Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft
File: knr31AfwRdvqgHcyZbBM5XTQt-M.mft (raw, json)
Hash identifier: ejE9Il6xxFWnTSApx48Qenvf2uHfYIwCx1aeZNe6CSw=
Subject key identifier: A6:69:8C:E1:67:58:22:2E:FC:04:08:38:05:BD:1B:F0:EA:A1:94:4A
Authority key identifier: 92:7A:F7:D4:07:F0:45:DB:EA:80:77:32:65:B0:4C:E5:74:D0:B7:E3
Certificate issuer: /CN=927af7d407f045dbea80773265b04ce574d0b7e3
Certificate serial: 01974A0CC25F8BAF6A1CA5A6B7F54F0C6495
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knr31AfwRdvqgHcyZbBM5XTQt-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft
Manifest number: 0A75
Signing time: Sat 07 Jun 2025 11:00:39 +0000
Manifest this update: Sat 07 Jun 2025 11:00:39 +0000
Manifest next update: Sun 08 Jun 2025 11:00:39 +0000
Files and hashes: 1: ZHzFDinK1k80ggnxUxtsbupidkM.roa (hash: yg5fYgvuSW1mcbtxUsNzoaC3gDNZ2ZnNC0pEO7y0Ebs=)
2: knr31AfwRdvqgHcyZbBM5XTQt-M.crl (hash: b70Tcqp+gZdz7j0xV5iLg4QuD9KUuMIgm9U3zz4KGa8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/knr31AfwRdvqgHcyZbBM5XTQt-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:c2:5f:8b:af:6a:1c:a5:a6:b7:f5:4f:0c:64:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927af7d407f045dbea80773265b04ce574d0b7e3
Validity
Not Before: Jun 7 11:00:39 2025 GMT
Not After : Jun 8 11:00:39 2025 GMT
Subject: CN=a6698ce16758222efc04083805bd1bf0eaa1944a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bc:35:c9:b9:7a:97:0f:b3:1a:0d:67:e6:47:
a5:32:68:88:fe:72:ce:e0:8d:3c:de:09:a3:1e:77:
cc:4f:98:1e:b9:5f:c7:be:64:dd:88:6b:c0:64:8c:
af:e5:c2:1e:0f:3c:3e:9d:12:39:7b:21:10:cc:90:
a5:20:76:d9:f1:72:d8:da:21:2b:89:5a:d5:e9:68:
ae:87:41:7c:58:8c:49:45:7e:60:df:47:2d:04:17:
b8:37:0c:80:73:40:56:95:2b:4e:5c:c6:b0:c2:fa:
35:3a:5f:36:e8:fa:ba:4c:01:0d:07:4e:14:2d:1b:
3c:65:20:fb:a3:99:3e:a7:8a:59:eb:8d:98:d5:95:
97:f7:17:23:8d:76:8f:4e:f0:e8:44:75:24:07:62:
dd:71:75:c0:1e:88:e0:fb:3a:6f:8a:a8:e9:f6:c6:
38:0f:e7:1e:6a:73:b0:44:a2:da:9c:e9:31:64:b3:
92:15:d1:ce:83:ab:b3:ff:cb:5d:1d:ad:6e:cd:bf:
f5:32:40:e7:3d:d6:f5:a0:82:e2:fc:98:8b:d3:8d:
f4:cd:f7:24:ec:31:20:d8:c2:08:ac:d5:62:f8:43:
e5:59:0e:ab:ee:a8:36:7a:33:17:c0:ee:d7:a0:a2:
32:0f:30:af:06:6c:ea:80:09:43:12:47:12:67:d3:
a5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:69:8C:E1:67:58:22:2E:FC:04:08:38:05:BD:1B:F0:EA:A1:94:4A
X509v3 Authority Key Identifier:
keyid:92:7A:F7:D4:07:F0:45:DB:EA:80:77:32:65:B0:4C:E5:74:D0:B7:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knr31AfwRdvqgHcyZbBM5XTQt-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:f7:e3:85:3c:d9:07:f5:82:ea:7a:e7:de:c2:2b:33:dd:3f:
1e:ff:a7:5c:43:3d:40:4f:0d:5f:4f:11:f6:8b:9c:2f:49:0d:
03:d3:f8:b1:34:a1:0f:e3:15:d9:e1:a4:ae:b9:62:25:fa:15:
1b:45:f2:61:4e:62:45:d7:bf:79:c0:7a:20:e9:a7:b7:de:b4:
ff:51:b5:46:49:7f:4e:19:06:6a:4d:3c:57:e7:78:cd:0c:c9:
de:e4:7c:0a:bd:89:11:55:d5:16:3c:c1:0c:80:c5:08:9e:a9:
49:1c:f6:d5:ef:80:e1:17:a6:bc:df:e2:34:23:01:19:17:b2:
3c:b0:85:d7:4a:b2:33:cc:cd:5d:d9:0c:76:05:4d:14:ea:f6:
d4:b6:3d:d9:81:5c:c3:43:3c:dc:c2:65:aa:1d:57:d4:ce:f9:
ae:7a:74:63:76:13:22:14:28:98:af:a9:46:23:38:32:3e:f1:
e1:53:09:9a:ea:d2:3b:6f:75:4e:59:e3:37:ee:e4:0e:f7:1d:
f4:eb:82:09:b7:2b:9b:76:5c:7d:41:c8:c4:1c:e5:5c:cd:2d:
84:36:49:62:e5:7f:4d:bd:56:d5:52:cd:a8:08:68:ed:7f:7f:
1b:5b:bd:bb:ac:6f:16:3b:cc:06:54:6a:1f:bd:fb:b4:64:f1:
b7:33:d3:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:11:35 2025 by rpki-client