Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
File: KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft (raw, json)
Hash identifier: rSNPpXs7DK+ZrgmhqiTy8Em/j/SGcWW0gFL0/eS4m78=
Subject key identifier: 7F:DE:EE:34:B9:73:6E:07:6A:0F:BC:F2:29:41:17:58:D0:08:D2:0B
Authority key identifier: 2A:73:4E:AB:CF:B5:B6:C2:A4:E4:83:88:ED:B3:AF:8F:50:6B:1F:AB
Certificate issuer: /CN=2a734eabcfb5b6c2a4e48388edb3af8f506b1fab
Certificate serial: 019778D3A8E5C26F34C6D3DB9C11CD03C12B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
Manifest number: 1596
Signing time: Mon 16 Jun 2025 13:00:26 +0000
Manifest this update: Mon 16 Jun 2025 13:00:26 +0000
Manifest next update: Tue 17 Jun 2025 13:00:26 +0000
Files and hashes: 1: KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl (hash: 3FRqVtO8CkcgpfArOixoTb+tO8WluDVNT0LX/6rbEv8=)
2: cjk16MmGa9VAbHsgngJUOkSp08A.roa (hash: vjUqfCV04EKTU6LoX8huXEuT5umrktch7/fsTB3KR0w=)
3: k2Uppl8G01BcsH3g3-MinVDILtU.roa (hash: lp7j+Bb3bbdsfLwcfqn/iR6o1CoScaVkVKl5uGRp5+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 13:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:d3:a8:e5:c2:6f:34:c6:d3:db:9c:11:cd:03:c1:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a734eabcfb5b6c2a4e48388edb3af8f506b1fab
Validity
Not Before: Jun 16 13:00:26 2025 GMT
Not After : Jun 17 13:00:26 2025 GMT
Subject: CN=7fdeee34b9736e076a0fbcf229411758d008d20b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c5:5f:22:27:02:39:cf:52:c6:dc:6d:53:71:
b3:9e:bb:d8:28:22:31:df:95:32:ad:0d:98:b2:b3:
d5:b9:ee:c8:ec:51:e1:c1:4e:6c:84:62:e5:ff:a5:
06:4c:6a:b3:db:f5:8c:da:03:f9:50:55:c4:af:61:
2f:73:b6:71:20:e1:0d:af:b2:c9:1e:e5:95:a6:5b:
fe:88:23:ac:c6:cb:a6:1c:be:35:ff:4e:b3:df:c8:
50:ab:5b:b4:e0:a4:dc:5a:64:ac:d9:71:f6:44:ba:
ae:4c:21:6c:d1:31:37:1d:61:5e:9c:42:63:90:65:
4c:b7:b2:a5:cb:e5:3b:20:09:38:19:5a:16:3b:8a:
ea:62:9c:45:27:9d:74:53:5e:82:10:da:6d:ab:ae:
9f:f5:54:77:d2:8c:70:8e:42:20:e2:07:2e:34:4e:
99:5d:4e:75:ab:3e:10:04:9d:3a:1e:d7:65:29:d5:
18:7e:6d:b6:d4:70:1d:7c:d5:e4:9b:3b:a1:a5:cf:
3f:da:ff:72:1a:19:62:9b:bf:48:b5:86:59:00:f5:
4d:c5:9d:6e:32:5c:4e:dc:be:76:81:bf:66:22:6c:
64:33:08:49:42:37:e7:4f:9f:a8:f2:ce:38:52:6f:
11:c4:7e:ae:8a:7e:5f:99:b2:27:38:db:41:13:62:
36:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:DE:EE:34:B9:73:6E:07:6A:0F:BC:F2:29:41:17:58:D0:08:D2:0B
X509v3 Authority Key Identifier:
keyid:2A:73:4E:AB:CF:B5:B6:C2:A4:E4:83:88:ED:B3:AF:8F:50:6B:1F:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:da:71:43:68:b4:48:7e:e2:54:fc:c1:e5:ad:75:a8:68:d3:
3b:1e:33:9a:d6:c4:b0:f1:dc:bb:9d:70:56:f0:06:a4:91:3b:
95:5f:31:e2:1d:7c:2d:bf:9d:2b:09:0a:1c:87:69:23:20:d1:
30:ab:e3:56:fb:24:af:9d:76:75:06:ee:f7:d1:74:cf:2c:9a:
fa:49:77:b0:da:17:55:36:a5:f1:2d:4e:7f:e6:d9:4f:f3:e3:
df:54:ac:60:04:b9:d6:ac:06:8e:00:c9:5f:ab:c9:b4:e4:81:
1c:b2:a9:b4:ba:fe:78:9f:b4:24:71:0e:d3:6d:5e:0c:75:28:
2a:cd:67:d5:43:df:92:7f:d2:99:c5:4a:e0:72:93:0f:fa:83:
0d:26:1f:a0:06:20:41:99:41:9f:87:a9:d5:2b:20:9f:bf:47:
bf:82:4f:aa:b2:1e:3d:19:34:26:67:94:b5:7f:93:7d:d6:7c:
b3:a5:a0:9c:3f:0c:74:a4:1d:a5:e2:a0:af:b5:d6:35:33:de:
fc:58:84:c7:98:b6:21:21:78:20:cd:fe:72:83:38:3d:23:0f:
20:86:a7:41:af:9f:b0:7a:73:b0:69:46:60:cf:e9:53:90:7f:
1b:56:4c:cd:36:af:b8:c5:ee:f7:dc:6d:33:a8:9b:86:f0:0a:
a8:c6:3b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 20:26:54 2025 by rpki-client