Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.mft
File: knp_OqYbIkEYI14yAR7ey-P2pkk.mft (raw, json)
Hash identifier: mPzuHfh22pqygPq1JN8UQhwbImaR8wrPep/cIw02w9Y=
Subject key identifier: 5A:E8:E3:EB:FD:4A:E3:FC:3A:E4:31:55:33:CD:E1:5D:A2:65:A6:5F
Authority key identifier: 92:7A:7F:3A:A6:1B:22:41:18:23:5E:32:01:1E:DE:CB:E3:F6:A6:49
Certificate issuer: /CN=927a7f3aa61b224118235e32011edecbe3f6a649
Certificate serial: 019A7301226A9447DD424186C3D23092B420
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knp_OqYbIkEYI14yAR7ey-P2pkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.mft
Manifest number: 02C8
Signing time: Tue 11 Nov 2025 13:00:45 +0000
Manifest this update: Tue 11 Nov 2025 13:00:45 +0000
Manifest next update: Wed 12 Nov 2025 13:00:45 +0000
Files and hashes: 1: 2lpFexxe3_Ac4dcdM3bYGAow3NU.roa (hash: p5V0q0cPZ8lwGeilVxXZ3Q9iOjoW9+XEWeFjk4FsqTc=)
2: knp_OqYbIkEYI14yAR7ey-P2pkk.crl (hash: YVY/aGx7jW7RW0sarhKkbotzR2geZQtlzCmUBLkLAlk=)
3: vvR3iZhxksZaf5ZtlUFG8sHgTwA.roa (hash: brocX5Nu7+UsTDQrzkSzsbDZjaym0Lw9E9mvwUm3aco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/knp_OqYbIkEYI14yAR7ey-P2pkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:22:6a:94:47:dd:42:41:86:c3:d2:30:92:b4:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927a7f3aa61b224118235e32011edecbe3f6a649
Validity
Not Before: Nov 11 13:00:45 2025 GMT
Not After : Nov 12 13:00:45 2025 GMT
Subject: CN=5ae8e3ebfd4ae3fc3ae4315533cde15da265a65f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2c:93:72:68:4b:4c:16:35:2b:97:ad:4d:dd:
03:fe:24:14:be:06:e4:f1:b9:f3:eb:a0:ff:38:97:
67:b0:7c:e8:16:db:f8:a7:a9:76:0f:3f:25:87:69:
8b:92:3b:b4:45:ae:18:74:43:c4:83:be:fa:ae:77:
ae:af:cf:f5:df:9e:97:30:c2:af:66:1a:84:81:9f:
f4:12:b1:f3:45:a9:c7:f5:a9:20:a8:26:20:8f:aa:
7f:40:0a:1a:77:6a:dd:79:06:f4:3c:f1:66:5f:c6:
1b:bd:78:64:92:7c:65:a3:5a:00:1e:ea:ff:85:9b:
f3:91:ad:24:2e:13:bf:4a:f3:ce:bf:c1:6d:5e:ed:
6c:37:aa:fa:71:99:0e:aa:e1:0c:24:d8:27:5e:58:
dd:de:7d:25:45:40:84:97:6b:20:62:5d:2b:97:e1:
52:58:ca:65:f1:4b:8e:72:30:e6:13:64:3b:e1:ef:
5f:68:d7:c5:8d:23:17:92:f6:13:fa:23:45:55:d2:
16:16:d0:7c:bd:13:0a:97:31:74:71:21:c7:b3:c0:
88:d5:a9:7b:9b:c3:2e:96:c5:ef:ae:b6:53:48:b4:
2b:83:0a:aa:13:38:75:13:41:03:78:31:21:bf:b2:
84:23:ca:36:a0:1e:de:83:54:53:70:90:68:79:d3:
70:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E8:E3:EB:FD:4A:E3:FC:3A:E4:31:55:33:CD:E1:5D:A2:65:A6:5F
X509v3 Authority Key Identifier:
keyid:92:7A:7F:3A:A6:1B:22:41:18:23:5E:32:01:1E:DE:CB:E3:F6:A6:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knp_OqYbIkEYI14yAR7ey-P2pkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:c5:6e:e3:ee:98:65:3e:40:da:9d:5c:f9:5f:54:82:2d:33:
1e:c8:9e:e2:b6:a4:f4:03:cd:29:cb:03:f4:04:dc:d1:f1:da:
d9:f5:1c:6b:b1:98:28:63:62:56:f1:9e:ba:5b:1d:8e:c4:fc:
b5:1d:21:07:4f:58:ab:4f:1b:f0:28:97:3b:1f:4d:49:70:f2:
0d:84:f8:6a:df:00:60:19:f9:d2:dc:0f:1b:e2:f4:cb:c9:e6:
b5:9b:8e:c7:57:f8:a1:a4:da:01:bb:40:8a:04:0d:f6:f5:9f:
01:97:58:06:38:b2:5c:59:93:68:56:78:05:94:2b:61:b6:aa:
20:fa:9d:65:d3:f5:d0:eb:cf:2c:b3:ee:6e:30:55:f1:88:06:
a3:d6:d4:8c:1a:fe:5e:cd:1b:cf:2c:1c:fe:bd:f6:98:1e:a9:
49:25:11:2d:52:35:b2:63:92:7b:77:2e:f0:eb:b7:8c:bf:d8:
3b:f5:4c:08:a5:1b:01:9a:2f:ed:15:d9:b7:12:5c:22:1a:33:
83:72:48:58:40:ab:0e:86:57:1c:48:8f:59:d7:6f:a7:f5:74:
6e:26:91:09:83:41:71:d6:36:e8:f0:43:5c:e4:0d:50:49:29:
64:e3:f4:ec:80:95:47:dc:a3:e9:0b:43:cb:c0:fe:27:bc:ea:
e8:f9:cf:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:45:13 2025 by rpki-client