Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/ku_2FiUC6jtS_YyjrhCNE9a_9lI.mft
File: ku_2FiUC6jtS_YyjrhCNE9a_9lI.mft (raw, json)
Hash identifier: /RzedgfiHi472JmXXY97LdBrmsdqLpwJ1w+nOVk8Euc=
Subject key identifier: 7A:98:D7:15:BA:84:78:E0:27:4C:4A:2E:99:E7:E4:FB:CB:A4:60:A9
Authority key identifier: 92:EF:F6:16:25:02:EA:3B:52:FD:8C:A3:AE:10:8D:13:D6:BF:F6:52
Certificate issuer: /CN=92eff6162502ea3b52fd8ca3ae108d13d6bff652
Certificate serial: 019A4EF5B54415B7060987693DB5DD4B4FA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ku_2FiUC6jtS_YyjrhCNE9a_9lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/ku_2FiUC6jtS_YyjrhCNE9a_9lI.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 13:01:56 +0000
Manifest this update: Tue 04 Nov 2025 13:01:56 +0000
Manifest next update: Wed 05 Nov 2025 13:01:56 +0000
Files and hashes: 1: ku_2FiUC6jtS_YyjrhCNE9a_9lI.crl (hash: nie7e52PbPItFK9xEpfXd0WKTbiZAqRXkYeZU0ROfiI=)
2: vIUD6qLiZhlDA8IvWgGD4RFZTgQ.roa (hash: 8f4c2O05sapdQ4wcaKqtNByBFKGfiB5rQ1o7fR58j44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/ku_2FiUC6jtS_YyjrhCNE9a_9lI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/ku_2FiUC6jtS_YyjrhCNE9a_9lI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ku_2FiUC6jtS_YyjrhCNE9a_9lI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:b5:44:15:b7:06:09:87:69:3d:b5:dd:4b:4f:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92eff6162502ea3b52fd8ca3ae108d13d6bff652
Validity
Not Before: Nov 4 13:01:56 2025 GMT
Not After : Nov 5 13:01:56 2025 GMT
Subject: CN=7a98d715ba8478e0274c4a2e99e7e4fbcba460a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:90:05:51:12:4d:18:39:50:52:5a:05:8b:47:
4c:db:c2:72:6a:ee:c6:ac:72:94:95:06:33:c0:cf:
12:5d:5f:fc:7e:bf:aa:c0:cc:07:5e:32:f4:78:b7:
27:a6:d8:06:5e:b6:80:ce:f6:dd:48:a9:b1:95:a1:
d7:8d:9d:23:5e:1d:8f:32:bb:bb:a6:cc:f3:0e:ce:
cb:4f:25:2a:2e:9d:2a:e8:87:df:02:2b:ce:85:cd:
11:b6:38:21:11:b8:be:33:f8:02:b4:15:c0:91:90:
03:0d:a8:97:e1:71:9d:61:5a:ed:a5:4f:ef:99:51:
04:5d:93:e8:4d:c2:5d:fc:31:63:e4:e7:9d:d8:8e:
43:ff:46:07:85:2a:d0:a3:45:d2:53:c7:4d:d6:1d:
2f:b8:db:80:6c:a7:e9:09:92:6d:20:8c:44:7f:5e:
15:59:82:7e:8c:72:47:c8:34:cc:a1:98:7d:fa:7c:
4f:af:3c:d8:78:fe:c3:c0:5e:6a:ee:ab:c7:36:9a:
f8:5e:8c:ae:ff:7d:43:db:78:69:91:ec:c7:1b:ab:
2e:07:de:e3:42:8f:dc:e0:44:65:12:d4:4c:a2:f9:
7e:f9:b4:02:d8:5d:60:ae:c7:b9:c5:97:86:20:e2:
e9:2b:1d:ab:aa:4f:ea:29:da:7b:a4:14:93:f4:00:
3c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:98:D7:15:BA:84:78:E0:27:4C:4A:2E:99:E7:E4:FB:CB:A4:60:A9
X509v3 Authority Key Identifier:
keyid:92:EF:F6:16:25:02:EA:3B:52:FD:8C:A3:AE:10:8D:13:D6:BF:F6:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ku_2FiUC6jtS_YyjrhCNE9a_9lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/ku_2FiUC6jtS_YyjrhCNE9a_9lI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/ku_2FiUC6jtS_YyjrhCNE9a_9lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:77:0d:9d:a3:ef:1e:60:f8:3c:68:62:e6:9e:d0:23:b7:39:
3f:78:f9:78:ae:b9:37:48:04:f7:f2:01:d8:13:57:ff:55:9b:
36:f5:ce:bf:b9:fa:c2:8b:1c:51:13:a6:3c:2f:58:72:66:7e:
92:b4:c9:c4:ff:25:e6:bf:e4:f3:90:99:7c:7d:e3:8e:55:2f:
ce:57:59:d5:48:88:ec:30:3e:14:1c:5e:2d:30:93:1e:72:cb:
b3:ad:c0:2b:a1:1b:4f:63:05:2a:f5:c7:a5:55:33:3d:ef:3b:
b9:ca:f4:fd:03:bc:96:6c:02:55:96:5e:39:3d:62:41:e2:d9:
bb:25:15:be:30:38:4a:48:c1:42:55:92:7f:18:81:da:04:5e:
98:fc:e0:f8:54:16:1f:5d:fa:4e:ae:49:f1:6e:ae:e6:a3:78:
be:9a:09:53:36:2d:97:4d:8f:e1:65:94:1f:74:eb:b5:32:e7:
f9:35:14:84:75:cd:a8:d6:74:5e:db:5b:36:2b:ff:08:dd:8b:
8f:8f:e1:07:fc:24:45:63:e9:87:bd:21:36:e4:35:34:36:7a:
71:ee:46:fd:ef:01:10:40:56:52:ba:91:62:d3:0e:c1:2f:4d:
d7:97:97:6f:51:73:95:73:be:53:fd:e7:fd:58:cf:9a:b8:6e:
e0:30:e7:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:15:53 2025 by rpki-client