Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.mft
File: knp_OqYbIkEYI14yAR7ey-P2pkk.mft (raw, json)
Hash identifier: OqVB0DQEiCpTAqBTh8qDStP2cq3SNUVj2KcF5UUE184=
Subject key identifier: E8:21:3F:D6:80:B9:3F:17:3F:4A:F8:01:DE:3B:88:E3:A3:8D:B1:50
Authority key identifier: 92:7A:7F:3A:A6:1B:22:41:18:23:5E:32:01:1E:DE:CB:E3:F6:A6:49
Certificate issuer: /CN=927a7f3aa61b224118235e32011edecbe3f6a649
Certificate serial: 0198733DC6462322B5A7F26E9E1F02692464
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knp_OqYbIkEYI14yAR7ey-P2pkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.mft
Manifest number: 01BF
Signing time: Mon 04 Aug 2025 04:01:24 +0000
Manifest this update: Mon 04 Aug 2025 04:01:24 +0000
Manifest next update: Tue 05 Aug 2025 04:01:24 +0000
Files and hashes: 1: 2lpFexxe3_Ac4dcdM3bYGAow3NU.roa (hash: p5V0q0cPZ8lwGeilVxXZ3Q9iOjoW9+XEWeFjk4FsqTc=)
2: knp_OqYbIkEYI14yAR7ey-P2pkk.crl (hash: nCHLrzEuyWM93oTbxqocOeu2nwhzjXnGBsVVilJ954c=)
3: vvR3iZhxksZaf5ZtlUFG8sHgTwA.roa (hash: brocX5Nu7+UsTDQrzkSzsbDZjaym0Lw9E9mvwUm3aco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/knp_OqYbIkEYI14yAR7ey-P2pkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:c6:46:23:22:b5:a7:f2:6e:9e:1f:02:69:24:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927a7f3aa61b224118235e32011edecbe3f6a649
Validity
Not Before: Aug 4 04:01:24 2025 GMT
Not After : Aug 5 04:01:24 2025 GMT
Subject: CN=e8213fd680b93f173f4af801de3b88e3a38db150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:66:64:b4:a0:50:f1:43:0a:19:10:15:ca:91:
cf:d2:ab:d6:31:5e:36:db:98:61:ac:d9:45:94:59:
4e:30:27:84:af:16:64:01:d9:86:79:ef:2c:f4:87:
20:bd:d7:28:7f:59:f4:6a:aa:05:bf:76:bb:81:0f:
b9:a3:9e:7f:c0:71:eb:05:6c:6d:f3:18:30:94:83:
13:f8:34:c7:db:50:f5:22:d6:31:86:e1:e1:bd:77:
bf:88:5f:72:c6:2c:f2:19:bb:01:10:62:a7:c8:28:
90:0d:8c:d7:83:82:63:cb:98:aa:54:d4:80:18:05:
bf:47:ae:b3:fd:ba:36:93:c9:89:fb:7e:1f:9a:d4:
82:14:a6:f5:32:ba:b4:ee:f2:f3:9e:a5:bb:7b:28:
e7:65:70:fc:6f:0e:6c:fd:0e:0d:ea:f9:47:15:5b:
05:ae:6f:73:cc:cb:b9:c5:c0:34:17:b0:d8:dc:f6:
35:a3:45:73:ff:9b:2e:01:c9:b1:00:29:43:1e:ed:
a3:2c:f1:6a:58:b8:df:6b:f9:e5:2a:f8:a4:ab:ab:
fb:63:25:d5:56:35:64:71:18:b0:1a:9a:5e:47:9b:
68:85:b7:05:fb:d3:8c:12:14:f8:e3:a8:11:ff:c6:
38:3c:f6:ed:a3:6c:b4:b7:54:94:3b:14:9a:04:a7:
d2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:21:3F:D6:80:B9:3F:17:3F:4A:F8:01:DE:3B:88:E3:A3:8D:B1:50
X509v3 Authority Key Identifier:
keyid:92:7A:7F:3A:A6:1B:22:41:18:23:5E:32:01:1E:DE:CB:E3:F6:A6:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knp_OqYbIkEYI14yAR7ey-P2pkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:d3:b0:aa:62:38:52:f3:40:97:38:55:11:ab:0b:59:b9:4c:
67:c1:e0:bf:2b:a1:6e:60:e3:c5:7f:37:f7:a6:a6:84:0d:f7:
2f:6f:10:4b:bb:81:a0:3f:c2:cb:91:ec:97:ad:3e:be:0c:e5:
2e:74:fb:24:9d:8d:1e:3f:a1:d5:d5:6f:ab:71:40:87:98:4d:
c9:31:c9:18:da:fd:03:61:dd:18:66:fd:94:d1:b0:e8:02:0a:
15:88:50:7b:df:c8:23:8d:f4:a3:b6:58:c2:2d:6d:47:51:0e:
e6:ba:18:f9:d9:a9:c0:e2:0c:d3:54:6b:aa:8c:50:0b:1f:8b:
16:13:a3:1e:e0:e1:cf:e6:06:e1:36:b0:3e:8a:ec:51:db:26:
65:45:13:f7:b6:ef:81:6d:c8:0a:47:28:af:a6:19:dd:9a:27:
d2:04:76:e9:e0:fa:d5:68:fc:72:42:90:53:c8:54:c7:06:30:
f6:f2:19:85:60:a0:a4:c9:4b:a3:d5:4d:16:df:b1:65:8c:3a:
fa:da:e4:6c:48:56:26:6b:77:c4:c7:82:b9:e4:a4:9f:24:49:
95:24:d5:bd:7c:d7:be:4b:87:25:d2:ae:55:d8:71:b3:a1:8a:
61:44:0a:82:c9:d2:17:42:53:06:a3:0f:56:cb:03:4f:7b:54:
e3:97:77:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:25 2025 by rpki-client