Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/c6f6e7-5a38-44b0-8807-775fc0d61fc5/1/knv-bp-2gEzZKLqBJy1mCFa1Pfc.mft
File:                     knv-bp-2gEzZKLqBJy1mCFa1Pfc.mft (raw, json)
Hash identifier:          9kWYn6SMEEQeTOq1QrNX/RQ3dt+SOjTX7r+DhKnMcM0=
Subject key identifier:   C8:96:BF:06:4A:5E:EE:90:50:80:52:ED:91:BF:67:D4:58:D9:99:40
Authority key identifier: 92:7B:FE:6E:9F:B6:80:4C:D9:28:BA:81:27:2D:66:08:56:B5:3D:F7
Certificate issuer:       /CN=927bfe6e9fb6804cd928ba81272d660856b53df7
Certificate serial:       01976929B27C60E1E369F0B830F29B38ED12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/knv-bp-2gEzZKLqBJy1mCFa1Pfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/c6f6e7-5a38-44b0-8807-775fc0d61fc5/1/knv-bp-2gEzZKLqBJy1mCFa1Pfc.mft
Manifest number:          41
Signing time:             Fri 13 Jun 2025 12:00:29 +0000
Manifest this update:     Fri 13 Jun 2025 12:00:29 +0000
Manifest next update:     Sat 14 Jun 2025 12:00:29 +0000
Files and hashes:         1: knv-bp-2gEzZKLqBJy1mCFa1Pfc.crl (hash: 5bbscmzfWk6XWpD/gSsTVCtcuNd47hRcGgs32zlC1vs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/c6f6e7-5a38-44b0-8807-775fc0d61fc5/1/knv-bp-2gEzZKLqBJy1mCFa1Pfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/c6f6e7-5a38-44b0-8807-775fc0d61fc5/1/knv-bp-2gEzZKLqBJy1mCFa1Pfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/knv-bp-2gEzZKLqBJy1mCFa1Pfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:29:b2:7c:60:e1:e3:69:f0:b8:30:f2:9b:38:ed:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927bfe6e9fb6804cd928ba81272d660856b53df7
        Validity
            Not Before: Jun 13 12:00:29 2025 GMT
            Not After : Jun 14 12:00:29 2025 GMT
        Subject: CN=c896bf064a5eee90508052ed91bf67d458d99940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:81:26:8d:f6:de:cf:ab:ed:75:94:2b:44:e0:
                    12:47:2d:73:a8:47:e4:ae:10:91:2f:40:cc:a5:59:
                    47:44:25:30:75:cd:d9:a4:a4:c2:2e:ea:fa:2c:69:
                    03:8b:11:c8:83:43:73:35:cc:73:50:9c:84:ba:45:
                    53:76:33:af:38:ab:a5:ea:03:ba:18:51:29:5e:93:
                    1b:ad:05:c3:ac:d5:a6:f6:bf:01:11:21:cf:fe:73:
                    fb:02:07:15:bc:27:b1:13:a7:b5:69:89:48:04:97:
                    5a:42:fc:54:fb:f1:bb:5b:8f:71:4c:6c:ed:f8:aa:
                    56:6f:8c:90:33:46:f9:90:f6:52:6b:7e:25:23:f3:
                    30:68:f1:68:3c:cd:10:80:22:54:ac:28:e2:7f:57:
                    77:08:e8:d6:c1:21:7b:0d:c7:fe:51:7b:80:29:d8:
                    64:d6:9c:ab:c1:92:44:c1:60:d8:f2:c4:fe:9f:11:
                    7e:35:75:f7:c9:a9:bb:f5:dd:4f:78:0f:28:48:6b:
                    c4:25:ff:91:e0:e2:17:df:10:72:ae:ae:fa:42:ca:
                    5d:22:75:76:ef:09:63:68:8b:78:8b:f4:aa:0b:db:
                    74:7f:f5:13:e4:fd:56:3d:4c:f2:57:7f:1e:a6:99:
                    a2:95:d2:71:bd:7c:7a:0f:2e:11:47:0a:4a:7c:c0:
                    6c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:96:BF:06:4A:5E:EE:90:50:80:52:ED:91:BF:67:D4:58:D9:99:40
            X509v3 Authority Key Identifier:
                keyid:92:7B:FE:6E:9F:B6:80:4C:D9:28:BA:81:27:2D:66:08:56:B5:3D:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knv-bp-2gEzZKLqBJy1mCFa1Pfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c6f6e7-5a38-44b0-8807-775fc0d61fc5/1/knv-bp-2gEzZKLqBJy1mCFa1Pfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c6f6e7-5a38-44b0-8807-775fc0d61fc5/1/knv-bp-2gEzZKLqBJy1mCFa1Pfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:39:a1:69:5b:ac:41:09:69:c3:33:28:07:a5:70:f2:27:b8:
         7e:82:05:0e:b6:58:c6:d3:6c:11:17:8f:56:d3:cf:ee:87:21:
         5d:ff:9f:05:f2:7a:ea:2e:46:7f:95:87:dc:3f:d5:6e:a4:e9:
         73:f5:31:00:75:1b:43:3b:99:ad:bc:8b:13:a5:09:4b:28:e6:
         5d:f1:46:8b:7f:5c:a0:16:c2:61:4e:4e:3c:8a:c1:4b:ea:41:
         4a:97:4b:e7:a0:e0:fa:5a:c0:2d:14:ed:4c:2e:0a:d5:4c:97:
         23:de:d9:fa:fb:83:3c:56:fd:80:93:d0:4b:eb:ed:65:03:d6:
         1a:4a:f5:5a:0c:9b:ca:12:c6:3c:32:65:32:f1:c3:74:81:47:
         4d:6a:59:c1:f2:0c:59:be:09:18:5c:a0:82:fb:a5:23:1f:19:
         c4:d5:e4:42:21:f9:c0:26:08:4c:f3:3a:28:aa:df:41:9a:80:
         f8:d2:87:9b:1d:06:c7:2d:7a:60:c6:95:b6:cb:e0:11:be:c0:
         8b:df:8f:26:6e:19:85:af:23:9e:09:45:94:c5:b0:6b:55:9f:
         39:bc:13:5e:22:4d:ba:2b:de:6a:53:c7:4a:ca:4b:8c:d8:a1:
         f6:95:82:ae:35:de:b0:34:bd:b6:dc:4f:04:c4:a8:07:c3:d3:
         2e:9a:af:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:10:50 2025 by rpki-client