Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.mft
File: knp_OqYbIkEYI14yAR7ey-P2pkk.mft (raw, json)
Hash identifier: yPpV4RbRWaiuqpJxU1EnuqdUV3usoF4Mj2e7UeP6qiI=
Subject key identifier: E2:98:B0:8E:8C:F7:5B:CF:86:61:3A:BD:B6:04:A6:15:CA:DB:44:07
Authority key identifier: 92:7A:7F:3A:A6:1B:22:41:18:23:5E:32:01:1E:DE:CB:E3:F6:A6:49
Certificate issuer: /CN=927a7f3aa61b224118235e32011edecbe3f6a649
Certificate serial: 0196A98BF4E9833ADBE3631EFEE1D7C67B02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knp_OqYbIkEYI14yAR7ey-P2pkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.mft
Manifest number: D2
Signing time: Wed 07 May 2025 07:00:43 +0000
Manifest this update: Wed 07 May 2025 07:00:43 +0000
Manifest next update: Thu 08 May 2025 07:00:43 +0000
Files and hashes: 1: 2lpFexxe3_Ac4dcdM3bYGAow3NU.roa (hash: p5V0q0cPZ8lwGeilVxXZ3Q9iOjoW9+XEWeFjk4FsqTc=)
2: knp_OqYbIkEYI14yAR7ey-P2pkk.crl (hash: TMYi6Pp/xC+KHOckK76qKzAw08NSL4PI6Z7wT2HxMi4=)
3: vvR3iZhxksZaf5ZtlUFG8sHgTwA.roa (hash: brocX5Nu7+UsTDQrzkSzsbDZjaym0Lw9E9mvwUm3aco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/knp_OqYbIkEYI14yAR7ey-P2pkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 07:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:8b:f4:e9:83:3a:db:e3:63:1e:fe:e1:d7:c6:7b:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927a7f3aa61b224118235e32011edecbe3f6a649
Validity
Not Before: May 7 07:00:43 2025 GMT
Not After : May 8 07:00:43 2025 GMT
Subject: CN=e298b08e8cf75bcf86613abdb604a615cadb4407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ee:0b:94:b7:0b:a3:c3:f7:fc:63:de:ce:68:
13:70:1d:75:cb:f7:4f:b8:ab:ab:65:bc:21:4c:1a:
b5:1c:26:c9:ac:29:c1:2a:51:6b:34:98:bd:7b:66:
cb:da:8f:de:91:49:00:b3:8c:64:e3:5f:45:31:5a:
41:c9:23:70:24:9f:5a:9e:61:b6:32:9a:11:13:0a:
81:71:7d:23:8e:c7:1c:9b:fb:5e:f9:60:8b:a8:37:
12:53:37:f5:f3:64:1e:af:37:08:37:0c:0e:2c:10:
bb:25:d6:c3:9e:7b:85:68:c0:9c:36:42:7d:4a:b3:
c4:32:46:ec:fa:60:0a:6b:a2:ac:b2:c1:c1:87:c6:
ea:5e:a4:bd:76:94:bd:27:d0:f1:9c:e1:2d:22:07:
58:06:87:07:88:df:49:53:25:57:50:cb:96:8b:42:
ca:05:5f:78:1b:ce:32:9a:03:84:11:c4:8f:c0:91:
22:d0:6a:0b:9f:c4:b9:7e:cd:6d:fb:99:97:61:a1:
ac:71:63:a1:7b:b9:05:d5:f3:84:54:d7:4e:2e:de:
a7:30:ba:55:15:80:67:84:a6:7f:e8:32:04:71:40:
5a:d8:ca:35:5b:e1:33:95:78:d4:bf:3f:c0:ab:95:
81:ce:84:40:39:d9:90:ae:c9:3b:d9:dd:d0:96:60:
00:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:98:B0:8E:8C:F7:5B:CF:86:61:3A:BD:B6:04:A6:15:CA:DB:44:07
X509v3 Authority Key Identifier:
keyid:92:7A:7F:3A:A6:1B:22:41:18:23:5E:32:01:1E:DE:CB:E3:F6:A6:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knp_OqYbIkEYI14yAR7ey-P2pkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:72:a4:62:de:e6:fa:7d:b6:ad:4e:c7:4e:52:0b:4e:b6:30:
b9:39:a0:57:09:ca:3e:e9:6a:00:5d:2b:1b:ee:3b:57:8d:42:
34:0c:bd:5d:72:71:66:8a:53:f4:3a:f0:86:93:46:ab:11:ae:
10:da:49:37:b1:5d:3d:21:4c:42:6a:cc:20:43:a0:39:55:c8:
d0:17:4e:f9:1b:20:3f:17:3c:1f:1e:84:78:45:4e:0e:fa:76:
85:bb:b9:2a:44:71:57:7a:c5:ee:79:d0:93:4c:67:04:e6:a7:
50:07:e0:66:f5:6b:d2:4a:03:c8:90:8b:3a:14:e4:df:37:85:
6e:33:cc:d3:ab:e4:b4:e1:ee:c0:a1:5f:c0:81:64:3f:44:99:
d6:fe:79:14:11:b9:87:90:da:41:e9:4c:f2:92:c2:8d:a7:c3:
05:84:d2:fe:29:7d:dc:0c:c7:75:e5:c2:e3:8e:45:1c:39:19:
b0:2f:26:cd:69:c1:ae:8b:08:13:6e:03:7f:e6:c4:94:b3:60:
32:0b:7c:99:21:18:7f:ef:8e:b8:6b:d3:c8:ec:a5:67:ee:25:
3e:98:ce:f8:05:f1:49:3e:03:a1:1a:55:c8:b6:a2:60:60:9e:
16:df:0f:3f:f5:e9:00:b6:4a:f8:59:9b:89:62:f8:86:35:17:
42:02:b9:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 10:10:18 2025 by rpki-client