Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.mft
File: knpH10d_JWifZNBks-yglkfozqI.mft (raw, json)
Hash identifier: w+E++Bl7rEro6RQJX/yXKKOTKqytHFTOkUvaGNMPcLU=
Subject key identifier: 57:D1:E8:73:FE:97:16:01:0A:B5:C8:13:46:57:9E:95:D9:7C:B3:2E
Authority key identifier: 92:7A:47:D7:47:7F:25:68:9F:64:D0:64:B3:EC:A0:96:47:E8:CE:A2
Certificate issuer: /CN=927a47d7477f25689f64d064b3eca09647e8cea2
Certificate serial: 01987D8ABAB11789366F70638C2F7C178A9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knpH10d_JWifZNBks-yglkfozqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.mft
Manifest number: 111A
Signing time: Wed 06 Aug 2025 04:01:40 +0000
Manifest this update: Wed 06 Aug 2025 04:01:40 +0000
Manifest next update: Thu 07 Aug 2025 04:01:40 +0000
Files and hashes: 1: Lb4_w3xo3b2R5NUCynuhYVfd8F0.roa (hash: InJIfmRDJ+fA/aUu2uO9nwQjhMlW3TmyfkS552qt2Xg=)
2: knpH10d_JWifZNBks-yglkfozqI.crl (hash: YLRISLaFNDD4YVqDlM9mHb51Ioq89Qmh0ZZ+5gS2XFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/knpH10d_JWifZNBks-yglkfozqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8a:ba:b1:17:89:36:6f:70:63:8c:2f:7c:17:8a:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927a47d7477f25689f64d064b3eca09647e8cea2
Validity
Not Before: Aug 6 04:01:40 2025 GMT
Not After : Aug 7 04:01:40 2025 GMT
Subject: CN=57d1e873fe9716010ab5c81346579e95d97cb32e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a4:a3:01:3c:24:fe:1a:fa:86:0c:12:51:ec:
84:d1:92:8c:a1:88:18:fe:32:43:65:b9:b2:dd:96:
f4:4b:66:a2:0c:4f:4e:fa:a5:fb:4a:89:79:ce:85:
ec:8a:ec:68:2e:1b:9d:37:a2:6c:ce:af:38:0a:f0:
13:79:77:16:5a:dd:bd:4f:22:e3:45:38:31:29:07:
7f:3a:d8:54:db:36:00:80:46:67:d3:4b:00:a2:23:
0e:4c:86:ae:1e:c8:62:f3:7d:0b:d5:11:ba:15:21:
a4:80:35:99:ca:41:0d:6e:f5:98:7e:90:e1:ac:4e:
2c:38:7e:fb:35:02:7a:4f:88:a0:46:85:30:eb:2e:
ec:9d:b1:43:ef:de:cc:dc:4f:31:6d:3b:6f:c6:fd:
32:7f:02:0e:d8:44:68:be:84:46:16:89:ae:fd:40:
b2:6c:9b:a0:d2:96:83:ad:f2:1e:5e:33:d0:e2:f3:
9f:27:6f:88:34:37:c2:bb:a0:6c:58:16:3c:ab:0b:
cb:5e:54:24:3f:4f:70:9c:af:35:57:93:08:47:09:
1c:32:23:a1:97:e8:64:ba:73:8e:7e:02:69:dd:f0:
61:af:f0:fa:b1:03:7c:bb:a2:b2:b5:5a:61:c2:66:
53:a6:0c:45:a8:e0:e8:0e:f3:d5:86:4d:00:09:93:
2a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D1:E8:73:FE:97:16:01:0A:B5:C8:13:46:57:9E:95:D9:7C:B3:2E
X509v3 Authority Key Identifier:
keyid:92:7A:47:D7:47:7F:25:68:9F:64:D0:64:B3:EC:A0:96:47:E8:CE:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knpH10d_JWifZNBks-yglkfozqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:5e:62:30:cd:93:e3:14:49:d8:98:ab:b6:0f:00:27:3b:3c:
