Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.mft
File: knp_OqYbIkEYI14yAR7ey-P2pkk.mft (raw, json)
Hash identifier: EK4eoY9Sxj3Rcw7WOuRSJaQUC/ZKdvhihmK3/R0QyRw=
Subject key identifier: C6:56:38:33:E7:04:D6:66:A8:AA:E9:BB:0D:02:2E:FC:F2:91:9D:06
Authority key identifier: 92:7A:7F:3A:A6:1B:22:41:18:23:5E:32:01:1E:DE:CB:E3:F6:A6:49
Certificate issuer: /CN=927a7f3aa61b224118235e32011edecbe3f6a649
Certificate serial: 019854570936C744FA4BDBC1551FFFA71531
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knp_OqYbIkEYI14yAR7ey-P2pkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.mft
Manifest number: 01AF
Signing time: Tue 29 Jul 2025 04:00:46 +0000
Manifest this update: Tue 29 Jul 2025 04:00:46 +0000
Manifest next update: Wed 30 Jul 2025 04:00:46 +0000
Files and hashes: 1: 2lpFexxe3_Ac4dcdM3bYGAow3NU.roa (hash: p5V0q0cPZ8lwGeilVxXZ3Q9iOjoW9+XEWeFjk4FsqTc=)
2: knp_OqYbIkEYI14yAR7ey-P2pkk.crl (hash: ijtg3Oqf8HYfF3/tyR0krxbqSdb88+alJkN8ktUnLJ4=)
3: vvR3iZhxksZaf5ZtlUFG8sHgTwA.roa (hash: brocX5Nu7+UsTDQrzkSzsbDZjaym0Lw9E9mvwUm3aco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/knp_OqYbIkEYI14yAR7ey-P2pkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 04:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:57:09:36:c7:44:fa:4b:db:c1:55:1f:ff:a7:15:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927a7f3aa61b224118235e32011edecbe3f6a649
Validity
Not Before: Jul 29 04:00:46 2025 GMT
Not After : Jul 30 04:00:46 2025 GMT
Subject: CN=c6563833e704d666a8aae9bb0d022efcf2919d06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:f1:ca:3b:ef:79:53:69:2c:bc:73:86:0d:0c:
c2:29:15:75:c9:37:e3:46:7f:a1:b7:bb:b5:4e:86:
0f:c6:aa:1c:c7:e3:76:d3:c7:ef:c8:70:c6:8a:37:
28:6f:a1:3f:cf:7b:72:78:9b:fe:dd:cf:60:61:6c:
68:df:38:9d:5a:76:81:d7:65:e4:cf:c9:95:8f:e1:
8f:29:03:ba:f0:53:fa:cd:21:1d:89:ba:82:fa:15:
13:8d:ae:a4:60:9c:9d:9a:19:4b:51:8c:d1:e1:7d:
74:d6:cc:75:b3:90:f2:07:99:e4:b8:ee:66:1c:b4:
83:dc:91:ae:45:af:c1:46:69:4d:c4:56:04:54:43:
f4:95:64:da:71:12:fc:71:6c:1a:29:6d:05:db:ec:
76:20:eb:f8:b8:c5:b7:35:2c:f5:7c:7f:c2:5b:e6:
bc:93:8d:23:b5:52:fa:55:6c:fd:73:8b:50:d7:a9:
1b:2e:2f:dd:63:3b:3f:f9:24:7b:5e:ba:a4:55:48:
df:f6:1c:72:3a:8b:63:11:a0:ba:61:e9:7a:53:18:
b9:bf:01:07:11:12:e4:99:20:45:a7:5d:d6:c0:24:
03:57:6b:86:e9:2e:6d:1c:c5:63:bb:88:87:51:53:
a4:dd:e6:47:16:32:89:89:1b:0b:78:4c:42:e4:ba:
82:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:56:38:33:E7:04:D6:66:A8:AA:E9:BB:0D:02:2E:FC:F2:91:9D:06
X509v3 Authority Key Identifier:
keyid:92:7A:7F:3A:A6:1B:22:41:18:23:5E:32:01:1E:DE:CB:E3:F6:A6:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knp_OqYbIkEYI14yAR7ey-P2pkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:fb:0a:98:69:38:fd:92:75:dc:20:a0:be:00:4a:a9:f3:09:
92:a9:96:82:17:58:e3:b1:25:59:66:8b:1d:f0:e9:0e:2b:0f:
97:b7:76:18:d8:d7:26:52:19:24:8a:2e:36:01:12:2b:50:1b:
3c:3e:fa:c0:df:1d:f6:37:cb:9f:13:53:ed:35:75:c6:3d:5b:
eb:3e:0e:b0:b7:3a:f1:43:df:cf:be:65:e0:7d:18:09:9b:d5:
ed:43:e1:e3:45:44:6f:07:87:fc:f0:f7:ee:58:5f:a5:53:da:
b6:bd:9f:b4:c3:e1:75:06:c4:41:56:e1:ee:a8:9f:7c:45:62:
a1:5d:d3:0b:e9:d8:9f:53:9a:11:f1:e1:35:3a:a4:3a:82:bf:
ed:ac:8a:16:e4:36:2c:01:8a:b9:66:de:1c:30:f8:b4:94:16:
99:80:ec:8a:93:c6:6f:75:16:3a:46:3c:99:56:4c:fc:c6:bd:
f4:0b:1f:a0:89:9c:e0:3c:69:9e:7d:59:07:26:f6:84:2f:81:
d3:b5:33:5b:d2:89:33:56:ea:9f:0f:12:b1:04:55:98:e1:04:
96:b4:4a:60:9c:13:5f:b7:17:2d:5e:c8:17:1d:cc:bb:4e:58:
bf:3c:06:d4:8c:e2:48:fb:4b:b1:28:93:c8:c9:8d:91:9c:dc:
9a:54:d7:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 13:09:59 2025 by rpki-client