Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/c6f6e7-5a38-44b0-8807-775fc0d61fc5/1/knv-bp-2gEzZKLqBJy1mCFa1Pfc.mft
File: knv-bp-2gEzZKLqBJy1mCFa1Pfc.mft (raw, json)
Hash identifier: zkt5nSjRIOSFBhcfXJ9HIFYecD7tpGrcvJxDI0+w958=
Subject key identifier: 60:CE:7A:A5:40:65:FC:F9:47:D2:2B:31:1F:C0:65:CC:38:2C:CF:16
Authority key identifier: 92:7B:FE:6E:9F:B6:80:4C:D9:28:BA:81:27:2D:66:08:56:B5:3D:F7
Certificate issuer: /CN=927bfe6e9fb6804cd928ba81272d660856b53df7
Certificate serial: 01988355CBB40C15352C38E2549DEBF142B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knv-bp-2gEzZKLqBJy1mCFa1Pfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/c6f6e7-5a38-44b0-8807-775fc0d61fc5/1/knv-bp-2gEzZKLqBJy1mCFa1Pfc.mft
Manifest number: D3
Signing time: Thu 07 Aug 2025 07:01:34 +0000
Manifest this update: Thu 07 Aug 2025 07:01:34 +0000
Manifest next update: Fri 08 Aug 2025 07:01:34 +0000
Files and hashes: 1: knv-bp-2gEzZKLqBJy1mCFa1Pfc.crl (hash: 8bpovaiz4InnWqMwOczfCMx4xTPAfAiYJ//1VQbNax0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/c6f6e7-5a38-44b0-8807-775fc0d61fc5/1/knv-bp-2gEzZKLqBJy1mCFa1Pfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/c6f6e7-5a38-44b0-8807-775fc0d61fc5/1/knv-bp-2gEzZKLqBJy1mCFa1Pfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/knv-bp-2gEzZKLqBJy1mCFa1Pfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 07:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:55:cb:b4:0c:15:35:2c:38:e2:54:9d:eb:f1:42:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927bfe6e9fb6804cd928ba81272d660856b53df7
Validity
Not Before: Aug 7 07:01:34 2025 GMT
Not After : Aug 8 07:01:34 2025 GMT
Subject: CN=60ce7aa54065fcf947d22b311fc065cc382ccf16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:eb:d6:8f:40:9e:e5:f7:be:27:f9:75:f0:6c:
86:9a:8b:9d:bc:4d:d6:4f:7c:86:ce:63:a5:79:89:
00:0c:6e:83:11:1b:c6:e0:af:d6:cb:56:57:d2:6d:
42:ed:ad:8b:95:cf:19:c9:33:44:4f:6e:20:3c:f7:
ed:d9:ff:6e:3d:b6:48:ae:b9:93:93:9c:8a:9b:1e:
d1:33:ce:dc:f7:da:e8:a2:9a:fc:db:78:91:25:35:
02:74:ca:15:b5:b6:2c:7b:d8:e6:d3:0b:d8:29:b5:
21:fa:e7:9e:94:d1:d2:7e:af:a1:44:ac:6e:dc:a7:
69:4b:db:b9:46:98:35:dd:55:cf:ff:a2:05:e7:24:
cc:6e:69:b3:c9:c9:2c:79:74:3f:49:99:72:ed:b7:
bc:20:92:02:e2:ba:19:9b:76:3e:2a:de:54:65:95:
c1:c4:12:44:54:b0:74:ca:a0:39:67:e3:4b:10:58:
03:94:5f:a8:c7:db:86:17:54:54:cf:05:64:1c:1b:
e3:33:c8:0f:13:63:d7:11:15:9b:47:d0:47:17:62:
aa:1c:07:56:62:cf:35:ef:8f:fd:37:e1:7b:92:0b:
c6:7c:7a:21:36:67:c0:22:3e:86:7e:08:27:0f:9d:
f4:c9:90:25:8c:59:64:5b:e5:6b:db:25:31:40:cc:
2c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:CE:7A:A5:40:65:FC:F9:47:D2:2B:31:1F:C0:65:CC:38:2C:CF:16
X509v3 Authority Key Identifier:
keyid:92:7B:FE:6E:9F:B6:80:4C:D9:28:BA:81:27:2D:66:08:56:B5:3D:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knv-bp-2gEzZKLqBJy1mCFa1Pfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c6f6e7-5a38-44b0-8807-775fc0d61fc5/1/knv-bp-2gEzZKLqBJy1mCFa1Pfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c6f6e7-5a38-44b0-8807-775fc0d61fc5/1/knv-bp-2gEzZKLqBJy1mCFa1Pfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:96:a0:a4:fc:60:7a:ac:ff:82:2e:cf:16:23:24:ce:16:f9:
9a:07:4a:f4:42:29:fd:8c:8b:09:ad:1a:80:5e:e5:9d:4e:5d:
68:96:55:b2:8a:64:5f:c3:32:92:99:17:c0:d9:4a:98:fc:4a:
50:02:3a:9e:56:08:1c:bb:fb:9c:10:3a:63:5a:7f:cc:31:0c:
bc:a9:2b:33:92:cf:82:03:44:cb:b9:ff:8d:bc:cb:45:3f:b6:
9d:78:36:96:9e:da:e2:75:9c:ee:c5:f2:97:1d:e3:12:72:72:
01:c8:f7:5d:49:ab:5d:c0:f9:f6:68:b2:29:25:15:13:9e:46:
d8:09:4e:aa:94:d8:6b:ff:d8:e0:33:e8:a6:4f:14:fe:97:7c:
ae:48:4e:34:f4:57:92:2b:3d:80:d4:0d:0c:28:ef:2f:48:37:
4f:61:2d:6c:f6:c9:f9:95:5a:c8:62:72:59:30:d8:8c:7f:ac:
4b:7f:77:e5:ae:52:78:4a:07:61:41:65:a6:0e:c3:9f:f5:26:
92:25:b2:0e:4c:52:04:a1:21:d7:6a:4d:27:b1:dc:fb:4f:bc:
f1:0a:34:30:94:f1:2a:5b:ad:66:15:0e:2d:dc:a2:6a:dc:ce:
17:f7:77:94:91:75:f1:62:6b:5d:36:71:cf:70:20:6e:f0:53:
8a:0b:c9:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:09:18 2025 by rpki-client