Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ac3e3b-8dcc-40ac-9dab-7e97650d0f86/1/kurmrUuydi4hlOXfUc0NLNPmnKo.mft
File: kurmrUuydi4hlOXfUc0NLNPmnKo.mft (raw, json)
Hash identifier: 6VkqUnbUKaBXpG4vztqAnb/Z0fkfOhtaIsKIAZxbKBw=
Subject key identifier: 2B:B5:60:3F:6D:78:1A:1F:A4:00:4F:FA:DC:9E:7C:A1:1E:4E:A9:78
Authority key identifier: 92:EA:E6:AD:4B:B2:76:2E:21:94:E5:DF:51:CD:0D:2C:D3:E6:9C:AA
Certificate issuer: /CN=92eae6ad4bb2762e2194e5df51cd0d2cd3e69caa
Certificate serial: 019A522CBF83FECE9FCF874925A3F1CA8EA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kurmrUuydi4hlOXfUc0NLNPmnKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ac3e3b-8dcc-40ac-9dab-7e97650d0f86/1/kurmrUuydi4hlOXfUc0NLNPmnKo.mft
Manifest number: 0168
Signing time: Wed 05 Nov 2025 04:00:55 +0000
Manifest this update: Wed 05 Nov 2025 04:00:55 +0000
Manifest next update: Thu 06 Nov 2025 04:00:55 +0000
Files and hashes: 1: BtdE401kz_cCVR9U9U273HfIpS0.roa (hash: hobg2e+hs3cfn/PR8D8QxYlBTsEoPnFPoAQ4C018gyE=)
2: N-56zynZQkjMVarS-v8wIftEaAc.roa (hash: TmBPb/l+t9dFI9/svQZsOGHsNkbPcnVxIX8nhP74Z3o=)
3: kurmrUuydi4hlOXfUc0NLNPmnKo.crl (hash: OjR5jT33VDItRF5Myzjj93W+S8PAPqaoSajVOgM6LX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ac3e3b-8dcc-40ac-9dab-7e97650d0f86/1/kurmrUuydi4hlOXfUc0NLNPmnKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ac3e3b-8dcc-40ac-9dab-7e97650d0f86/1/kurmrUuydi4hlOXfUc0NLNPmnKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/kurmrUuydi4hlOXfUc0NLNPmnKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:bf:83:fe:ce:9f:cf:87:49:25:a3:f1:ca:8e:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92eae6ad4bb2762e2194e5df51cd0d2cd3e69caa
Validity
Not Before: Nov 5 04:00:55 2025 GMT
Not After : Nov 6 04:00:55 2025 GMT
Subject: CN=2bb5603f6d781a1fa4004ffadc9e7ca11e4ea978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:17:44:b6:cd:a3:f0:d8:1b:6e:99:6e:43:f9:
cf:f3:c8:c0:6a:28:5e:ea:53:c6:03:b3:28:7f:9d:
8a:da:69:97:56:86:47:63:f7:58:b3:fc:7e:94:1e:
9a:7b:8f:40:d0:c7:3d:8d:e4:ec:73:ff:1c:56:32:
a2:c9:8d:f1:68:48:bf:e4:58:47:c8:5f:73:e3:9b:
71:66:9e:d2:05:4c:e4:6b:c0:47:38:db:0b:33:51:
ac:1b:a0:33:fa:63:e7:a7:80:01:b6:fd:71:88:7b:
4e:63:d5:c1:70:de:ce:24:c9:d6:02:c7:22:04:22:
75:ab:b3:54:b2:22:32:60:ae:65:60:90:74:65:df:
c9:0d:b9:23:e2:ba:32:a5:81:6b:0a:94:e7:f5:cb:
98:5c:0b:81:c9:07:9b:97:5d:9d:3f:87:f1:2f:31:
20:58:4c:d8:d4:c8:91:59:d9:f7:5f:cd:55:4c:b9:
8b:30:f3:a0:0a:d8:36:05:a6:18:78:57:b2:2e:5c:
59:9b:e9:a4:9d:f1:4e:0e:38:e3:62:c3:af:a5:90:
7f:17:c8:b8:4f:d1:e0:eb:ea:4a:87:7f:f6:2e:ab:
f9:42:65:88:8b:32:09:0d:0a:47:eb:e9:03:1b:1c:
19:2a:56:86:ed:0d:18:06:a8:18:88:b3:29:31:84:
55:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B5:60:3F:6D:78:1A:1F:A4:00:4F:FA:DC:9E:7C:A1:1E:4E:A9:78
X509v3 Authority Key Identifier:
