Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft
File: knr31AfwRdvqgHcyZbBM5XTQt-M.mft (raw, json)
Hash identifier: tYtSs0dYbw8uXJw7dwqh34+GX2kjck1NLg4BHBA6zUM=
Subject key identifier: 02:EF:A2:BB:8F:9F:A4:FF:C4:19:4B:2F:D8:12:19:0A:0A:05:B8:7B
Authority key identifier: 92:7A:F7:D4:07:F0:45:DB:EA:80:77:32:65:B0:4C:E5:74:D0:B7:E3
Certificate issuer: /CN=927af7d407f045dbea80773265b04ce574d0b7e3
Certificate serial: 019A7149A41681DB73DB45507FF73DC51D02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knr31AfwRdvqgHcyZbBM5XTQt-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft
Manifest number: 0C17
Signing time: Tue 11 Nov 2025 05:00:42 +0000
Manifest this update: Tue 11 Nov 2025 05:00:42 +0000
Manifest next update: Wed 12 Nov 2025 05:00:42 +0000
Files and hashes: 1: ZHzFDinK1k80ggnxUxtsbupidkM.roa (hash: yg5fYgvuSW1mcbtxUsNzoaC3gDNZ2ZnNC0pEO7y0Ebs=)
2: knr31AfwRdvqgHcyZbBM5XTQt-M.crl (hash: aHscHhqiLD9i87aopEyDFu5YNCGxN3vzmHviC1BIT+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/knr31AfwRdvqgHcyZbBM5XTQt-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:a4:16:81:db:73:db:45:50:7f:f7:3d:c5:1d:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927af7d407f045dbea80773265b04ce574d0b7e3
Validity
Not Before: Nov 11 05:00:42 2025 GMT
Not After : Nov 12 05:00:42 2025 GMT
Subject: CN=02efa2bb8f9fa4ffc4194b2fd812190a0a05b87b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a2:c6:f5:07:50:cb:7a:c8:88:98:b2:5e:14:
c8:7d:d4:41:a2:b7:9c:f8:19:ff:9c:b3:29:de:f0:
1a:2c:24:04:13:10:27:64:25:f9:3d:03:ef:07:03:
8b:1c:b7:c7:8d:5a:a2:45:5a:8d:3d:9b:a7:cc:c9:
8a:cc:0c:d1:d7:9e:88:c3:6a:2e:87:b9:e4:08:e4:
76:31:63:2d:60:1c:7d:7f:3f:e9:fb:bc:ad:d4:da:
89:e5:d7:18:ba:af:71:b8:36:1d:5e:6c:2e:52:ab:
10:64:72:fb:83:b6:0b:4b:79:41:24:a6:bf:9a:b5:
92:be:b8:ad:0c:0e:e8:98:b7:20:38:30:c2:0e:9a:
c4:15:eb:2e:0e:b8:3b:ad:48:9d:9b:b4:db:a9:34:
66:09:0d:b2:0e:1c:37:bb:ae:db:0e:53:c7:06:6c:
1e:94:ad:3f:04:47:72:0f:53:94:a5:43:6e:49:e3:
e8:b8:f6:6f:82:08:f6:ca:b9:99:ed:9a:03:16:bc:
f8:88:95:d8:d4:5f:31:86:4d:ab:14:9c:66:68:16:
7d:02:3b:73:57:0a:65:3d:ce:41:3f:23:a0:d1:56:
8d:fa:fc:5f:c6:ed:58:2f:cf:c8:f5:d0:6d:99:61:
e0:8a:69:1b:c9:89:e1:56:0e:bb:4d:7a:2d:2f:2e:
84:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:EF:A2:BB:8F:9F:A4:FF:C4:19:4B:2F:D8:12:19:0A:0A:05:B8:7B
X509v3 Authority Key Identifier:
keyid:92:7A:F7:D4:07:F0:45:DB:EA:80:77:32:65:B0:4C:E5:74:D0:B7:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knr31AfwRdvqgHcyZbBM5XTQt-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:33:ba:a8:cc:7d:54:0f:bb:04:39:6f:f5:bc:7a:65:21:3c:
