Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft
File: knr31AfwRdvqgHcyZbBM5XTQt-M.mft (raw, json)
Hash identifier: w6Qnjk4qCaKk34kTwmR/5G+O/lF8g/sSkzQuEpP/lxI=
Subject key identifier: 7F:0E:4D:64:31:2F:4F:CD:2D:EB:AA:E3:80:1B:69:6A:12:F2:B7:D7
Authority key identifier: 92:7A:F7:D4:07:F0:45:DB:EA:80:77:32:65:B0:4C:E5:74:D0:B7:E3
Certificate issuer: /CN=927af7d407f045dbea80773265b04ce574d0b7e3
Certificate serial: 0196A208F3D1D4DC5DC4B9B14C43B60C8B7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knr31AfwRdvqgHcyZbBM5XTQt-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft
Manifest number: 0A1E
Signing time: Mon 05 May 2025 20:00:17 +0000
Manifest this update: Mon 05 May 2025 20:00:17 +0000
Manifest next update: Tue 06 May 2025 20:00:17 +0000
Files and hashes: 1: ZHzFDinK1k80ggnxUxtsbupidkM.roa (hash: yg5fYgvuSW1mcbtxUsNzoaC3gDNZ2ZnNC0pEO7y0Ebs=)
2: knr31AfwRdvqgHcyZbBM5XTQt-M.crl (hash: zA8mE5qfdb9wr/Ap/IABUQoLkO8cFlQNfByRTLzJHic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/knr31AfwRdvqgHcyZbBM5XTQt-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:08:f3:d1:d4:dc:5d:c4:b9:b1:4c:43:b6:0c:8b:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927af7d407f045dbea80773265b04ce574d0b7e3
Validity
Not Before: May 5 20:00:17 2025 GMT
Not After : May 6 20:00:17 2025 GMT
Subject: CN=7f0e4d64312f4fcd2debaae3801b696a12f2b7d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f1:e3:83:3f:4f:43:33:6f:59:4d:c8:4d:91:
45:1a:91:46:eb:67:d5:6d:98:69:24:d9:db:97:1b:
7f:02:e4:ce:38:3f:1d:b6:76:60:f3:d8:8a:33:5f:
0e:36:af:5d:20:6e:ed:41:84:bf:52:27:e4:4c:31:
07:4f:87:d2:19:44:e3:78:ab:b3:92:4d:bb:ec:ae:
6d:5b:46:04:61:14:cb:b4:79:7b:49:84:3c:3c:5d:
8c:d3:d0:65:03:a8:4a:4a:9f:2e:e6:c4:9c:84:ec:
66:bb:6a:ba:8f:11:84:d4:95:ca:de:f2:a1:f8:ab:
69:ac:a3:44:ab:f1:07:4b:e4:69:4b:c0:09:26:94:
7c:05:c9:40:d9:b5:bb:87:e5:38:57:a8:e0:d9:d4:
67:ec:ac:4b:b8:f0:e9:6a:8a:16:d4:cb:79:d9:c9:
20:70:a6:94:b8:66:8e:11:c1:9e:03:f0:fc:ee:8e:
5a:de:94:f9:21:94:cb:65:15:b1:fa:71:c2:6d:60:
73:9f:80:dd:22:0f:18:29:62:14:7b:08:12:fd:4c:
09:58:3d:b5:aa:03:1f:4e:05:34:30:b0:98:6b:9b:
11:bd:e2:5f:6f:56:c5:a6:d3:01:dc:22:8c:77:4f:
dc:fe:03:bd:74:51:48:bb:63:93:83:69:c1:1d:55:
87:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:0E:4D:64:31:2F:4F:CD:2D:EB:AA:E3:80:1B:69:6A:12:F2:B7:D7
X509v3 Authority Key Identifier:
keyid:92:7A:F7:D4:07:F0:45:DB:EA:80:77:32:65:B0:4C:E5:74:D0:B7:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knr31AfwRdvqgHcyZbBM5XTQt-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:92:9b:3a:f7:49:3e:6d:12:64:02:13:a3:e3:6f:eb:1f:c7:
