Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft
File: knr31AfwRdvqgHcyZbBM5XTQt-M.mft (raw, json)
Hash identifier: TFRJ6Oz2A4yioL5haeQ5tmv+SdyM2Xcbqwqs3gjZU/0=
Subject key identifier: 04:C1:FB:A6:DF:0A:6D:6F:D4:E2:59:B1:07:9F:E2:20:96:B6:13:DF
Authority key identifier: 92:7A:F7:D4:07:F0:45:DB:EA:80:77:32:65:B0:4C:E5:74:D0:B7:E3
Certificate issuer: /CN=927af7d407f045dbea80773265b04ce574d0b7e3
Certificate serial: 01987374210BACF494E1419A96255152C5CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knr31AfwRdvqgHcyZbBM5XTQt-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft
Manifest number: 0B0F
Signing time: Mon 04 Aug 2025 05:00:46 +0000
Manifest this update: Mon 04 Aug 2025 05:00:46 +0000
Manifest next update: Tue 05 Aug 2025 05:00:46 +0000
Files and hashes: 1: ZHzFDinK1k80ggnxUxtsbupidkM.roa (hash: yg5fYgvuSW1mcbtxUsNzoaC3gDNZ2ZnNC0pEO7y0Ebs=)
2: knr31AfwRdvqgHcyZbBM5XTQt-M.crl (hash: lijHmNLFIm6IxMKklCe6yTklv84KXUz+ydIgFlSBajM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/knr31AfwRdvqgHcyZbBM5XTQt-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:21:0b:ac:f4:94:e1:41:9a:96:25:51:52:c5:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927af7d407f045dbea80773265b04ce574d0b7e3
Validity
Not Before: Aug 4 05:00:46 2025 GMT
Not After : Aug 5 05:00:46 2025 GMT
Subject: CN=04c1fba6df0a6d6fd4e259b1079fe22096b613df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:90:42:df:1a:a9:99:00:10:d8:27:77:3d:3a:
22:ec:83:e4:28:f9:bf:60:82:45:92:34:c9:3f:6b:
0f:6a:b0:cf:a4:85:1c:1c:20:e8:4c:f0:f3:77:14:
90:37:1c:02:c0:67:cd:8b:4a:ff:fe:7c:94:42:0c:
0c:d2:8f:ec:60:85:a0:4a:55:62:0c:b8:90:9f:68:
ae:f5:a2:76:af:6e:c7:f2:f9:b1:40:43:13:a0:25:
97:b7:68:03:c9:f4:3e:4b:0e:8d:40:7f:61:cb:9d:
d5:4a:ac:40:4a:f9:4a:2b:3c:df:7a:80:df:ed:44:
f6:a0:a2:c4:e0:ee:d4:03:33:a4:6f:9a:17:e4:19:
f1:e0:54:32:86:39:6f:d6:b7:72:c0:81:1d:54:bf:
31:0a:c8:c9:e3:7b:54:8e:a3:81:44:6e:f1:56:4c:
16:8c:70:77:03:25:c2:bc:7a:10:31:32:64:02:78:
7e:0b:6e:ce:d9:46:c2:0e:53:aa:99:b2:0e:58:90:
84:03:7c:eb:7e:d3:d4:2b:4a:ca:70:ea:46:b1:1e:
77:fa:73:89:ad:87:60:3e:18:ee:1e:d0:fd:25:37:
b1:56:37:26:83:8c:ea:13:92:85:be:61:29:63:4e:
04:c2:89:b7:17:e3:7c:bf:0f:b6:fc:a8:50:1c:45:
64:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:C1:FB:A6:DF:0A:6D:6F:D4:E2:59:B1:07:9F:E2:20:96:B6:13:DF
X509v3 Authority Key Identifier:
keyid:92:7A:F7:D4:07:F0:45:DB:EA:80:77:32:65:B0:4C:E5:74:D0:B7:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knr31AfwRdvqgHcyZbBM5XTQt-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:5f:27:74:03:35:bb:2d:70:ad:b4:23:e3:1d:0e:4f:12:ee:
23:43:f3:4d:36:03:3a:8f:c5:d4:ed:b1:66:f7:c3:9d:cd:91:
b7:15:b5:9e:e2:1b:d5:d9:c5:43:25:3d:35:37:5a:fb:54:9c:
a6:86:0a:1a:09:5d:e8:7c:42:76:c4:fe:c4:ef:7e:20:56:e3:
44:9c:50:ba:c4:b7:55:48:0f:f2:47:6f:f9:31:8c:8f:c7:fd:
2d:7b:49:46:9f:71:e9:14:ef:28:16:7b:9e:cf:11:3b:66:0b:
c7:09:ee:ff:c3:83:08:11:e4:20:45:ae:c9:94:49:5b:56:0f:
e6:86:f1:10:e6:68:99:4f:a2:3a:cb:28:b2:87:cc:47:1b:93:
53:da:5d:10:1f:49:72:66:b9:3c:c6:29:29:ec:79:6a:e2:a5:
52:fe:22:78:13:f8:31:ab:bf:d2:30:98:fb:56:77:ae:75:00:
08:9b:9e:b5:e7:ed:62:e4:34:13:ec:a7:b1:df:d9:32:5e:0c:
c3:74:03:1d:0e:b8:0d:2f:59:c9:39:5f:3f:73:f8:ca:04:58:
97:e2:41:5a:93:3a:15:2b:20:a8:1e:b9:a6:3b:40:e2:68:05:
95:ce:74:37:31:90:10:57:50:97:9c:be:a7:b6:21:91:e9:7b:
e4:71:71:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:15:43 2025 by rpki-client