Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.mft
File: knp_OqYbIkEYI14yAR7ey-P2pkk.mft (raw, json)
Hash identifier: VfY7pAC2/4aJ7q0GoONX7jiCgv7+uFHH5qoBm2Sprcc=
Subject key identifier: 0C:8B:8A:D0:20:51:0F:F5:DA:21:E5:73:20:35:D0:0E:8C:71:6B:D6
Authority key identifier: 92:7A:7F:3A:A6:1B:22:41:18:23:5E:32:01:1E:DE:CB:E3:F6:A6:49
Certificate issuer: /CN=927a7f3aa61b224118235e32011edecbe3f6a649
Certificate serial: 01964CD97083F99D9F0BFF7E35A7DC67A83C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knp_OqYbIkEYI14yAR7ey-P2pkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.mft
Manifest number: A2
Signing time: Sat 19 Apr 2025 07:00:40 +0000
Manifest this update: Sat 19 Apr 2025 07:00:40 +0000
Manifest next update: Sun 20 Apr 2025 07:00:40 +0000
Files and hashes: 1: 2lpFexxe3_Ac4dcdM3bYGAow3NU.roa (hash: p5V0q0cPZ8lwGeilVxXZ3Q9iOjoW9+XEWeFjk4FsqTc=)
2: knp_OqYbIkEYI14yAR7ey-P2pkk.crl (hash: VNPJpONzkE9+LhoemF8lToOIiwypiNRt29s6cBtbAxw=)
3: vvR3iZhxksZaf5ZtlUFG8sHgTwA.roa (hash: brocX5Nu7+UsTDQrzkSzsbDZjaym0Lw9E9mvwUm3aco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/knp_OqYbIkEYI14yAR7ey-P2pkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:d9:70:83:f9:9d:9f:0b:ff:7e:35:a7:dc:67:a8:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927a7f3aa61b224118235e32011edecbe3f6a649
Validity
Not Before: Apr 19 07:00:40 2025 GMT
Not After : Apr 20 07:00:40 2025 GMT
Subject: CN=0c8b8ad020510ff5da21e5732035d00e8c716bd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2e:2f:19:29:59:f0:40:9a:7f:7f:c9:34:84:
ba:51:77:32:c4:4a:11:38:64:d2:9e:ea:77:19:be:
43:2a:d8:a4:11:72:88:7d:1d:91:f2:88:eb:fa:04:
66:f3:3c:4d:39:d8:9d:ce:d0:bf:64:79:9d:81:76:
21:3d:81:06:bc:c8:51:6d:7d:c1:36:fd:d8:a5:18:
69:55:45:53:0c:df:5b:c7:03:9a:0c:40:62:44:a8:
9f:25:99:20:4f:35:2d:00:0d:ef:9d:ac:dc:60:62:
3c:11:fd:7b:bd:ae:32:d3:69:58:a1:c1:e6:e0:11:
9a:c8:c6:c2:bd:dc:d5:76:b9:fe:28:a8:13:48:20:
ce:ef:d1:dc:07:04:8f:0a:2f:89:62:96:a4:52:d8:
bf:71:28:df:2f:0b:3b:08:a0:aa:5e:5e:b1:7e:10:
b6:ec:13:c7:66:d1:0c:24:cb:69:3b:67:74:f4:b3:
c3:5a:8c:46:d0:a2:12:29:ca:1d:fe:92:82:d8:d8:
fb:5a:33:c1:9f:66:cd:1b:ee:76:35:27:29:c5:4d:
c9:9f:b5:4e:4a:6d:f8:13:06:b3:77:de:ca:45:aa:
99:48:0c:30:68:ee:5a:0c:0a:de:73:70:97:8f:08:
85:77:fe:11:2c:7f:80:cd:7e:05:74:e7:ee:2b:7e:
ea:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:8B:8A:D0:20:51:0F:F5:DA:21:E5:73:20:35:D0:0E:8C:71:6B:D6
X509v3 Authority Key Identifier:
keyid:92:7A:7F:3A:A6:1B:22:41:18:23:5E:32:01:1E:DE:CB:E3:F6:A6:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knp_OqYbIkEYI14yAR7ey-P2pkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:e8:bc:f8:5a:fe:9c:56:55:76:0a:a7:4b:d3:77:b4:eb:be:
5c:a2:2c:10:25:4d:a0:fe:fa:24:15:a1:35:64:10:b6:e9:f0:
d4:85:2a:48:94:ef:ad:8e:13:b2:b4:2d:fc:2c:96:e1:38:31:
bc:6e:c4:18:30:b4:0b:07:6a:27:a7:ff:a8:ef:2a:7a:0d:f4:
47:91:81:8b:05:1b:c3:17:aa:ac:b3:a8:32:60:01:95:0c:a7:
df:4c:87:8f:b2:12:48:93:8b:91:be:71:fd:cf:6f:1e:21:ee:
cc:c2:16:05:d0:86:1c:08:fb:60:20:18:c7:74:01:b5:d3:24:
59:c8:4c:df:65:1b:bc:2a:99:04:90:f0:b9:df:ee:ff:e5:0a:
dd:cc:40:0b:06:b3:05:eb:15:bc:73:86:0c:35:c0:86:dc:d6:
36:c0:88:28:a3:88:ff:d2:a8:55:50:a8:90:91:e8:6b:12:d2:
ad:0b:b5:61:05:9f:eb:4b:a9:af:a5:6a:69:bb:99:5b:05:3b:
f5:d6:5d:de:b6:86:05:cd:74:27:82:9b:1c:f9:9f:2b:8f:9b:
2d:bd:84:50:69:07:89:69:42:06:37:7f:b4:00:c0:12:1f:e3:
db:c8:c0:9d:26:bf:19:87:42:81:c0:40:44:e9:dc:2b:64:d4:
34:54:44:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 16:01:00 2025 by rpki-client