
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.mft
File: knp_OqYbIkEYI14yAR7ey-P2pkk.mft (raw, json)
Hash identifier: LV71ltFNUOZGqVGn3J23nNnlVqeoDsdvKoPaOEUw7KY=
Subject key identifier: F9:15:C8:3C:A5:9E:D5:C9:AC:5F:98:D7:37:CF:A4:F7:BA:B1:FB:FE
Authority key identifier: 92:7A:7F:3A:A6:1B:22:41:18:23:5E:32:01:1E:DE:CB:E3:F6:A6:49
Certificate issuer: /CN=927a7f3aa61b224118235e32011edecbe3f6a649
Certificate serial: 0199FB464030A76235E5977CE3C2C3D52D81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knp_OqYbIkEYI14yAR7ey-P2pkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.mft
Manifest number: 028A
Signing time: Sun 19 Oct 2025 07:01:49 +0000
Manifest this update: Sun 19 Oct 2025 07:01:49 +0000
Manifest next update: Mon 20 Oct 2025 07:01:49 +0000
Files and hashes: 1: 2lpFexxe3_Ac4dcdM3bYGAow3NU.roa (hash: p5V0q0cPZ8lwGeilVxXZ3Q9iOjoW9+XEWeFjk4FsqTc=)
2: knp_OqYbIkEYI14yAR7ey-P2pkk.crl (hash: yLRXvKTcVjHz1Dgcg3tKRdcnHsF4AhL7yvNvHu7h9IY=)
3: vvR3iZhxksZaf5ZtlUFG8sHgTwA.roa (hash: brocX5Nu7+UsTDQrzkSzsbDZjaym0Lw9E9mvwUm3aco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/knp_OqYbIkEYI14yAR7ey-P2pkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:40:30:a7:62:35:e5:97:7c:e3:c2:c3:d5:2d:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927a7f3aa61b224118235e32011edecbe3f6a649
Validity
Not Before: Oct 19 07:01:49 2025 GMT
Not After : Oct 20 07:01:49 2025 GMT
Subject: CN=f915c83ca59ed5c9ac5f98d737cfa4f7bab1fbfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fd:f9:f4:86:a6:bc:b7:06:90:1e:f4:e5:23:
00:59:23:be:6e:59:ca:9e:e6:ce:83:fd:a7:43:8d:
f5:6a:dc:a8:4f:36:a0:bf:c3:88:d4:8a:96:d6:e1:
d6:f0:ee:ee:8e:db:c2:5e:5e:28:84:cd:41:a8:c1:
ba:52:f7:28:31:1a:f4:97:9e:6a:b1:f8:7e:c4:61:
7e:ce:28:9f:d5:d5:f0:0f:c7:ed:ec:a0:32:92:02:
29:84:07:76:9c:49:57:84:db:ff:80:14:d9:fa:cf:
32:e5:ee:c4:fc:f5:80:1e:02:02:73:5d:83:e6:0f:
8a:5a:a7:16:da:3f:01:01:5d:18:4d:50:1e:b2:77:
f9:e8:34:82:76:7a:a9:ec:00:b0:ff:8e:74:33:98:
47:94:c7:7e:e5:1b:8c:35:02:67:f5:8f:0c:0a:bd:
1f:80:bd:d7:bf:cc:ef:2e:73:0a:3c:53:c8:1c:52:
25:b6:d8:a7:9f:31:b7:ff:96:e7:7b:a3:e6:c7:57:
d2:a4:b7:5c:b9:44:ad:f9:c8:ce:2a:dd:86:f1:e1:
0f:66:82:9e:c0:8e:b1:26:92:3f:ea:3d:6e:e0:81:
e1:5c:7b:de:9e:e8:ad:8d:7f:b9:0a:38:57:33:28:
39:6e:cf:d7:6d:3a:bf:5b:72:8b:2f:8b:39:13:64:
f3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:15:C8:3C:A5:9E:D5:C9:AC:5F:98:D7:37:CF:A4:F7:BA:B1:FB:FE
X509v3 Authority Key Identifier:
keyid:92:7A:7F:3A:A6:1B:22:41:18:23:5E:32:01:1E:DE:CB:E3:F6:A6:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knp_OqYbIkEYI14yAR7ey-P2pkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:62:07:0b:a9:1d:c6:83:9c:90:b5:a3:40:6b:85:48:d0:9a:
64:7c:1f:14:cd:49:3c:6c:31:7a:ba:f4:51:fa:7d:10:19:05:
75:68:5b:1b:27:bb:2b:7c:c5:a6:c9:49:7f:1d:9c:77:b2:81:
5f:d7:bd:66:5a:7b:2b:0e:8d:c4:66:09:3c:69:3a:1c:ab:a0:
35:56:6b:ac:fd:87:20:c7:6a:40:a3:eb:5d:5e:3f:c8:a9:ac:
c2:43:a3:6f:ca:fd:f9:ea:f9:13:2d:9b:80:1c:cc:16:20:92:
52:86:ce:12:16:bc:38:cc:a0:12:02:b3:22:c3:59:d6:fc:bf:
e3:4d:79:c8:27:33:a2:13:6d:bd:54:63:41:a0:fd:9e:69:c3:
b2:e3:17:95:c3:8a:7b:23:89:8d:9c:97:c3:69:8a:c1:e7:64:
8f:49:bb:e1:bd:d7:a4:ef:5b:48:ba:62:d4:72:1a:81:91:5d:
ff:4e:27:6a:5e:96:d1:09:d8:16:36:37:bf:32:c4:14:db:28:
47:03:62:80:96:7c:d3:07:7f:44:9a:c2:6c:8a:00:01:0d:4d:
04:5d:c9:cc:6a:4d:21:62:e5:2a:43:7e:99:3f:54:ce:7f:7e:
9d:86:00:48:58:05:46:b8:29:c6:2a:79:2e:99:5c:da:10:98:
08:fc:7a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:19:27 2025 by rpki-client