Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.mft
File: knp_OqYbIkEYI14yAR7ey-P2pkk.mft (raw, json)
Hash identifier: qe8ME7C2PAikfw3G8c/IFzbi3UgUvznH/puTAzaT7vc=
Subject key identifier: 13:A0:36:A8:C6:27:73:AB:86:CF:13:2D:D8:47:0E:FD:32:AF:82:2A
Authority key identifier: 92:7A:7F:3A:A6:1B:22:41:18:23:5E:32:01:1E:DE:CB:E3:F6:A6:49
Certificate issuer: /CN=927a7f3aa61b224118235e32011edecbe3f6a649
Certificate serial: 019A541B29786091D2BF2E643D35BCB0B308
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knp_OqYbIkEYI14yAR7ey-P2pkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.mft
Manifest number: 02B8
Signing time: Wed 05 Nov 2025 13:00:57 +0000
Manifest this update: Wed 05 Nov 2025 13:00:57 +0000
Manifest next update: Thu 06 Nov 2025 13:00:57 +0000
Files and hashes: 1: 2lpFexxe3_Ac4dcdM3bYGAow3NU.roa (hash: p5V0q0cPZ8lwGeilVxXZ3Q9iOjoW9+XEWeFjk4FsqTc=)
2: knp_OqYbIkEYI14yAR7ey-P2pkk.crl (hash: j3oeYt2t02+tNNrVHArANIGmymmjPx2inr555Q6iJCE=)
3: vvR3iZhxksZaf5ZtlUFG8sHgTwA.roa (hash: brocX5Nu7+UsTDQrzkSzsbDZjaym0Lw9E9mvwUm3aco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/knp_OqYbIkEYI14yAR7ey-P2pkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:1b:29:78:60:91:d2:bf:2e:64:3d:35:bc:b0:b3:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927a7f3aa61b224118235e32011edecbe3f6a649
Validity
Not Before: Nov 5 13:00:57 2025 GMT
Not After : Nov 6 13:00:57 2025 GMT
Subject: CN=13a036a8c62773ab86cf132dd8470efd32af822a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7b:4d:24:b0:e6:92:e9:a6:e7:94:28:52:c9:
b1:0f:81:f7:7f:d9:88:27:8f:a2:25:a0:eb:8c:66:
e8:66:c1:ff:c5:9b:b5:75:cf:c8:27:04:b3:d7:3e:
df:87:90:5f:d4:63:83:f6:d4:43:19:e4:54:38:8b:
c9:df:ee:0b:41:44:b6:41:c2:c8:72:fe:ce:54:ae:
72:b4:ca:9c:b6:82:22:59:47:c4:1c:83:c1:5e:65:
19:1f:53:4f:90:e0:13:b6:fa:0c:b5:15:13:32:ae:
51:0b:be:ee:b6:7f:3c:ef:d8:42:34:91:52:47:59:
cd:55:ea:54:a1:fb:5a:22:e3:19:55:8f:6b:bc:e7:
ea:d2:7e:45:72:0c:3b:ce:37:f6:66:15:3e:23:46:
31:2f:1e:c9:2d:ab:29:5f:38:c1:c6:b3:49:c3:69:
35:a0:b1:db:19:40:0e:aa:33:49:51:a3:9d:24:7a:
66:30:25:c4:1b:3a:8c:e6:70:af:d0:a3:64:9c:26:
05:81:c3:0a:63:b7:3c:11:ff:6d:6e:98:4b:14:a7:
91:07:a0:9d:67:c1:4f:22:18:da:20:20:95:16:99:
0b:5f:c7:87:46:ab:01:bf:f0:6e:b4:2b:06:b0:94:
45:ac:37:10:58:a0:7c:04:41:ad:39:aa:4f:d1:f6:
fd:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:A0:36:A8:C6:27:73:AB:86:CF:13:2D:D8:47:0E:FD:32:AF:82:2A
X509v3 Authority Key Identifier:
keyid:92:7A:7F:3A:A6:1B:22:41:18:23:5E:32:01:1E:DE:CB:E3:F6:A6:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knp_OqYbIkEYI14yAR7ey-P2pkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:58:9e:56:b0:f2:af:dd:f1:39:74:60:c9:ff:3f:cd:a5:6d:
a7:ea:0c:41:72:6c:e7:72:17:2b:54:4f:7a:dc:85:ca:3a:39:
a1:04:72:9f:47:37:b0:b8:9d:d2:df:cb:d4:40:2b:6b:60:c2:
aa:32:37:bf:b8:5e:1a:f6:d8:e8:4e:65:22:31:3c:c7:ed:67:
ff:e6:f6:12:8e:8f:02:bc:58:3f:2f:69:72:0c:8d:34:26:2f:
90:64:0a:df:e5:99:ec:50:f9:ac:c1:cd:3e:d2:63:e2:04:56:
fe:1b:87:64:8f:7e:1c:b9:95:33:33:63:ce:8d:5d:a4:15:cb:
b3:73:2a:0a:f0:2a:ba:1f:0e:a3:30:46:00:b1:7d:85:82:fa:
29:0a:a4:ce:28:ee:36:58:4f:bc:17:91:a3:1f:9c:9c:2e:65:
f9:2b:8f:4b:a9:70:ca:ef:04:d0:ff:26:eb:a1:3e:54:1b:6b:
ae:ab:74:6c:91:e1:ab:d3:44:6c:88:23:7f:91:5b:23:4d:2d:
57:aa:2d:40:ec:1b:b0:45:59:d2:3d:02:00:7b:7c:2b:b5:c7:
b6:7d:fc:45:61:f1:c1:59:0c:f4:b2:ad:bf:2a:ea:e3:15:5d:
32:1a:d5:f0:6f:40:3b:06:82:fa:1b:7b:d0:5b:50:02:64:7b:
ad:61:15:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:45:10 2025 by rpki-client