Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft
File: knr31AfwRdvqgHcyZbBM5XTQt-M.mft (raw, json)
Hash identifier: sQFKQDDTztFr4B2R7IAic6vMJ6tV9HPm+jPJh46NIEQ=
Subject key identifier: 71:DE:AC:C7:60:BE:F3:55:B1:FC:3C:16:BF:84:A5:46:A6:91:AC:B0
Authority key identifier: 92:7A:F7:D4:07:F0:45:DB:EA:80:77:32:65:B0:4C:E5:74:D0:B7:E3
Certificate issuer: /CN=927af7d407f045dbea80773265b04ce574d0b7e3
Certificate serial: 0199FF59894DB2866EB0C276A06DD9BB0C02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knr31AfwRdvqgHcyZbBM5XTQt-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft
Manifest number: 0BDC
Signing time: Mon 20 Oct 2025 02:01:21 +0000
Manifest this update: Mon 20 Oct 2025 02:01:21 +0000
Manifest next update: Tue 21 Oct 2025 02:01:21 +0000
Files and hashes: 1: ZHzFDinK1k80ggnxUxtsbupidkM.roa (hash: yg5fYgvuSW1mcbtxUsNzoaC3gDNZ2ZnNC0pEO7y0Ebs=)
2: knr31AfwRdvqgHcyZbBM5XTQt-M.crl (hash: R3fooxrMsFT4yOfXTl1pJtqvaPp7gKHvYEnbxscMFw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/knr31AfwRdvqgHcyZbBM5XTQt-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 02:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:89:4d:b2:86:6e:b0:c2:76:a0:6d:d9:bb:0c:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927af7d407f045dbea80773265b04ce574d0b7e3
Validity
Not Before: Oct 20 02:01:21 2025 GMT
Not After : Oct 21 02:01:21 2025 GMT
Subject: CN=71deacc760bef355b1fc3c16bf84a546a691acb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:03:3b:4b:98:a4:be:7b:9f:ed:4c:7d:50:1f:
4d:77:a5:2e:96:06:28:f5:87:b9:71:f2:6f:eb:9d:
b6:75:0b:35:32:32:6a:be:04:91:1d:ee:45:ba:b2:
e8:d6:63:b7:a7:7d:eb:e4:ad:89:65:ea:cc:3f:49:
48:a5:96:d5:67:6b:b7:7a:f8:4a:ec:95:3e:23:a2:
3e:87:3e:62:6b:c5:e5:d9:53:30:a8:05:ed:cd:97:
a1:89:1a:d9:2e:f4:29:7d:83:70:0a:03:9a:1e:6f:
ee:78:89:e0:32:0e:3f:67:54:26:29:31:44:cd:46:
aa:c3:60:59:a0:d1:5d:bc:74:af:5a:d4:6e:01:e0:
29:2c:75:25:35:96:25:ab:46:20:5e:45:46:ae:0a:
9e:95:64:f3:8a:91:85:bf:5c:50:c5:00:4e:39:ae:
1c:7e:e9:59:cd:7a:5d:5c:3f:5d:b1:61:20:10:f2:
c6:cb:89:b9:19:b9:fe:2a:44:20:e9:22:f5:be:41:
b6:96:8a:59:a3:9e:7a:01:d0:11:c1:83:82:54:ea:
df:bc:55:5d:74:1e:79:ba:37:43:c9:71:9e:12:09:
ac:f5:bd:b5:1b:a2:64:52:87:55:a0:0f:f7:d0:65:
df:74:77:9e:b6:f2:e9:44:0a:88:c2:70:31:51:d3:
e3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:DE:AC:C7:60:BE:F3:55:B1:FC:3C:16:BF:84:A5:46:A6:91:AC:B0
X509v3 Authority Key Identifier:
keyid:92:7A:F7:D4:07:F0:45:DB:EA:80:77:32:65:B0:4C:E5:74:D0:B7:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knr31AfwRdvqgHcyZbBM5XTQt-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:97:1e:eb:b2:54:fd:a1:4c:77:fa:e4:2f:99:4d:32:b1:4f:
fd:1b:99:af:60:9a:d7:0d:66:13:f6:cf:c5:b0:5d:45:24:99:
6e:f6:7a:f2:37:cc:a8:08:25:be:4f:08:de:21:52:91:89:e8:
a8:c8:f0:f3:6e:fa:72:51:77:15:a5:0d:36:1d:99:4e:60:9c:
99:22:8b:fd:06:d5:3b:a0:21:ce:47:73:18:8e:40:85:e1:96:
9b:1e:95:88:40:5a:2d:9f:ee:eb:36:1b:d0:c3:4e:54:64:be:
88:9b:73:de:0f:45:ac:4b:e6:60:3f:9f:55:5f:a4:e8:06:dc:
5f:05:81:3e:b8:96:4f:00:b0:04:2b:0b:7f:d1:2c:4c:ac:1c:
56:e1:95:b7:47:c0:64:7a:72:06:5c:cd:fe:56:8c:4e:2e:64:
e5:05:f2:2f:f4:ca:5e:8d:d1:6f:f2:9f:14:ad:f6:7c:e1:91:
54:8f:b0:d0:5a:98:19:c7:c6:d3:60:d1:9d:c4:40:b0:f9:7a:
ea:4e:c9:ff:85:d3:74:61:e9:08:b0:6e:b3:55:cc:40:7d:0c:
3e:5b:a8:54:40:e6:4a:30:64:af:4b:af:de:36:72:f9:8a:3a:
18:77:8d:6a:60:3f:82:be:33:6f:d5:76:66:58:d5:53:7e:bf:
91:3e:39:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:02:45 2025 by rpki-client