Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.mft
File: kuDCRw6wpptO-lhbnLLAZ2ErN54.mft (raw, json)
Hash identifier: +rhvO2Rbvv2AAZ5KXCuK8Lp7bQLgwi6aebLcEMYybSs=
Subject key identifier: C7:3B:AD:6B:F5:66:8B:6D:68:86:08:D5:C2:C9:4B:A0:13:25:75:9A
Authority key identifier: 92:E0:C2:47:0E:B0:A6:9B:4E:FA:58:5B:9C:B2:C0:67:61:2B:37:9E
Certificate issuer: /CN=92e0c2470eb0a69b4efa585b9cb2c067612b379e
Certificate serial: 019A5119EF480105FA0BAD697B12994AF53C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kuDCRw6wpptO-lhbnLLAZ2ErN54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 23:00:45 +0000
Manifest this update: Tue 04 Nov 2025 23:00:45 +0000
Manifest next update: Wed 05 Nov 2025 23:00:45 +0000
Files and hashes: 1: PFjd2yWfyUqACNexTKNE7uw-CUw.roa (hash: 2N8aNvblU0PO6uAwaoOi3OFj+fZYGQD09CyRfcuaD9M=)
2: kuDCRw6wpptO-lhbnLLAZ2ErN54.crl (hash: snrRaiRkWEpefXmKQo2GvCnB9OmC632QRfp0bRWl+Yk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.mft
rsync://rpki.ripe.net/repository/DEFAULT/kuDCRw6wpptO-lhbnLLAZ2ErN54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:ef:48:01:05:fa:0b:ad:69:7b:12:99:4a:f5:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92e0c2470eb0a69b4efa585b9cb2c067612b379e
Validity
Not Before: Nov 4 23:00:45 2025 GMT
Not After : Nov 5 23:00:45 2025 GMT
Subject: CN=c73bad6bf5668b6d688608d5c2c94ba01325759a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:9e:81:81:73:40:53:a6:0a:71:e9:91:30:6c:
04:68:ab:15:c7:8d:e8:a3:fa:ad:be:37:20:db:36:
85:30:56:79:36:8f:28:64:01:08:f6:14:40:6c:4b:
be:92:bb:42:ce:11:8e:b8:37:e4:e0:c6:e3:93:4f:
f0:46:d5:1b:bf:b7:f4:5f:3e:d8:db:0f:01:58:d0:
05:42:a1:da:b7:ab:1d:15:67:e9:89:c6:dc:fc:ec:
ea:80:06:4f:39:75:88:7f:75:0e:9d:d6:15:0a:8d:
2e:38:91:4b:64:4f:98:1d:d1:fd:f8:a2:b2:f0:c9:
55:cc:71:c0:5e:7c:12:4e:16:fc:ca:05:aa:88:f5:
66:a6:4d:40:86:de:01:6e:ec:4c:64:45:ce:8c:e0:
99:7b:ae:54:df:79:0c:57:61:b7:c7:23:67:be:d8:
71:02:2a:69:1b:18:fe:88:c6:92:b3:17:a7:e0:72:
bc:20:bb:0f:f6:68:8c:ad:8b:ab:5e:89:e3:75:e3:
9d:48:fe:dd:f9:14:3d:26:26:03:7d:b6:99:65:20:
21:44:01:5c:80:36:be:d6:d8:40:bd:a9:24:5d:8f:
b5:74:d4:3a:f5:0c:18:e2:44:64:0b:6a:43:51:ac:
70:f3:ab:ef:a6:1c:0d:a8:43:08:98:0f:28:b9:68:
c4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:3B:AD:6B:F5:66:8B:6D:68:86:08:D5:C2:C9:4B:A0:13:25:75:9A
X509v3 Authority Key Identifier:
keyid:92:E0:C2:47:0E:B0:A6:9B:4E:FA:58:5B:9C:B2:C0:67:61:2B:37:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kuDCRw6wpptO-lhbnLLAZ2ErN54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:38:90:cc:3b:09:b9:92:33:ff:3b:ae:10:bc:e3:61:e6:15:
24:e7:d5:1e:6c:8b:77:8f:5a:5b:d4:92:3d:a7:26:3b:f1:cc:
13:10:c9:36:77:ee:1d:e7:59:c1:17:a2:fc:e8:e2:c0:03:2d:
15:e2:0d:23:1a:50:6b:96:dc:66:58:fe:4b:0e:f5:c3:d2:fb:
fc:c5:bc:36:7d:fa:9a:e7:9b:6c:88:72:ef:7e:f9:a6:a3:64:
f3:47:2f:3e:8b:88:b5:6c:7c:ea:83:54:ba:02:68:86:39:67:
1a:03:7a:41:38:1c:e4:dd:dd:df:1b:43:d7:3c:a9:fe:c3:69:
37:f7:da:dd:d7:1a:f4:45:0a:f8:89:26:d6:4f:37:0c:d4:70:
30:21:6c:83:1a:87:e0:4e:6a:b0:57:14:00:c0:fd:e8:f3:4a:
ab:50:02:77:72:f4:6b:53:dc:a8:83:8d:3f:c2:02:a2:80:ec:
0b:d8:e7:fb:ba:03:2b:52:4a:56:0a:6b:da:05:cf:7c:73:84:
dd:9f:a7:dc:02:05:84:c5:36:32:8c:94:c5:9f:99:0d:83:5f:
cd:b4:72:16:61:07:13:61:23:e3:9a:f3:b4:c0:9f:c0:73:b0:
66:0d:73:ee:0d:39:5e:d3:f3:9f:db:21:e2:4e:f9:66:66:8e:
38:ef:18:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:24:54 2025 by rpki-client