Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/kuwQUNOpMgq58M4rNloJfuQTSyQ.mft
File: kuwQUNOpMgq58M4rNloJfuQTSyQ.mft (raw, json)
Hash identifier: 4F/D6DaQmA+A3giB/OQHsiLLxW3d1S0dUlZt/Fsvq/k=
Subject key identifier: 2E:9C:53:78:8D:9F:C1:78:AD:B8:C4:32:C5:24:D3:B8:96:6D:3E:20
Authority key identifier: 92:EC:10:50:D3:A9:32:0A:B9:F0:CE:2B:36:5A:09:7E:E4:13:4B:24
Certificate issuer: /CN=92ec1050d3a9320ab9f0ce2b365a097ee4134b24
Certificate serial: 019896A4B77CFD28E1FB7D71B3D3F252484E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kuwQUNOpMgq58M4rNloJfuQTSyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/kuwQUNOpMgq58M4rNloJfuQTSyQ.mft
Manifest number: 135F
Signing time: Mon 11 Aug 2025 01:00:33 +0000
Manifest this update: Mon 11 Aug 2025 01:00:33 +0000
Manifest next update: Tue 12 Aug 2025 01:00:33 +0000
Files and hashes: 1: kuwQUNOpMgq58M4rNloJfuQTSyQ.crl (hash: 3bQEBA9Kr/MBgVKAO8VDbsPCv8fsE0c3QNvfIZAhE1k=)
2: rcP662t9iU7wmmRm1Yh7D85Kb-4.roa (hash: hNPhEZEICgt5or5b1hN6hdrsIiWH59T8KP+7AQfFMXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/kuwQUNOpMgq58M4rNloJfuQTSyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/kuwQUNOpMgq58M4rNloJfuQTSyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kuwQUNOpMgq58M4rNloJfuQTSyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a4:b7:7c:fd:28:e1:fb:7d:71:b3:d3:f2:52:48:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92ec1050d3a9320ab9f0ce2b365a097ee4134b24
Validity
Not Before: Aug 11 01:00:33 2025 GMT
Not After : Aug 12 01:00:33 2025 GMT
Subject: CN=2e9c53788d9fc178adb8c432c524d3b8966d3e20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:61:cf:d3:dc:8d:de:e3:26:57:7c:6b:16:9b:
45:50:e1:11:1e:29:c1:60:3a:e1:d5:4c:10:7b:67:
b6:d9:6e:9d:3b:ed:9d:7a:8d:52:43:25:30:04:13:
79:fe:b1:cf:12:f2:37:54:9c:06:6b:81:87:4d:00:
6a:89:19:71:55:30:ba:9b:e7:40:d0:70:2b:a0:a0:
ef:d7:10:2b:be:a7:86:be:05:8b:c8:f0:fc:d3:1c:
19:8b:e6:36:95:3c:21:66:5e:91:4c:c0:3b:d5:8a:
07:0e:1e:99:40:83:00:9b:35:96:bc:30:de:9a:81:
40:80:91:24:df:02:a7:04:be:8c:3a:4d:62:07:a2:
ef:36:76:66:35:6b:c8:4b:c5:1c:0b:56:b7:02:48:
b2:92:37:fb:fb:a6:85:85:67:fd:f5:5c:45:89:cf:
0e:36:09:78:50:1f:af:6d:3b:77:af:e4:b1:5e:76:
15:a6:f6:06:6c:ba:8c:fc:1f:f7:09:2d:23:8b:83:
27:c3:9f:da:75:83:c7:0e:93:18:7d:85:4f:cf:50:
df:2c:85:ad:ef:b3:96:98:12:01:b0:1c:28:18:05:
30:b3:84:c7:ce:a0:fb:e0:25:31:5d:e7:ed:f1:57:
d1:96:0a:2c:d0:fe:2b:6c:ef:79:d5:c7:cf:0f:6f:
b7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:9C:53:78:8D:9F:C1:78:AD:B8:C4:32:C5:24:D3:B8:96:6D:3E:20
X509v3 Authority Key Identifier:
