Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.mft
File: kuDCRw6wpptO-lhbnLLAZ2ErN54.mft (raw, json)
Hash identifier: ajbb+kIb007q6g05kN3yl62oX4hoZ+lEdYhkO6QkqKc=
Subject key identifier: 9A:2E:7A:FA:67:92:B6:7E:49:C2:10:1A:76:64:33:99:01:80:E0:E1
Authority key identifier: 92:E0:C2:47:0E:B0:A6:9B:4E:FA:58:5B:9C:B2:C0:67:61:2B:37:9E
Certificate issuer: /CN=92e0c2470eb0a69b4efa585b9cb2c067612b379e
Certificate serial: 0198A0BAA882109FE9726D9D863EEBCEEAAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kuDCRw6wpptO-lhbnLLAZ2ErN54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.mft
Manifest number: 1631
Signing time: Wed 13 Aug 2025 00:00:43 +0000
Manifest this update: Wed 13 Aug 2025 00:00:43 +0000
Manifest next update: Thu 14 Aug 2025 00:00:43 +0000
Files and hashes: 1: PFjd2yWfyUqACNexTKNE7uw-CUw.roa (hash: 2N8aNvblU0PO6uAwaoOi3OFj+fZYGQD09CyRfcuaD9M=)
2: kuDCRw6wpptO-lhbnLLAZ2ErN54.crl (hash: wurWlWX31TyolbO9kRHjQsqsTWldAxVVI67CdA0cOtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.mft
rsync://rpki.ripe.net/repository/DEFAULT/kuDCRw6wpptO-lhbnLLAZ2ErN54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:ba:a8:82:10:9f:e9:72:6d:9d:86:3e:eb:ce:ea:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92e0c2470eb0a69b4efa585b9cb2c067612b379e
Validity
Not Before: Aug 13 00:00:43 2025 GMT
Not After : Aug 14 00:00:43 2025 GMT
Subject: CN=9a2e7afa6792b67e49c2101a766433990180e0e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:59:64:c6:b6:86:96:ae:4e:e7:8a:ac:d3:e6:
e7:4a:1b:70:e9:32:c7:fc:b2:2b:6e:b8:33:76:f7:
48:8e:88:e5:2c:ca:ff:b4:3c:16:a9:e3:b9:b5:7c:
d9:72:a2:46:8d:7a:aa:1f:70:ed:5a:cb:c1:28:19:
1b:7f:ff:bd:8c:f9:a2:d0:f7:be:03:0c:9d:67:d8:
60:26:c5:43:ac:2b:54:a1:0e:8c:81:22:b9:3d:67:
54:51:de:56:64:80:02:f7:2e:66:96:b6:bc:d7:30:
bf:f0:ad:b8:e7:6b:8c:d5:c2:fa:56:ba:ad:21:ed:
86:61:31:b1:09:53:ca:40:8d:4a:cb:6d:59:6d:e4:
82:9d:db:c3:4c:a7:67:80:27:d3:36:69:aa:36:4e:
64:e6:cc:76:ed:8c:9d:8e:ed:b2:de:48:ba:55:03:
d4:42:f7:01:11:f0:66:82:25:0f:9e:1b:20:3b:b8:
48:d8:b9:07:de:89:ab:9f:20:99:8d:96:19:0a:c2:
01:65:ab:e3:d4:78:5a:f1:0a:81:0a:d0:bb:3b:ee:
d1:f6:ad:ee:c4:72:8e:84:33:ec:4a:ed:83:f0:c9:
0b:e7:78:9c:9e:d3:f9:aa:84:b2:70:87:9e:7f:5f:
82:f5:26:e6:b0:8f:8c:1a:53:a2:f0:2f:38:f5:b2:
59:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:2E:7A:FA:67:92:B6:7E:49:C2:10:1A:76:64:33:99:01:80:E0:E1
X509v3 Authority Key Identifier:
keyid:92:E0:C2:47:0E:B0:A6:9B:4E:FA:58:5B:9C:B2:C0:67:61:2B:37:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kuDCRw6wpptO-lhbnLLAZ2ErN54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:67:07:63:ee:fb:68:6b:68:65:9f:ba:33:a4:d6:a7:ea:7a:
75:0c:92:fb:0d:d2:cf:40:24:ce:5c:0e:75:b0:bc:53:56:0d:
00:31:a8:6f:5e:ce:8e:8b:47:4e:97:ab:70:28:5a:a7:1b:5d:
f7:59:95:6a:6e:19:a5:94:10:ad:80:4c:fc:b1:71:74:c9:98:
ec:bb:b6:99:19:69:63:dd:c5:e3:61:45:db:ca:fd:3f:4b:18:
ae:08:da:91:43:c3:16:46:6f:2f:92:90:e7:22:36:87:6a:1c:
65:7e:e3:f9:55:c9:64:9e:64:10:d3:2e:28:b8:ca:9f:a6:5c:
04:5f:67:df:79:a4:96:05:5c:ce:06:b7:dd:13:27:19:55:85:
b5:3c:08:4b:85:35:2a:b1:24:3b:15:df:68:f6:39:ea:f0:da:
d1:41:43:fb:e1:c8:97:33:bf:79:e4:fa:6c:50:50:47:14:d5:
c8:13:f4:2b:86:aa:e9:e0:aa:be:af:69:d2:84:73:36:99:40:
e4:76:73:fb:19:4f:65:18:25:91:bd:e7:b6:18:23:4c:5f:cf:
bd:2d:fb:61:84:ca:f2:b6:3c:c0:63:2e:93:81:01:1b:e5:97:
a1:cd:0f:8f:c8:89:53:9d:b2:e9:d2:39:a6:c9:be:ac:f7:c8:
8c:42:ab:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:28:03 2025 by rpki-client