Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
File: KsPteUra-5HLgalp64qbKQX-4uw.mft (raw, json)
Hash identifier: L/v7X6FMMq3lSp8dhF5yLiSxuXauxLDppjo03eDLiy4=
Subject key identifier: 39:02:27:40:F0:70:DF:07:59:E2:38:F3:24:59:F8:7F:E4:69:09:F2
Authority key identifier: 2A:C3:ED:79:4A:DA:FB:91:CB:81:A9:69:EB:8A:9B:29:05:FE:E2:EC
Certificate issuer: /CN=2ac3ed794adafb91cb81a969eb8a9b2905fee2ec
Certificate serial: 0198838C8A643D2C57250C1DC3AFF5BE78BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
Manifest number: 1621
Signing time: Thu 07 Aug 2025 08:01:22 +0000
Manifest this update: Thu 07 Aug 2025 08:01:22 +0000
Manifest next update: Fri 08 Aug 2025 08:01:22 +0000
Files and hashes: 1: KsPteUra-5HLgalp64qbKQX-4uw.crl (hash: jzOeQxVRLmvWNB92Ifk7dLs2oxhtd0Vtq06Mi7/1KGU=)
2: PKyx0DcFoAagRLDeVRH7IggDBvs.roa (hash: pNDjxNhK4qz1Wc21dlphpRgyPK79NSu66uAh/Cd4/LQ=)
3: zxynKoaXLk9CSCbEuR1SMnhOszM.roa (hash: 0C0maO3P6rLabRCNi4Fq6yr5sjK9+mFynQgMmbGpRUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:8c:8a:64:3d:2c:57:25:0c:1d:c3:af:f5:be:78:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3ed794adafb91cb81a969eb8a9b2905fee2ec
Validity
Not Before: Aug 7 08:01:22 2025 GMT
Not After : Aug 8 08:01:22 2025 GMT
Subject: CN=39022740f070df0759e238f32459f87fe46909f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f5:da:dc:f4:e7:f5:0d:b3:14:f6:01:bb:55:
06:87:89:82:2d:78:ad:9a:0b:7b:e5:50:eb:4e:d0:
cf:05:2e:7d:2d:ed:e0:69:b1:49:58:77:75:a7:91:
af:41:a7:c8:38:40:1b:eb:5e:12:95:f7:c9:4c:e8:
a8:78:fe:24:e7:bf:46:e3:2c:89:98:b5:d3:a4:b7:
37:11:8b:58:09:b1:b0:58:7d:77:2a:f7:8f:ae:67:
e0:0c:0a:f7:8d:03:a8:27:2a:d9:fd:45:52:cc:6d:
9b:59:ad:98:a5:0e:8e:77:8c:2a:f5:da:ed:10:7f:
13:89:f7:30:70:83:99:f6:be:68:0e:bd:66:e3:a7:
89:6e:dc:f7:8a:80:12:93:b0:7b:dd:a8:f5:cd:60:
49:65:bd:f9:03:2a:f1:59:83:42:0d:0b:60:0f:e0:
a5:1f:26:a6:dc:bc:ba:00:27:cb:e7:5a:d8:17:2d:
fb:fd:2c:d3:db:26:9d:8d:1f:d2:c0:28:53:a7:57:
e1:91:23:10:e9:54:f1:1e:70:be:63:ac:40:e4:32:
c6:f8:9f:21:06:a5:80:2f:aa:68:30:6f:54:3e:bc:
be:9f:6e:00:a4:e0:c1:13:81:be:73:41:df:9b:a5:
ae:e8:0e:1c:72:8b:11:53:0c:cc:61:7e:7a:75:95:
59:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:02:27:40:F0:70:DF:07:59:E2:38:F3:24:59:F8:7F:E4:69:09:F2
X509v3 Authority Key Identifier:
keyid:2A:C3:ED:79:4A:DA:FB:91:CB:81:A9:69:EB:8A:9B:29:05:FE:E2:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:2e:29:00:ce:7f:05:57:fd:b4:05:2a:e6:fa:20:64:cd:eb:
55:3d:b0:d2:6a:b8:35:82:fc:ec:75:0b:80:0d:e4:82:40:d0:
f6:09:90:11:d1:f3:41:05:d3:81:ff:f5:bf:18:5d:5f:23:4a:
7b:2e:c0:32:b6:e8:d0:d8:99:73:63:1f:ed:ce:6f:75:51:f5:
94:83:e2:73:f6:95:f8:e2:34:9f:3f:64:d8:fc:0d:9a:44:b9:
82:e4:b8:16:4e:92:72:2e:49:26:aa:02:69:59:67:ec:e0:90:
34:3c:f2:58:15:25:8e:0a:9b:08:e9:b8:88:6b:34:da:1d:3e:
06:a9:97:35:b3:5e:f8:f1:88:8c:97:f6:5a:98:05:1d:88:16:
22:25:b2:f3:18:f3:95:fa:be:e0:8d:8a:51:2b:f6:49:10:a0:
03:94:0b:90:75:fa:1c:c1:1e:f5:f0:09:30:de:62:ee:0d:5b:
6d:42:33:d8:04:49:1a:b3:e0:a5:1a:65:9b:e4:dd:e0:a7:f1:
0c:6b:3c:24:9a:d4:e4:70:37:ca:4f:a0:94:d5:2f:c1:fa:89:
e6:85:83:78:53:5a:01:7a:01:c0:85:61:05:db:50:c2:3f:99:
e3:97:ad:03:08:ae:a9:9c:45:7c:93:78:fd:2c:00:d5:48:ad:
66:e5:a0:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 14:51:31 2025 by rpki-client