E:AB:CF:B5:B6:C2:A4:E4:83:88:ED:B3:AF:8F:50:6B:1F:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:ad:69:b1:7b:03:59:1d:92:6a:4f:e3:d1:ba:68:3a:a9:69:
84:aa:18:8f:65:6c:58:1c:ca:e6:0c:99:2e:dc:d1:3d:32:a3:
c6:f9:86:ee:b5:38:8f:f4:64:82:bc:5c:41:98:91:f2:5d:6d:
f5:2d:09:36:51:ac:75:3a:37:51:04:51:f9:92:c5:fc:c7:7f:
3d:17:fe:ac:b8:ef:0a:0c:24:cc:5b:a5:80:b0:0f:e5:11:cf:
a4:c6:db:6b:25:66:47:d0:9e:b7:d0:42:4c:f8:93:1d:1d:96:
76:98:fa:ab:b6:fb:64:87:a4:8f:48:96:28:93:bf:89:48:ab:
40:a1:97:b9:cf:bb:a2:d6:ec:3b:0f:5d:be:b8:44:ff:e3:12:
93:8f:be:20:07:2d:72:81:53:14:4f:6a:2d:31:b0:f9:d8:af:
db:b9:af:11:ed:0d:6d:5b:f4:47:1e:bd:10:a1:9b:ef:4c:fc:
46:43:df:c3:4f:5c:6e:e8:df:13:ab:6a:8b:31:5e:19:22:d8:
2d:70:49:1c:47:1b:e3:98:36:61:39:34:09:5a:b0:b8:f8:ff:
98:8d:03:07:9e:9c:1c:85:b6:04:b9:02:52:27:ee:32:8b:97:
b6:77:2c:8a:d7:b4:99:d4:34:e6:06:26:2b:80:45:a0:03:a4:
ea:f0:0f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:22:26 2025 by rpki-client