c5:63:20:0a:0b:41:4a:43:55:77:f8:1d:f4:07:ef:ac:90:7d:
ca:09:fc:0e:76:2e:09:02:31:c1:a1:06:f5:0a:a8:60:17:62:
ec:94:a5:b3:94:c3:4f:bf:0d:48:60:14:33:32:6a:cf:bf:11:
36:cf:a8:ce:98:ef:6c:03:bd:33:3c:60:0b:d3:76:0f:bc:e1:
1b:69:3f:14:d7:98:d1:f9:67:10:76:bd:7d:eb:05:52:e1:93:
82:c8:11:4e:fe:75:96:7a:b4:ae:07:7e:79:f8:6e:ce:db:c4:
a5:50:71:72:e4:79:98:58:33:08:c8:3f:1e:b2:fe:8b:8d:e2:
e0:8a:6e:8f:c3:f8:0e:66:f2:65:fc:1c:e5:34:b0:90:bc:27:
ca:0f:12:5a:36:6c:d8:86:4d:bf:a7:c4:73:05:a5:16:a4:a1:
8f:97:34:27:22:2d:4c:24:e8:3d:78:26:0a:64:72:a4:71:45:
ff:88:08:8c:04:da:f6:c1:87:1b:b7:1d:72:ed:20:a5:6d:b2:
b4:27:27:97:af:c8:4e:11:3d:9f:8c:f9:a5:38:42:29:80:6a:
f2:14:11:9e:b6:c4:3a:5f:f3:a6:52:72:bf:14:71:c9:57:c3:
2b:e4:1a:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh9irqxF4k2b3BjjC98F4qbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyN2E0N2Q3NDc3ZjI1Njg5ZjY0ZDA2NGIzZWNhMDk2NDdl
OGNlYTIwHhcNMjUwODA2MDQwMTQwWhcNMjUwODA3MDQwMTQwWjAzMTEwLwYDVQQD
Eyg1N2QxZTg3M2ZlOTcxNjAxMGFiNWM4MTM0NjU3OWU5NWQ5N2NiMzJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqSjATwk/hr6hgwSUeyE0ZKMoYgY
/jJDZbmy3Zb0S2aiDE9O+qX7Sol5zoXsiuxoLhudN6Jszq84CvATeXcWWt29TyLj
RTgxKQd/OthU2zYAgEZn00sAoiMOTIauHshi830L1RG6FSGkgDWZykENbvWYfpDh
rE4sOH77NQJ6T4igRoUw6y7snbFD797M3E8xbTtvxv0yfwIO2ERovoRGFomu/UCy
bJug0paDrfIeXjPQ4vOfJ2+INDfCu6BsWBY8qwvLXlQkP09wnK81V5MIRwkcMiOh
l+hkunOOfgJp3fBhr/D6sQN8u6KytVphwmZTpgxFqODoDvPVhk0ACZMqaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFfR6HP+lxYBCrXIE0ZXnpXZfLMuMB8GA1UdIwQY
MBaAFJJ6R9dHfyVon2TQZLPsoJZH6M6iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva25wSDEwZF9KV2lmWk5Ca3MteWdsa2ZvenFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9iOGM2ODctYTIzZC00N2IwLTg0NjIt
OTMyNTIwMTRjY2Y4LzEva25wSDEwZF9KV2lmWk5Ca3MteWdsa2ZvenFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9iOGM2ODctYTIzZC00N2IwLTg0NjItOTMyNTIwMTRjY2Y4
LzEva25wSDEwZF9KV2lmWk5Ca3MteWdsa2ZvenFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAil5iMM2T
4xRJ2Jirtg8AJzs8xWMgCgtBSkNVd/gd9AfvrJB9ygn8DnYuCQIxwaEG9QqoYBdi
7JSls5TDT78NSGAUMzJqz78RNs+ozpjvbAO9MzxgC9N2D7zhG2k/FNeY0flnEHa9
fesFUuGTgsgRTv51lnq0rgd+efhuztvEpVBxcuR5mFgzCMg/HrL+i43i4Ipuj8P4
DmbyZfwc5TSwkLwnyg8SWjZs2IZNv6fEcwWlFqShj5c0JyItTCToPXgmCmRypHFF
/4gIjATa9sGHG7cdcu0gpW2ytCcnl6/IThE9n4z5pThCKYBq8hQRnrbEOl/zplJy
vxRxyVfDK+QaRw==
-----END CERTIFICATE-----
Generated at Wed Aug 6 10:57:12 2025 by rpki-client