49:90:89:43:86:82:45:49:db:b6:d0:a7:04:32:26:e7:29:cc:
2d:d2:2f:c7:10:9b:ba:21:a1:ce:9e:c8:f7:5d:fe:65:e6:2d:
5e:a1:6c:ce:a3:b4:0f:8e:5f:5d:e1:64:61:51:4a:5c:db:d5:
55:a9:f7:cd:b6:1f:50:e4:0f:10:6b:82:31:c7:39:e1:22:98:
23:3f:c9:5d:22:9f:f2:37:57:6c:7e:58:b1:35:34:1b:32:75:
ef:16:ac:57:0e:6d:60:04:27:67:c3:92:bc:a5:26:c2:cd:c7:
35:e0:60:ae:89:83:e3:f4:97:ef:e3:17:f1:97:af:1c:16:aa:
d5:6c:17:7c:57:82:11:c6:11:f6:13:2c:4a:68:48:10:f4:4e:
aa:dd:8b:c0:1f:44:f9:cb:65:f1:94:e1:af:fd:6a:58:60:19:
17:bf:30:f3:fc:e7:20:45:3b:16:0c:f7:a9:e6:86:f7:4e:c6:
1e:73:57:b2:28:d9:88:06:43:96:06:78:b9:a8:6a:a2:ff:c0:
04:89:1a:50:02:0d:d8:22:da:50:cb:55:d3:ca:d3:2f:1e:d6:
6a:3e:d9:c9:8c:4a:a2:d8:05:91:4b:ce:aa:57:79:e8:98:22:
3c:9e:c9:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaiCPPR1NxdxLmxTEO2DIt/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyN2FmN2Q0MDdmMDQ1ZGJlYTgwNzczMjY1YjA0Y2U1NzRk
MGI3ZTMwHhcNMjUwNTA1MjAwMDE3WhcNMjUwNTA2MjAwMDE3WjAzMTEwLwYDVQQD
Eyg3ZjBlNGQ2NDMxMmY0ZmNkMmRlYmFhZTM4MDFiNjk2YTEyZjJiN2Q3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivHjgz9PQzNvWU3ITZFFGpFG62fV
bZhpJNnblxt/AuTOOD8dtnZg89iKM18ONq9dIG7tQYS/UifkTDEHT4fSGUTjeKuz
kk277K5tW0YEYRTLtHl7SYQ8PF2M09BlA6hKSp8u5sSchOxmu2q6jxGE1JXK3vKh
+KtprKNEq/EHS+RpS8AJJpR8BclA2bW7h+U4V6jg2dRn7KxLuPDpaooW1Mt52ckg
cKaUuGaOEcGeA/D87o5a3pT5IZTLZRWx+nHCbWBzn4DdIg8YKWIUewgS/UwJWD21
qgMfTgU0MLCYa5sRveJfb1bFptMB3CKMd0/c/gO9dFFIu2OTg2nBHVWHWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH8OTWQxL0/NLeuq44AbaWoS8rfXMB8GA1UdIwQY
MBaAFJJ699QH8EXb6oB3MmWwTOV00LfjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva25yMzFBZndSZHZxZ0hjeVpiQk01WFRRdC1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC82ZDVlMjktYWY2ZS00YzhjLWIwYWQt
NTE2ZTBiMzBlYjEwLzEva25yMzFBZndSZHZxZ0hjeVpiQk01WFRRdC1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC82ZDVlMjktYWY2ZS00YzhjLWIwYWQtNTE2ZTBiMzBlYjEw
LzEva25yMzFBZndSZHZxZ0hjeVpiQk01WFRRdC1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk5KbOvdJ
Pm0SZAITo+Nv6x/HSZCJQ4aCRUnbttCnBDIm5ynMLdIvxxCbuiGhzp7I913+ZeYt
XqFszqO0D45fXeFkYVFKXNvVVan3zbYfUOQPEGuCMcc54SKYIz/JXSKf8jdXbH5Y
sTU0GzJ17xasVw5tYAQnZ8OSvKUmws3HNeBgromD4/SX7+MX8ZevHBaq1WwXfFeC
EcYR9hMsSmhIEPROqt2LwB9E+ctl8ZThr/1qWGAZF78w8/znIEU7Fgz3qeaG907G
HnNXsijZiAZDlgZ4uahqov/ABIkaUAIN2CLaUMtV08rTLx7Waj7ZyYxKotgFkUvO
qld56JgiPJ7Jbg==
-----END CERTIFICATE-----
Generated at Tue May 6 03:05:40 2025 by rpki-client