c5:38:e5:d9:4c:67:94:95:fe:6f:e2:5c:b7:e9:56:46:10:cd:
a9:0b:b0:2d:eb:aa:db:ae:c8:61:24:25:1f:47:b8:31:97:86:
11:48:49:c6:ab:b7:e5:36:2e:20:21:90:1c:42:7c:c4:2b:20:
4d:01:9f:88:41:af:8b:96:f1:8e:48:54:2d:96:40:3c:34:76:
7a:ad:68:12:71:88:f2:ea:03:a7:3f:38:63:d3:07:f1:f0:72:
be:17:78:48:10:a9:77:3e:af:30:6d:7e:93:8f:0a:1d:b9:9e:
25:91:31:bd:26:b7:52:88:26:c4:a8:5d:5c:b4:43:8f:e4:d7:
23:2f:97:d0:22:30:0d:33:99:64:d4:7a:54:02:79:9d:f7:68:
74:a7:e4:1f:93:36:8a:51:41:a3:7e:ee:58:93:10:07:d7:51:
02:6a:55:13:19:49:98:55:d9:e1:c0:b3:95:f0:e3:3a:18:11:
bc:8e:42:b6:7f:13:fb:32:6c:dd:1a:09:8a:8e:dd:6c:b0:94:
cb:ae:4b:61:a4:c9:c7:9c:91:3d:66:89:80:14:43:c1:6e:b0:
09:80:e9:49:59:07:b7:40:19:12:ba:d5:a4:79:1e:d9:5f:5c:
32:68:8b:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxSaQWgdtz20VQf/c9xR0CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyN2FmN2Q0MDdmMDQ1ZGJlYTgwNzczMjY1YjA0Y2U1NzRk
MGI3ZTMwHhcNMjUxMTExMDUwMDQyWhcNMjUxMTEyMDUwMDQyWjAzMTEwLwYDVQQD
EygwMmVmYTJiYjhmOWZhNGZmYzQxOTRiMmZkODEyMTkwYTBhMDViODdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKLG9QdQy3rIiJiyXhTIfdRBorec
+Bn/nLMp3vAaLCQEExAnZCX5PQPvBwOLHLfHjVqiRVqNPZunzMmKzAzR156Iw2ou
h7nkCOR2MWMtYBx9fz/p+7yt1NqJ5dcYuq9xuDYdXmwuUqsQZHL7g7YLS3lBJKa/
mrWSvritDA7omLcgODDCDprEFesuDrg7rUidm7TbqTRmCQ2yDhw3u67bDlPHBmwe
lK0/BEdyD1OUpUNuSePouPZvggj2yrmZ7ZoDFrz4iJXY1F8xhk2rFJxmaBZ9Ajtz
VwplPc5BPyOg0VaN+vxfxu1YL8/I9dBtmWHgimkbyYnhVg67TXotLy6E6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFALvoruPn6T/xBlLL9gSGQoKBbh7MB8GA1UdIwQY
MBaAFJJ699QH8EXb6oB3MmWwTOV00LfjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva25yMzFBZndSZHZxZ0hjeVpiQk01WFRRdC1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC82ZDVlMjktYWY2ZS00YzhjLWIwYWQt
NTE2ZTBiMzBlYjEwLzEva25yMzFBZndSZHZxZ0hjeVpiQk01WFRRdC1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC82ZDVlMjktYWY2ZS00YzhjLWIwYWQtNTE2ZTBiMzBlYjEw
LzEva25yMzFBZndSZHZxZ0hjeVpiQk01WFRRdC1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwTO6qMx9
VA+7BDlv9bx6ZSE8xTjl2UxnlJX+b+Jct+lWRhDNqQuwLeuq267IYSQlH0e4MZeG
EUhJxqu35TYuICGQHEJ8xCsgTQGfiEGvi5bxjkhULZZAPDR2eq1oEnGI8uoDpz84
Y9MH8fByvhd4SBCpdz6vMG1+k48KHbmeJZExvSa3UogmxKhdXLRDj+TXIy+X0CIw
DTOZZNR6VAJ5nfdodKfkH5M2ilFBo37uWJMQB9dRAmpVExlJmFXZ4cCzlfDjOhgR
vI5Ctn8T+zJs3RoJio7dbLCUy65LYaTJx5yRPWaJgBRDwW6wCYDpSVkHt0AZErrV
pHke2V9cMmiLpQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:27 2025 by rpki-client