Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/c6f6e7-5a38-44b0-8807-775fc0d61fc5/1/knv-bp-2gEzZKLqBJy1mCFa1Pfc.mft
File: knv-bp-2gEzZKLqBJy1mCFa1Pfc.mft (raw, json)
Hash identifier: ULE8YAsk1IHmsGBcbvMIR0mjQz5MpRpfApNahCDJ/UI=
Subject key identifier: C9:0E:03:54:6F:7B:3B:4E:7D:D4:1A:49:18:2C:5D:92:9D:D7:75:36
Authority key identifier: 92:7B:FE:6E:9F:B6:80:4C:D9:28:BA:81:27:2D:66:08:56:B5:3D:F7
Certificate issuer: /CN=927bfe6e9fb6804cd928ba81272d660856b53df7
Certificate serial: 0199FBEB9C842B54D3CA1A9167AEF5BA9B08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knv-bp-2gEzZKLqBJy1mCFa1Pfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/c6f6e7-5a38-44b0-8807-775fc0d61fc5/1/knv-bp-2gEzZKLqBJy1mCFa1Pfc.mft
Manifest number: 0196
Signing time: Sun 19 Oct 2025 10:02:26 +0000
Manifest this update: Sun 19 Oct 2025 10:02:26 +0000
Manifest next update: Mon 20 Oct 2025 10:02:26 +0000
Files and hashes: 1: knv-bp-2gEzZKLqBJy1mCFa1Pfc.crl (hash: sXcz74dTIQwcbnD5ZdTY2TBtXAXYQCS8Vz3RDRL0sQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/c6f6e7-5a38-44b0-8807-775fc0d61fc5/1/knv-bp-2gEzZKLqBJy1mCFa1Pfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/c6f6e7-5a38-44b0-8807-775fc0d61fc5/1/knv-bp-2gEzZKLqBJy1mCFa1Pfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/knv-bp-2gEzZKLqBJy1mCFa1Pfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:9c:84:2b:54:d3:ca:1a:91:67:ae:f5:ba:9b:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927bfe6e9fb6804cd928ba81272d660856b53df7
Validity
Not Before: Oct 19 10:02:26 2025 GMT
Not After : Oct 20 10:02:26 2025 GMT
Subject: CN=c90e03546f7b3b4e7dd41a49182c5d929dd77536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:4e:3e:55:4a:68:1c:28:aa:3e:aa:7b:a1:25:
08:4f:b0:2a:67:b0:b0:51:67:2e:68:6f:75:a9:d7:
9c:41:2e:8d:87:17:5c:74:0d:24:4c:f4:83:7b:17:
b4:5b:cb:30:6a:70:6a:bc:b8:5b:7b:b8:fc:fd:18:
ec:50:ea:5d:cc:00:37:ad:ff:4d:ef:c3:7e:30:c9:
e9:6e:f6:7a:8d:39:49:22:90:a3:ef:67:09:1b:ee:
ee:21:ca:e6:2e:e8:11:77:c2:bc:aa:7c:f2:8c:b8:
a1:9b:20:d2:61:ee:3e:93:a4:e8:e8:73:d5:46:89:
b4:63:58:94:94:52:3f:54:95:da:e1:bb:bb:1e:6a:
81:06:4a:3c:6f:6c:a1:de:c0:9d:4d:9d:0b:89:8a:
a8:15:f9:0f:ea:16:99:1e:2b:5c:d9:24:80:ae:49:
47:56:b8:0e:33:80:42:ec:c6:92:f7:4a:4d:39:e5:
16:3e:86:5c:ce:3f:cd:51:b0:87:fa:ef:b2:93:05:
b5:fe:cd:cd:e6:db:e1:e3:07:4d:89:cf:e6:ea:25:
73:03:9b:72:e3:96:45:a9:7b:99:50:8d:7c:20:17:
69:79:43:30:2e:fb:bf:44:f0:92:34:47:d9:b2:02:
22:ba:f6:6f:15:52:46:a6:9b:6c:12:1d:e8:fa:37:
e3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:0E:03:54:6F:7B:3B:4E:7D:D4:1A:49:18:2C:5D:92:9D:D7:75:36
X509v3 Authority Key Identifier:
keyid:92:7B:FE:6E:9F:B6:80:4C:D9:28:BA:81:27:2D:66:08:56:B5:3D:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knv-bp-2gEzZKLqBJy1mCFa1Pfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c6f6e7-5a38-44b0-8807-775fc0d61fc5/1/knv-bp-2gEzZKLqBJy1mCFa1Pfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c6f6e7-5a38-44b0-8807-775fc0d61fc5/1/knv-bp-2gEzZKLqBJy1mCFa1Pfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:60:ba:a7:4d:a2:af:cf:84:53:de:61:54:56:0f:86:b9:67:
78:2c:c4:66:f5:98:34:3b:70:bc:72:7a:b1:f6:90:20:8d:72:
ae:7e:4f:8f:12:0c:07:a3:b0:60:45:49:0c:51:a3:f7:fb:4a:
93:3c:ec:97:3a:a0:7e:a5:bd:97:a3:cc:28:df:e7:9b:ec:52:
3d:ae:9f:30:fa:d9:da:a0:0d:d1:4a:5f:3a:a6:a0:3a:66:da:
ad:76:d9:38:7e:ad:76:47:52:fd:79:25:6b:3f:f1:42:ca:22:
ce:a2:fc:cd:9f:b9:69:83:22:a5:77:38:72:05:2a:ab:ba:9b:
2a:61:90:62:08:a3:02:81:51:01:12:62:bc:d7:25:3b:f8:b1:
bf:1f:7c:d0:d5:72:86:d4:fb:46:60:8b:61:5b:14:bd:ef:40:
42:4f:59:89:cd:61:c1:5c:06:7f:54:ea:ec:16:de:08:b3:25:
c6:75:c8:99:1d:3e:09:9b:c0:45:58:33:c6:d8:5e:8d:06:c3:
f2:ed:ea:78:8d:fb:48:d3:51:9a:3e:dd:a1:a9:25:f9:9e:c3:
dc:4a:e8:52:3a:1e:90:f7:9f:ad:b5:97:68:1f:e8:cf:e6:6d:
e5:d5:db:d5:9b:ea:96:29:cd:5f:60:17:c3:74:f6:38:3f:10:
18:09:bc:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:06:48 2025 by rpki-client