Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft
File: knr31AfwRdvqgHcyZbBM5XTQt-M.mft (raw, json)
Hash identifier: uGdVECbmSjMFOe0OS74tfFjS+l/ucOFwXb7kNwCx2Jc=
Subject key identifier: 8B:46:05:44:BD:81:DD:51:A3:A5:5E:DC:D6:68:2D:1A:85:2C:7E:83
Authority key identifier: 92:7A:F7:D4:07:F0:45:DB:EA:80:77:32:65:B0:4C:E5:74:D0:B7:E3
Certificate issuer: /CN=927af7d407f045dbea80773265b04ce574d0b7e3
Certificate serial: 019848F70A425B8856F5782B47FD30CCCB47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knr31AfwRdvqgHcyZbBM5XTQt-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft
Manifest number: 0AF9
Signing time: Sat 26 Jul 2025 23:00:06 +0000
Manifest this update: Sat 26 Jul 2025 23:00:06 +0000
Manifest next update: Sun 27 Jul 2025 23:00:06 +0000
Files and hashes: 1: ZHzFDinK1k80ggnxUxtsbupidkM.roa (hash: yg5fYgvuSW1mcbtxUsNzoaC3gDNZ2ZnNC0pEO7y0Ebs=)
2: knr31AfwRdvqgHcyZbBM5XTQt-M.crl (hash: TKoSHBy5HH6PFCwMVbpPkE0pZHTz2BGMQSGumLHNKqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/knr31AfwRdvqgHcyZbBM5XTQt-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:0a:42:5b:88:56:f5:78:2b:47:fd:30:cc:cb:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927af7d407f045dbea80773265b04ce574d0b7e3
Validity
Not Before: Jul 26 23:00:06 2025 GMT
Not After : Jul 27 23:00:06 2025 GMT
Subject: CN=8b460544bd81dd51a3a55edcd6682d1a852c7e83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4f:96:30:d4:e7:e7:22:88:72:2a:e9:57:e6:
52:f1:c0:d8:03:47:57:a0:e5:30:14:82:35:4f:32:
10:81:2c:58:96:ff:17:64:34:88:b4:e7:92:a9:6a:
27:58:ed:a0:4b:30:8c:7a:29:9b:f1:aa:1e:a2:0a:
cb:71:86:a7:91:80:ee:35:5b:c4:01:6d:5b:fa:f1:
4f:f5:34:6f:cb:cc:45:eb:26:28:74:dd:b9:6b:30:
3f:f1:60:f3:cd:70:2a:85:74:6e:fd:13:10:93:ae:
c4:3c:ac:05:4f:5e:7f:5e:ec:83:69:1a:c4:b1:f9:
13:45:62:13:8c:bb:9b:47:53:52:97:13:b8:1c:61:
9e:31:14:ae:23:27:6f:c8:21:80:7e:02:80:9e:4a:
c3:5f:fc:f5:ec:d4:f3:09:d9:15:04:96:6e:7a:5b:
ec:0b:fc:c5:ab:3e:0c:98:92:8f:ee:2f:4f:3b:ad:
8b:11:fe:24:c1:0b:5d:ae:ee:8d:3c:7a:09:46:26:
73:29:ad:fe:28:04:ec:37:d6:ea:2d:ab:31:dc:57:
b9:bf:14:3d:a8:0d:35:f0:06:ad:8c:d8:96:16:64:
c1:a2:1c:b1:f3:bf:46:54:c4:68:e3:9b:1e:54:75:
08:53:fa:6f:30:74:22:37:dc:35:e1:c1:c0:b2:f5:
c0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:46:05:44:BD:81:DD:51:A3:A5:5E:DC:D6:68:2D:1A:85:2C:7E:83
X509v3 Authority Key Identifier:
keyid:92:7A:F7:D4:07:F0:45:DB:EA:80:77:32:65:B0:4C:E5:74:D0:B7:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knr31AfwRdvqgHcyZbBM5XTQt-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:40:48:55:5c:42:bd:d6:31:03:19:02:26:2e:e0:76:13:48:
f7:44:da:93:e5:61:35:5d:dd:17:03:fb:27:f0:af:d9:16:a3:
c2:e9:06:b0:56:7d:1a:48:ed:9f:b3:08:18:0a:b2:2e:9f:dc:
1c:46:28:1c:4f:6f:5c:0c:c0:e5:6b:9b:84:bb:1a:86:10:b1:
59:6d:f5:16:d8:bf:78:c3:ad:7c:3c:27:5a:db:d3:04:c3:bf:
4e:ab:b4:b5:44:38:3f:5c:81:b6:bb:4c:4a:c3:d8:c9:b8:b3:
c4:59:24:d6:bc:6c:c4:92:5d:8b:09:20:c1:32:60:db:ac:24:
d0:e3:f1:07:00:ab:9e:8f:f2:f5:b2:7f:b4:ba:8d:a7:fc:31:
c4:83:f1:77:52:82:b0:31:3a:2b:be:7d:18:c9:2d:fd:40:d9:
2c:60:a9:50:40:ba:eb:d7:fb:80:d2:dd:99:17:8a:47:0c:bf:
6d:7d:39:39:05:76:58:0d:82:4f:2a:aa:43:2a:7b:fe:3c:17:
47:bc:86:fe:00:af:14:ea:d9:0e:81:50:47:e2:44:d2:12:94:
d2:20:6b:1a:4a:dc:42:da:d7:42:46:3d:6d:0f:33:d0:e6:ad:
fe:85:62:ab:3b:a5:74:29:48:88:b8:b8:96:ac:38:03:fe:37:
f9:30:ca:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:46:39 2025 by rpki-client