keyid:92:EA:E6:AD:4B:B2:76:2E:21:94:E5:DF:51:CD:0D:2C:D3:E6:9C:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kurmrUuydi4hlOXfUc0NLNPmnKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ac3e3b-8dcc-40ac-9dab-7e97650d0f86/1/kurmrUuydi4hlOXfUc0NLNPmnKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ac3e3b-8dcc-40ac-9dab-7e97650d0f86/1/kurmrUuydi4hlOXfUc0NLNPmnKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:48:15:35:1b:a2:60:93:59:01:4f:7b:11:7f:1c:88:26:fb:
67:78:bc:98:d6:91:66:af:91:94:7a:24:dd:57:28:74:d9:d5:
a3:db:c4:2c:54:9b:38:2b:2f:42:23:9e:48:68:44:4c:f7:b0:
0b:28:19:76:8e:21:2b:19:d3:34:e0:75:53:84:2f:54:98:a5:
68:03:fb:72:d9:db:08:f1:af:61:f8:e8:cb:44:f4:2e:d9:57:
c6:17:68:de:76:85:c3:b7:99:bf:a7:cc:9b:0d:20:da:73:0e:
28:05:54:2c:a1:d5:84:56:be:65:78:b9:fb:20:a8:8d:ba:66:
ea:a5:70:c5:1f:aa:0f:2d:d5:ca:48:b3:51:14:8c:70:ef:71:
a2:ab:55:a9:30:bc:35:2e:c9:05:d9:7e:18:0d:2f:fa:ad:ae:
3a:c3:1d:21:5f:d2:76:1f:ae:76:d8:e1:c0:89:61:4f:99:c7:
18:29:c6:ee:f8:cf:d6:5e:ca:86:2e:ec:c7:ab:d7:00:7d:9a:
55:67:f1:e0:18:46:d5:75:cc:aa:1d:c0:38:94:16:ad:aa:3e:
4a:ef:d8:62:f5:54:81:b8:3e:f1:8d:e3:34:73:93:25:72:26:
15:ee:33:e3:68:d7:96:fc:2b:2d:eb:32:38:f8:d0:ad:71:cd:
61:4a:10:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpSLL+D/s6fz4dJJaPxyo6mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZWFlNmFkNGJiMjc2MmUyMTk0ZTVkZjUxY2QwZDJjZDNl
NjljYWEwHhcNMjUxMTA1MDQwMDU1WhcNMjUxMTA2MDQwMDU1WjAzMTEwLwYDVQQD
EygyYmI1NjAzZjZkNzgxYTFmYTQwMDRmZmFkYzllN2NhMTFlNGVhOTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBdEts2j8NgbbpluQ/nP88jAaihe
6lPGA7Mof52K2mmXVoZHY/dYs/x+lB6ae49A0Mc9jeTsc/8cVjKiyY3xaEi/5FhH
yF9z45txZp7SBUzka8BHONsLM1GsG6Az+mPnp4ABtv1xiHtOY9XBcN7OJMnWAsci
BCJ1q7NUsiIyYK5lYJB0Zd/JDbkj4roypYFrCpTn9cuYXAuByQebl12dP4fxLzEg
WEzY1MiRWdn3X81VTLmLMPOgCtg2BaYYeFeyLlxZm+mknfFODjjjYsOvpZB/F8i4
T9Hg6+pKh3/2Lqv5QmWIizIJDQpH6+kDGxwZKlaG7Q0YBqgYiLMpMYRVXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCu1YD9teBofpABP+tyefKEeTql4MB8GA1UdIwQY
MBaAFJLq5q1LsnYuIZTl31HNDSzT5pyqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3VybXJVdXlkaTRobE9YZlVjME5MTlBtbktvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9hYzNlM2ItOGRjYy00MGFjLTlkYWIt
N2U5NzY1MGQwZjg2LzEva3VybXJVdXlkaTRobE9YZlVjME5MTlBtbktvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9hYzNlM2ItOGRjYy00MGFjLTlkYWItN2U5NzY1MGQwZjg2
LzEva3VybXJVdXlkaTRobE9YZlVjME5MTlBtbktvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQEgVNRui
YJNZAU97EX8ciCb7Z3i8mNaRZq+RlHok3VcodNnVo9vELFSbOCsvQiOeSGhETPew
CygZdo4hKxnTNOB1U4QvVJilaAP7ctnbCPGvYfjoy0T0LtlXxhdo3naFw7eZv6fM
mw0g2nMOKAVULKHVhFa+ZXi5+yCojbpm6qVwxR+qDy3VykizURSMcO9xoqtVqTC8
NS7JBdl+GA0v+q2uOsMdIV/Sdh+udtjhwIlhT5nHGCnG7vjP1l7Khi7sx6vXAH2a
VWfx4BhG1XXMqh3AOJQWrao+Su/YYvVUgbg+8Y3jNHOTJXImFe4z42jXlvwrLesy
OPjQrXHNYUoQQQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:54:06 2025 by rpki-client