Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/c6f6e7-5a38-44b0-8807-775fc0d61fc5/1/knv-bp-2gEzZKLqBJy1mCFa1Pfc.mft
File: knv-bp-2gEzZKLqBJy1mCFa1Pfc.mft (raw, json)
Hash identifier: gHHO6HC82zqINBQlR7neSw626oMKERybTHboRAYwGfQ=
Subject key identifier: 42:20:D4:1E:BE:38:01:11:98:01:2C:29:67:DD:DD:95:93:67:4A:E6
Authority key identifier: 92:7B:FE:6E:9F:B6:80:4C:D9:28:BA:81:27:2D:66:08:56:B5:3D:F7
Certificate issuer: /CN=927bfe6e9fb6804cd928ba81272d660856b53df7
Certificate serial: 0197485565D3841405BBD289CC17F06DD12B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knv-bp-2gEzZKLqBJy1mCFa1Pfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/c6f6e7-5a38-44b0-8807-775fc0d61fc5/1/knv-bp-2gEzZKLqBJy1mCFa1Pfc.mft
Manifest number: 30
Signing time: Sat 07 Jun 2025 03:00:45 +0000
Manifest this update: Sat 07 Jun 2025 03:00:45 +0000
Manifest next update: Sun 08 Jun 2025 03:00:45 +0000
Files and hashes: 1: knv-bp-2gEzZKLqBJy1mCFa1Pfc.crl (hash: fUZfJAnvHiiulC980sRdIGyQpdAWG8H8iKNKfr8onUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/c6f6e7-5a38-44b0-8807-775fc0d61fc5/1/knv-bp-2gEzZKLqBJy1mCFa1Pfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/c6f6e7-5a38-44b0-8807-775fc0d61fc5/1/knv-bp-2gEzZKLqBJy1mCFa1Pfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/knv-bp-2gEzZKLqBJy1mCFa1Pfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:55:65:d3:84:14:05:bb:d2:89:cc:17:f0:6d:d1:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927bfe6e9fb6804cd928ba81272d660856b53df7
Validity
Not Before: Jun 7 03:00:45 2025 GMT
Not After : Jun 8 03:00:45 2025 GMT
Subject: CN=4220d41ebe38011198012c2967dddd9593674ae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:98:24:c5:db:a8:a9:ca:4e:a0:ef:3e:de:22:
95:4f:e4:f8:03:b9:9f:d7:30:88:ee:4f:46:92:5a:
5f:39:67:26:d3:82:d7:2a:23:4c:ff:77:f0:81:40:
46:43:28:28:6a:31:71:e1:dc:d8:d6:cf:db:1e:81:
ed:7f:4b:98:9e:1c:93:45:e6:4b:50:23:80:e8:9d:
d2:95:2e:5b:92:dc:0f:2a:03:54:20:49:fb:8e:c2:
89:1e:1b:08:81:e9:7c:9c:ff:a3:db:48:f7:89:3e:
c1:f6:ed:0a:4c:0d:bf:3e:2b:08:b0:ee:5f:87:5d:
a1:0c:79:db:69:29:04:ab:52:f7:b5:6b:c9:bd:09:
c0:2f:bc:1e:81:dc:2b:76:ff:9f:24:3f:78:cc:bf:
0c:6d:1a:8e:fb:9d:29:9f:8f:26:8c:aa:51:38:f4:
5b:51:01:6a:15:cc:c9:1e:fb:6f:f2:e9:79:7b:3c:
ce:18:a3:5f:56:61:99:9f:86:26:58:fe:35:a2:4e:
57:9b:b7:90:47:52:74:61:dd:36:50:29:93:19:62:
fe:40:a4:6d:a3:2b:c4:ca:00:eb:dd:73:36:ac:2c:
f1:d4:d2:8f:9d:ce:4d:73:2a:da:ab:56:5a:0f:16:
bc:a7:e5:7b:2a:bf:29:cb:66:46:f6:ec:cc:a4:d5:
7f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:20:D4:1E:BE:38:01:11:98:01:2C:29:67:DD:DD:95:93:67:4A:E6
X509v3 Authority Key Identifier:
keyid:92:7B:FE:6E:9F:B6:80:4C:D9:28:BA:81:27:2D:66:08:56:B5:3D:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knv-bp-2gEzZKLqBJy1mCFa1Pfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c6f6e7-5a38-44b0-8807-775fc0d61fc5/1/knv-bp-2gEzZKLqBJy1mCFa1Pfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c6f6e7-5a38-44b0-8807-775fc0d61fc5/1/knv-bp-2gEzZKLqBJy1mCFa1Pfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:28:52:11:93:f5:82:94:5c:10:68:d5:ae:7f:40:79:25:10:
df:68:4e:f2:7d:cf:dd:31:51:58:0d:20:da:49:cd:6e:07:c2:
e1:30:d7:26:6f:12:95:e8:04:f1:46:c8:a1:a1:13:ab:7a:19:
09:2f:00:93:b3:8e:a1:dc:e0:43:a1:42:2e:fb:cd:80:9f:1b:
d8:5f:8f:8e:0f:df:9a:73:8c:7b:ac:0d:6a:a2:44:e6:a1:27:
db:49:da:5b:5d:9e:3d:60:37:83:6d:b4:c1:49:0c:3f:75:c9:
9a:b2:80:d9:d6:44:44:6a:8d:69:42:df:b2:9d:3a:0c:84:ad:
1b:ce:c4:ed:7d:bc:f0:88:c8:8a:6d:66:e6:94:77:58:da:6e:
82:a5:c1:88:88:41:65:e5:1a:81:a4:a5:92:67:4d:85:bd:e4:
7e:ae:ac:0d:fc:82:13:27:fa:e7:5d:78:91:60:23:34:35:0f:
14:eb:a9:f5:20:ad:42:91:db:72:57:9d:38:65:2d:e8:4f:8e:
8c:2a:8e:13:ed:3a:f5:f6:67:7a:fb:a2:31:75:be:7d:2d:8c:
7d:5e:2d:30:76:44:de:fd:9b:ec:bb:f6:63:33:27:5b:21:0c:
6e:a2:84:a5:11:61:8a:2a:e3:ec:d4:d5:1d:cb:7d:04:53:c2:
4c:99:65:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:08:40 2025 by rpki-client