Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.mft
File: knp_OqYbIkEYI14yAR7ey-P2pkk.mft (raw, json)
Hash identifier: cQyJBUaz2yAVeBNiKZF6Fe+zEQUUs0HkHhdYFPMMLmc=
Subject key identifier: AF:A8:FE:34:FA:04:16:1E:DD:72:F1:5B:96:45:C8:CE:CE:BA:C4:8B
Authority key identifier: 92:7A:7F:3A:A6:1B:22:41:18:23:5E:32:01:1E:DE:CB:E3:F6:A6:49
Certificate issuer: /CN=927a7f3aa61b224118235e32011edecbe3f6a649
Certificate serial: 0198D5BC2FF0BD67CEEC60364C6F1621FEB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knp_OqYbIkEYI14yAR7ey-P2pkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.mft
Manifest number: 01F2
Signing time: Sat 23 Aug 2025 07:02:16 +0000
Manifest this update: Sat 23 Aug 2025 07:02:16 +0000
Manifest next update: Sun 24 Aug 2025 07:02:16 +0000
Files and hashes: 1: 2lpFexxe3_Ac4dcdM3bYGAow3NU.roa (hash: p5V0q0cPZ8lwGeilVxXZ3Q9iOjoW9+XEWeFjk4FsqTc=)
2: knp_OqYbIkEYI14yAR7ey-P2pkk.crl (hash: EoTZRf8kxyErFceTXbna7KNI/oBw9Pju3h1517mRBJg=)
3: vvR3iZhxksZaf5ZtlUFG8sHgTwA.roa (hash: brocX5Nu7+UsTDQrzkSzsbDZjaym0Lw9E9mvwUm3aco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/knp_OqYbIkEYI14yAR7ey-P2pkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:2f:f0:bd:67:ce:ec:60:36:4c:6f:16:21:fe:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927a7f3aa61b224118235e32011edecbe3f6a649
Validity
Not Before: Aug 23 07:02:16 2025 GMT
Not After : Aug 24 07:02:16 2025 GMT
Subject: CN=afa8fe34fa04161edd72f15b9645c8cecebac48b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0a:97:b5:4e:23:5b:3f:e9:af:f0:0d:d2:f5:
63:3d:bb:cb:cd:7a:f6:40:3f:1c:dd:e7:37:8e:b3:
ea:d6:85:3f:ce:2f:47:cd:81:80:43:fe:0b:76:f3:
c6:42:68:27:15:a0:ea:92:f9:2c:40:81:8e:51:43:
c4:72:62:65:89:1d:e7:f7:b1:3b:1e:e8:ef:e8:24:
b8:dc:f9:94:fc:7b:85:7e:3b:2c:80:e7:42:89:03:
25:40:46:fd:2c:f1:52:1d:63:45:9b:f9:93:c0:59:
be:96:1c:a6:48:76:b8:e8:27:e5:e3:1e:f7:7f:b8:
72:92:15:0e:57:97:0d:74:b3:2b:b5:42:c1:8c:60:
36:fb:04:78:ad:90:f3:ec:6e:0f:e0:74:86:5e:c9:
3b:36:8d:0c:96:12:f6:46:9e:c4:64:27:85:28:38:
4b:29:3a:d4:85:7f:bc:4e:0c:81:70:46:eb:08:9b:
37:f2:27:fc:f3:0c:b9:0d:fb:c6:5b:96:ab:ac:fa:
69:e2:dd:d7:8f:9f:16:b8:8a:4b:69:ae:b3:57:42:
e2:37:67:2a:b3:81:f3:31:5a:1c:cc:ed:8b:ea:e5:
ae:fd:d7:52:c9:6e:ef:00:f8:7d:e7:3a:c0:a6:fc:
84:2d:bd:2f:24:b6:8b:ee:75:0e:87:9e:e7:a7:cd:
0a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A8:FE:34:FA:04:16:1E:DD:72:F1:5B:96:45:C8:CE:CE:BA:C4:8B
X509v3 Authority Key Identifier:
keyid:92:7A:7F:3A:A6:1B:22:41:18:23:5E:32:01:1E:DE:CB:E3:F6:A6:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knp_OqYbIkEYI14yAR7ey-P2pkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:b1:e2:58:a5:ab:90:2c:e5:67:bb:9a:e8:f1:28:b8:14:1f:
60:06:16:b9:42:8f:30:40:5e:af:2c:f1:a1:dc:a9:7b:1c:f2:
55:0a:05:69:6a:36:a9:e1:38:8b:b9:c6:e8:49:7b:00:13:d3:
ef:d6:73:87:cc:aa:56:ef:16:52:70:80:63:ef:b7:20:7f:87:
1b:b0:33:51:c9:e0:df:e1:72:67:3b:3b:55:1f:88:32:65:39:
7b:88:6c:c4:b9:af:5a:82:00:1f:00:3c:af:e0:5d:55:29:75:
40:9c:84:a6:b7:e0:92:19:0a:ed:4c:62:6f:3c:ab:a9:64:32:
7e:a0:5c:cf:e2:f1:c2:fc:a7:37:ae:fc:fc:54:b9:81:36:31:
10:91:90:5e:48:b9:1d:d9:6d:12:cc:33:72:60:b3:e6:f9:05:
3f:06:c2:0d:e2:5d:a3:8a:90:29:8e:4f:6a:48:3f:8a:77:f9:
13:be:b3:6e:89:62:0c:2a:12:16:16:f5:c4:92:91:e1:75:28:
39:c6:11:fa:4d:10:e7:5a:c6:12:01:d8:42:a6:c4:f5:b2:9b:
be:01:ce:8f:72:6a:c3:96:8d:02:51:28:0b:af:ea:21:06:fe:
9a:fc:d6:ed:08:5c:74:6f:f8:75:06:a6:5b:57:a1:64:38:0c:
0c:74:5c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:31:54 2025 by rpki-client