Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft
File: knr31AfwRdvqgHcyZbBM5XTQt-M.mft (raw, json)
Hash identifier: UmOMwDZzJ54olVee23+pJlaOKNcwV33up8BPGiazsnI=
Subject key identifier: D7:31:63:52:4E:2C:BC:8B:87:78:1D:63:26:F0:DE:BF:52:DC:22:C0
Authority key identifier: 92:7A:F7:D4:07:F0:45:DB:EA:80:77:32:65:B0:4C:E5:74:D0:B7:E3
Certificate issuer: /CN=927af7d407f045dbea80773265b04ce574d0b7e3
Certificate serial: 01976EBE00754C7675F4FEA217C3A161C39A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knr31AfwRdvqgHcyZbBM5XTQt-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft
Manifest number: 0A88
Signing time: Sat 14 Jun 2025 14:00:34 +0000
Manifest this update: Sat 14 Jun 2025 14:00:34 +0000
Manifest next update: Sun 15 Jun 2025 14:00:34 +0000
Files and hashes: 1: ZHzFDinK1k80ggnxUxtsbupidkM.roa (hash: yg5fYgvuSW1mcbtxUsNzoaC3gDNZ2ZnNC0pEO7y0Ebs=)
2: knr31AfwRdvqgHcyZbBM5XTQt-M.crl (hash: bfl9uVx3V38drhLfeX2g36vvVn0lqATiKUB4vOx5a5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/knr31AfwRdvqgHcyZbBM5XTQt-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:be:00:75:4c:76:75:f4:fe:a2:17:c3:a1:61:c3:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927af7d407f045dbea80773265b04ce574d0b7e3
Validity
Not Before: Jun 14 14:00:34 2025 GMT
Not After : Jun 15 14:00:34 2025 GMT
Subject: CN=d73163524e2cbc8b87781d6326f0debf52dc22c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ac:19:07:70:50:55:38:b9:1c:ad:08:d0:aa:
30:e6:84:fb:dd:90:5c:f2:c3:02:97:d9:d9:7f:58:
7c:7f:7b:b3:2c:97:f4:fc:5c:78:10:65:9f:23:85:
31:fd:cb:2c:c5:c3:b8:f1:7b:fb:a2:71:35:9e:62:
ce:e7:08:35:40:e1:78:31:fb:af:0c:0b:1d:19:a8:
f6:14:88:db:94:fb:95:9c:2e:96:d4:01:7a:d7:cf:
72:88:05:f3:8b:d1:da:0d:c4:3e:09:2f:cc:93:d3:
da:e7:6f:98:76:2c:d0:9b:38:ca:2c:26:af:ef:ac:
7c:ef:d8:1e:13:8e:2c:52:0c:69:38:b8:a2:2b:53:
74:fa:a1:2f:f0:4f:26:ed:da:d5:1a:95:7c:61:7f:
88:e3:70:b7:b0:16:6b:fa:ca:69:08:e7:30:42:63:
67:1d:03:0c:33:77:49:af:4d:53:12:63:36:6f:9c:
de:16:3f:e1:54:9a:53:cb:4b:48:f2:b6:80:e0:6f:
64:7c:e1:80:84:46:2d:b7:74:15:d5:08:30:8f:08:
65:cf:82:e1:51:ce:76:0b:4d:03:4d:a4:dd:e0:12:
75:7d:cf:bd:ac:0a:c2:61:41:25:9e:30:7f:6d:dd:
4a:90:8e:7d:2a:c4:b0:15:14:22:36:5d:09:1a:bf:
31:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:31:63:52:4E:2C:BC:8B:87:78:1D:63:26:F0:DE:BF:52:DC:22:C0
X509v3 Authority Key Identifier:
keyid:92:7A:F7:D4:07:F0:45:DB:EA:80:77:32:65:B0:4C:E5:74:D0:B7:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knr31AfwRdvqgHcyZbBM5XTQt-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:a8:68:39:fc:f3:bb:f6:fd:e0:92:4b:64:1a:08:7e:93:43:
a4:a5:03:d2:d2:51:76:72:58:7d:0a:e9:ba:e5:9e:d6:6e:2a:
81:42:7e:22:85:e1:5b:ec:87:ac:78:0f:35:3c:e4:27:b4:f9:
9b:a1:cf:dd:17:df:11:29:ab:33:68:cb:79:c9:47:91:8b:22:
91:92:d7:d8:0a:77:63:a0:49:c0:f8:a3:a4:60:18:c6:82:8e:
e9:04:1b:02:0c:50:e9:3b:38:07:04:e9:4e:93:f6:4a:4c:6b:
0b:62:81:27:8b:fe:fb:7c:03:19:d2:21:ee:48:bf:fc:0d:62:
f6:89:f8:cd:8f:ec:10:6a:a9:55:4f:57:3d:d9:97:89:76:2b:
3d:a0:e4:2f:76:ab:70:86:3e:f4:04:7a:66:a2:66:a9:a2:82:
e8:e0:37:65:2c:0b:b8:be:d2:90:be:d2:14:c1:8f:93:be:2b:
8d:5c:7a:9a:21:34:cc:e7:1e:13:a5:08:4b:d1:44:b5:28:b0:
e5:05:00:ae:aa:30:ab:9c:9d:26:cb:af:4a:c2:aa:55:1a:aa:
62:06:7f:4e:06:2e:b7:2d:88:72:2a:c0:a7:1a:4a:96:70:5a:
98:14:0f:c0:09:e1:6d:16:8b:a2:2f:e0:26:a7:38:a7:fc:ab:
b2:2a:cd:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:15:01 2025 by rpki-client