Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.mft
File: knp_OqYbIkEYI14yAR7ey-P2pkk.mft (raw, json)
Hash identifier: FT/8PAkwMyaaeW5+vRfDkn4ur+f2bs5ibYMiKaTnPf8=
Subject key identifier: 4C:1B:B7:37:51:EB:A7:2C:1B:6C:F8:98:F8:2B:A4:5D:90:2B:03:8A
Authority key identifier: 92:7A:7F:3A:A6:1B:22:41:18:23:5E:32:01:1E:DE:CB:E3:F6:A6:49
Certificate issuer: /CN=927a7f3aa61b224118235e32011edecbe3f6a649
Certificate serial: 019747E77713DF7997B217D24FA7026ACF08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knp_OqYbIkEYI14yAR7ey-P2pkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.mft
Manifest number: 0124
Signing time: Sat 07 Jun 2025 01:00:40 +0000
Manifest this update: Sat 07 Jun 2025 01:00:40 +0000
Manifest next update: Sun 08 Jun 2025 01:00:40 +0000
Files and hashes: 1: 2lpFexxe3_Ac4dcdM3bYGAow3NU.roa (hash: p5V0q0cPZ8lwGeilVxXZ3Q9iOjoW9+XEWeFjk4FsqTc=)
2: knp_OqYbIkEYI14yAR7ey-P2pkk.crl (hash: L/nPQSznqhxAWFRSkXULRe1yj/pz98OSg5XKF3CzL/Y=)
3: vvR3iZhxksZaf5ZtlUFG8sHgTwA.roa (hash: brocX5Nu7+UsTDQrzkSzsbDZjaym0Lw9E9mvwUm3aco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/knp_OqYbIkEYI14yAR7ey-P2pkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:77:13:df:79:97:b2:17:d2:4f:a7:02:6a:cf:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927a7f3aa61b224118235e32011edecbe3f6a649
Validity
Not Before: Jun 7 01:00:40 2025 GMT
Not After : Jun 8 01:00:40 2025 GMT
Subject: CN=4c1bb73751eba72c1b6cf898f82ba45d902b038a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fc:28:57:17:f2:0e:e9:e4:5f:87:29:0e:85:
af:e8:be:a8:9b:82:8f:b2:11:ed:46:dd:c8:07:c6:
70:49:96:45:ce:4d:c4:bd:83:75:67:ba:ae:cd:48:
24:e6:79:8e:1f:22:f4:37:61:c9:54:54:9c:b4:08:
d2:19:c5:57:95:fd:39:67:1a:0a:2c:b3:f6:b5:36:
4f:c6:76:61:e6:fb:85:b6:1e:50:44:40:2e:c9:63:
65:fe:13:78:48:f9:e2:35:fc:f5:1a:7d:1f:cb:85:
b0:43:07:cd:40:95:ed:02:d9:db:5d:65:09:7d:74:
5c:af:bc:1a:5d:0d:4d:5b:2b:01:44:59:8d:54:7d:
b7:5b:64:74:c1:cb:aa:e4:8e:ad:93:78:09:8b:46:
6e:a5:37:04:6b:65:73:4d:48:c0:84:43:52:cc:c6:
77:46:ca:38:03:b8:9e:a9:bb:67:56:6e:cb:67:bd:
07:ca:d7:4d:c9:3f:f6:68:80:dd:e3:87:e9:73:91:
45:ff:17:e1:6a:3e:47:53:ba:72:8f:38:53:e7:13:
68:06:d9:58:0b:f2:42:5c:46:d7:25:b4:94:d1:f5:
1a:bb:02:3f:36:6d:d1:e3:50:43:17:30:6b:c9:1c:
a6:00:9c:7c:03:8f:64:54:bb:df:49:34:ac:3a:b3:
70:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:1B:B7:37:51:EB:A7:2C:1B:6C:F8:98:F8:2B:A4:5D:90:2B:03:8A
X509v3 Authority Key Identifier:
keyid:92:7A:7F:3A:A6:1B:22:41:18:23:5E:32:01:1E:DE:CB:E3:F6:A6:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knp_OqYbIkEYI14yAR7ey-P2pkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:9a:d0:f1:86:49:1f:e7:a4:b1:ff:d6:32:bf:69:71:d2:98:
5e:90:cb:23:4a:10:99:de:cf:d9:34:2b:8b:4c:6b:88:b7:e0:
9f:98:4a:19:2e:99:65:da:4b:3f:63:ed:3b:62:7b:32:4e:f7:
73:3a:41:19:17:a5:91:8a:59:39:06:ee:43:a1:a4:ea:6f:06:
1e:e9:e4:1e:f8:e7:cf:e0:96:e7:8c:d5:57:8f:10:69:9f:60:
ff:9c:30:48:f1:d8:17:a7:94:8d:a3:d4:9e:ab:63:be:a3:be:
24:e8:11:44:f4:d3:4f:31:9f:d3:bb:a8:be:87:23:01:42:a6:
cf:0f:69:cb:0d:12:27:86:b7:48:1f:9c:6d:ef:49:6e:4b:10:
90:4d:2e:49:ca:5f:30:c5:83:8d:2e:22:f4:c6:6d:39:99:e7:
54:ea:f6:1e:2c:f3:00:0d:87:83:84:65:02:ea:0b:41:15:82:
da:26:71:21:0d:3e:05:3b:38:79:dc:f2:ba:ed:ce:ee:f6:ff:
13:3f:81:7b:74:b7:f2:33:e2:2c:19:0f:ef:e6:a6:af:bc:c2:
bd:2d:c2:9f:4f:03:c0:f4:c7:d4:ed:6c:b6:6f:51:79:6f:8c:
64:c5:70:c3:ac:7f:0d:cd:ce:94:af:e8:fa:4b:70:6b:69:55:
53:25:de:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:05:58 2025 by rpki-client