Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft
File: knr31AfwRdvqgHcyZbBM5XTQt-M.mft (raw, json)
Hash identifier: Q0q9f+UbR2rq+GIN9XL2u1dxXIGiOAgWKa5aj7dxtyI=
Subject key identifier: 02:2F:5A:7C:51:4E:04:57:EA:DB:92:79:9C:BC:38:AD:10:29:A4:34
Authority key identifier: 92:7A:F7:D4:07:F0:45:DB:EA:80:77:32:65:B0:4C:E5:74:D0:B7:E3
Certificate issuer: /CN=927af7d407f045dbea80773265b04ce574d0b7e3
Certificate serial: 019A4E86AA7D25DF2ED9D98C29D967650B21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knr31AfwRdvqgHcyZbBM5XTQt-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft
Manifest number: 0C05
Signing time: Tue 04 Nov 2025 11:00:39 +0000
Manifest this update: Tue 04 Nov 2025 11:00:39 +0000
Manifest next update: Wed 05 Nov 2025 11:00:39 +0000
Files and hashes: 1: ZHzFDinK1k80ggnxUxtsbupidkM.roa (hash: yg5fYgvuSW1mcbtxUsNzoaC3gDNZ2ZnNC0pEO7y0Ebs=)
2: knr31AfwRdvqgHcyZbBM5XTQt-M.crl (hash: nFA6ekuhin6CegAUOfWTMs3c99eQZEcCRc35FDol4sQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/knr31AfwRdvqgHcyZbBM5XTQt-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:aa:7d:25:df:2e:d9:d9:8c:29:d9:67:65:0b:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927af7d407f045dbea80773265b04ce574d0b7e3
Validity
Not Before: Nov 4 11:00:39 2025 GMT
Not After : Nov 5 11:00:39 2025 GMT
Subject: CN=022f5a7c514e0457eadb92799cbc38ad1029a434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:cb:78:35:60:97:e5:e5:68:84:45:5f:f4:8b:
48:f9:b8:e5:8f:83:5d:4c:c6:06:c7:e1:ed:f6:d6:
a1:61:9e:da:8d:dc:ac:43:bb:c1:05:9c:c9:e1:fa:
9c:f9:b6:6d:12:45:c9:91:d8:51:57:12:de:fe:e5:
61:18:55:1c:f7:41:0f:b7:10:a7:a1:ea:cb:80:94:
0e:71:0a:fd:3a:2d:dd:7e:2c:9b:01:c4:93:07:c4:
88:dc:3a:89:7d:e1:59:93:fd:f4:5f:81:e4:86:a9:
b6:79:ff:43:d1:fa:dc:9b:ac:29:d9:18:07:53:16:
3b:8b:2d:ef:e0:2c:2e:9a:7e:88:71:23:ae:62:2d:
61:ea:fd:25:61:a1:96:c0:fd:54:64:71:73:4a:71:
47:18:54:21:53:69:cc:87:14:da:a7:49:96:a0:36:
b4:f2:72:80:2a:72:3e:29:f2:f2:f5:92:ef:cb:3c:
ec:a9:bf:29:d7:ca:bd:dc:b8:8c:95:58:66:70:23:
c4:b8:07:97:f8:00:b8:f4:77:6a:aa:81:55:5c:cb:
26:b0:35:1f:ef:ab:76:3d:6b:92:2b:b2:2b:fb:d2:
76:0d:f2:21:b4:22:1b:14:df:6f:1a:d1:e0:bb:8b:
4f:85:43:49:42:85:d5:db:0a:01:8d:05:fe:75:e9:
48:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:2F:5A:7C:51:4E:04:57:EA:DB:92:79:9C:BC:38:AD:10:29:A4:34
X509v3 Authority Key Identifier:
keyid:92:7A:F7:D4:07:F0:45:DB:EA:80:77:32:65:B0:4C:E5:74:D0:B7:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knr31AfwRdvqgHcyZbBM5XTQt-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:5a:bb:02:e7:cc:3e:6a:d1:08:70:d2:5c:55:a9:70:14:47:
c1:9b:4f:c9:b6:0a:01:77:df:06:ee:f9:ff:17:d1:1e:75:dd:
f6:a8:36:2a:5b:bc:ff:24:67:f7:2d:c0:ce:cc:58:c1:e9:cd:
34:94:2f:a0:5b:df:37:80:7f:6a:f0:e2:0c:ac:d6:b9:3d:51:
ca:ec:13:19:3b:f1:d5:60:a6:76:c9:82:3e:dc:bd:87:84:40:
78:0e:2c:bf:f5:2a:2d:d9:25:0a:cd:c8:38:e4:8c:2e:f4:a1:
2c:de:10:2b:0c:ff:23:e4:48:f5:87:ac:08:a4:a8:d2:e1:15:
8e:00:d1:ef:e3:9a:92:73:52:15:0c:3d:e1:fe:25:a6:b6:a2:
4f:c8:52:59:72:b5:67:e2:d4:14:5c:da:c4:59:16:9a:0d:e8:
6c:e2:06:2f:d0:b4:78:4a:47:82:07:4d:51:47:6f:d7:5d:e7:
17:00:96:06:d1:6e:75:b6:6d:9d:db:6a:ce:e7:14:4d:c1:ea:
ea:0c:9f:fa:6b:62:7b:69:25:1e:2d:95:bf:8a:5b:48:1d:ae:
ce:bc:15:fd:03:f7:92:12:63:a8:34:70:6b:5a:5b:9a:2d:fe:
fc:e3:19:a7:8f:8e:7c:f7:7b:bd:96:19:df:96:6c:55:81:af:
c1:6f:56:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:01 2025 by rpki-client