keyid:92:EC:10:50:D3:A9:32:0A:B9:F0:CE:2B:36:5A:09:7E:E4:13:4B:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kuwQUNOpMgq58M4rNloJfuQTSyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/kuwQUNOpMgq58M4rNloJfuQTSyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/kuwQUNOpMgq58M4rNloJfuQTSyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:cf:be:d3:ca:f3:fd:c3:ad:04:c7:f8:17:2b:0e:30:30:ea:
5d:5f:57:32:a7:37:6a:0f:df:72:f0:a5:ba:12:81:53:be:7b:
9a:32:fa:58:d0:04:80:d0:24:6f:5c:7c:20:77:ca:b6:59:e1:
ae:b2:ab:21:8e:df:ef:8f:43:7a:65:87:ee:13:e4:ec:f2:90:
b9:4f:86:b1:81:b4:98:e6:71:d2:a2:33:db:d8:c5:b7:11:5d:
ba:7e:92:6c:56:fd:9c:5b:f6:6e:8d:b1:37:16:a0:8b:5c:25:
fc:37:34:57:ce:fb:15:a4:3d:cc:6b:fa:db:67:90:18:54:e8:
e3:25:91:bc:7a:16:78:b4:c3:83:b8:87:cf:cd:c5:79:b8:47:
4c:95:d8:72:69:fc:67:bf:4e:ff:63:83:a1:c0:06:35:e2:99:
a6:3d:13:d5:8a:33:78:a7:68:3c:11:0d:92:88:3e:b5:37:3c:
29:a7:64:9d:6f:04:ca:fd:8e:3c:e6:dd:59:5e:d2:56:46:37:
d7:a0:7c:d0:27:5d:84:5e:83:69:da:d2:99:62:85:6b:3f:02:
5b:68:52:dc:e9:dd:3e:eb:e6:53:f0:71:4d:91:c5:f6:a2:a4:
ad:3a:b0:4b:e1:4b:03:44:8d:e0:9e:bd:99:be:19:95:8e:39:
f3:54:38:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiWpLd8/Sjh+31xs9PyUkhOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZWMxMDUwZDNhOTMyMGFiOWYwY2UyYjM2NWEwOTdlZTQx
MzRiMjQwHhcNMjUwODExMDEwMDMzWhcNMjUwODEyMDEwMDMzWjAzMTEwLwYDVQQD
EygyZTljNTM3ODhkOWZjMTc4YWRiOGM0MzJjNTI0ZDNiODk2NmQzZTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2HP09yN3uMmV3xrFptFUOERHinB
YDrh1UwQe2e22W6dO+2deo1SQyUwBBN5/rHPEvI3VJwGa4GHTQBqiRlxVTC6m+dA
0HAroKDv1xArvqeGvgWLyPD80xwZi+Y2lTwhZl6RTMA71YoHDh6ZQIMAmzWWvDDe
moFAgJEk3wKnBL6MOk1iB6LvNnZmNWvIS8UcC1a3Akiykjf7+6aFhWf99VxFic8O
Ngl4UB+vbTt3r+SxXnYVpvYGbLqM/B/3CS0ji4Mnw5/adYPHDpMYfYVPz1DfLIWt
77OWmBIBsBwoGAUws4THzqD74CUxXeft8VfRlgos0P4rbO951cfPD2+3oQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC6cU3iNn8F4rbjEMsUk07iWbT4gMB8GA1UdIwQY
MBaAFJLsEFDTqTIKufDOKzZaCX7kE0skMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3V3UVVOT3BNZ3E1OE00ck5sb0pmdVFUU3lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9mNTE2ZjYtZDVhMC00MDg2LTk0ZjIt
YWJkNGM1YzliMzc0LzEva3V3UVVOT3BNZ3E1OE00ck5sb0pmdVFUU3lRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9mNTE2ZjYtZDVhMC00MDg2LTk0ZjItYWJkNGM1YzliMzc0
LzEva3V3UVVOT3BNZ3E1OE00ck5sb0pmdVFUU3lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlc++08rz
/cOtBMf4FysOMDDqXV9XMqc3ag/fcvCluhKBU757mjL6WNAEgNAkb1x8IHfKtlnh
rrKrIY7f749DemWH7hPk7PKQuU+GsYG0mOZx0qIz29jFtxFdun6SbFb9nFv2bo2x
Nxagi1wl/Dc0V877FaQ9zGv622eQGFTo4yWRvHoWeLTDg7iHz83FebhHTJXYcmn8
Z79O/2ODocAGNeKZpj0T1YozeKdoPBENkog+tTc8KadknW8Eyv2OPObdWV7SVkY3
16B80CddhF6DadrSmWKFaz8CW2hS3OndPuvmU/BxTZHF9qKkrTqwS+FLA0SN4J69
mb4ZlY4581Q4qA==
-----END CERTIFICATE-----
Generated at Mon Aug 11 07:26:49 2025 by rpki-client