Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft
File: KuK_S6R9cV5T4us9AS0_y80bDsA.mft (raw, json)
Hash identifier: FF2lFnNiAUoD2hOoksZ+rk8LLNBN/R7Ydx3qXeKNpaU=
Subject key identifier: E1:38:25:FB:3E:AE:93:7C:E0:88:24:A2:99:A7:C0:B3:CA:BF:18:B5
Authority key identifier: 2A:E2:BF:4B:A4:7D:71:5E:53:E2:EB:3D:01:2D:3F:CB:CD:1B:0E:C0
Certificate issuer: /CN=2ae2bf4ba47d715e53e2eb3d012d3fcbcd1b0ec0
Certificate serial: 0198819E393BF77D3FCD6D2485B56291B919
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KuK_S6R9cV5T4us9AS0_y80bDsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft
Manifest number: 60
Signing time: Wed 06 Aug 2025 23:01:26 +0000
Manifest this update: Wed 06 Aug 2025 23:01:26 +0000
Manifest next update: Thu 07 Aug 2025 23:01:26 +0000
Files and hashes: 1: ImNYtfmA17VPvuzFmVELDdKaFPo.roa (hash: qTcKtkAu4/tozlJ7sg/B8RXSaVxn+Vv1tRQIyPPwO20=)
2: KuK_S6R9cV5T4us9AS0_y80bDsA.crl (hash: rqMsCMCdQjf+i+bpX2pFbYziqVckkPa5zD1B8tKhd+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KuK_S6R9cV5T4us9AS0_y80bDsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:9e:39:3b:f7:7d:3f:cd:6d:24:85:b5:62:91:b9:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ae2bf4ba47d715e53e2eb3d012d3fcbcd1b0ec0
Validity
Not Before: Aug 6 23:01:26 2025 GMT
Not After : Aug 7 23:01:26 2025 GMT
Subject: CN=e13825fb3eae937ce08824a299a7c0b3cabf18b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:31:9d:8f:fd:5d:aa:10:6d:42:4b:20:e8:4b:
ea:93:31:eb:4c:85:cd:99:bd:d1:e3:56:db:bf:a1:
ca:58:a5:53:a8:e4:73:9f:e8:e3:d4:1e:7b:3f:00:
0a:c3:d3:84:b5:90:92:f3:e9:55:2c:73:a5:59:2e:
33:1a:20:07:c6:22:48:6f:b2:06:a6:b0:4c:e6:4a:
38:4b:29:c0:cd:7e:8f:0a:67:86:57:b6:2a:67:86:
db:8f:2d:e1:16:2c:31:8e:d5:d0:98:8c:62:80:0b:
e4:ae:ca:20:42:7d:89:87:2e:33:11:8a:b3:15:2c:
ca:39:44:a1:af:d8:10:0f:11:d4:c6:70:10:96:b2:
3d:d0:06:9f:0f:ff:6b:18:34:ec:7c:67:6e:d4:de:
c6:7e:3a:a6:49:49:6b:90:cc:ee:63:af:b7:d5:d6:
c6:45:c6:fd:0c:5e:cc:d6:af:00:bf:1d:e2:f6:08:
0c:6d:50:a2:b2:03:4c:7e:9c:9f:af:27:da:04:da:
19:51:bd:df:2b:3f:ca:36:28:91:bf:34:ec:aa:9b:
87:e9:8f:3e:d8:bb:52:35:d3:bd:6d:62:ee:df:3a:
7e:2f:e8:1d:12:27:a4:46:c4:84:a9:f7:34:d5:7b:
71:9f:ab:18:32:60:d5:b7:e1:5b:e8:87:eb:db:5f:
ee:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:38:25:FB:3E:AE:93:7C:E0:88:24:A2:99:A7:C0:B3:CA:BF:18:B5
X509v3 Authority Key Identifier:
keyid:2A:E2:BF:4B:A4:7D:71:5E:53:E2:EB:3D:01:2D:3F:CB:CD:1B:0E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KuK_S6R9cV5T4us9AS0_y80bDsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:8e:cc:46:e6:80:b8:c1:b5:d5:ae:37:77:3f:f9:4c:75:d4:
4e:78:24:67:64:2a:9d:52:28:b8:ea:0d:18:28:fa:b5:1e:25:
09:d3:4a:80:10:6e:51:3c:97:3a:b7:b2:38:7b:f3:92:c3:31:
84:26:16:a0:4b:08:6d:3c:28:69:8c:fc:5a:fc:51:68:7b:3b:
b2:8d:e5:96:07:33:41:de:38:a2:08:2a:b8:56:10:b3:17:95:
17:7b:c4:9e:1c:1c:74:77:da:56:6a:a8:c8:37:72:e7:0f:8e:
3a:1e:34:55:4a:f6:80:3f:50:ab:23:58:ec:a8:36:8d:90:d6:
9d:66:3f:bc:09:02:ee:09:cd:ad:60:53:b0:b9:3a:c7:6c:76:
e3:54:d0:4e:7b:ad:7c:b1:c9:22:95:b7:da:68:d4:a3:0a:75:
5e:1e:e5:f6:a1:3c:7c:f2:90:f3:e1:2b:0f:f0:5f:8f:1a:41:
bf:2e:a6:18:8a:20:15:25:75:e4:e2:94:28:d4:10:b7:8b:94:
6e:3b:71:10:d2:56:31:ee:61:a2:91:ac:65:8f:d3:02:0c:c6:
42:9a:ee:da:cf:a2:3f:ee:19:42:00:fe:40:ad:d3:03:51:ef:
87:ec:b5:fe:6c:25:81:57:6e:6f:a8:77:40:07:f8:37:5a:f8:
0b:81:49:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:45:11 2025 by rpki-client