Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/58394a-8cf6-4b11-becb-3ba69131458b/1/kuwpVHbKHZNNsE0AJE_FB5ucl0g.mft
File: kuwpVHbKHZNNsE0AJE_FB5ucl0g.mft (raw, json)
Hash identifier: a91dqrrdikdD+fEJ85HiIIAW7ZcRu6se+UiAQ9l3BsY=
Subject key identifier: 71:0F:2E:09:A2:29:30:DD:F1:9D:A0:4F:22:F2:30:80:FD:5A:17:EC
Authority key identifier: 92:EC:29:54:76:CA:1D:93:4D:B0:4D:00:24:4F:C5:07:9B:9C:97:48
Certificate issuer: /CN=92ec295476ca1d934db04d00244fc5079b9c9748
Certificate serial: 0198861FCE757057BB6F4958777E263572AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kuwpVHbKHZNNsE0AJE_FB5ucl0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/58394a-8cf6-4b11-becb-3ba69131458b/1/kuwpVHbKHZNNsE0AJE_FB5ucl0g.mft
Manifest number: 1231
Signing time: Thu 07 Aug 2025 20:01:27 +0000
Manifest this update: Thu 07 Aug 2025 20:01:27 +0000
Manifest next update: Fri 08 Aug 2025 20:01:27 +0000
Files and hashes: 1: kuwpVHbKHZNNsE0AJE_FB5ucl0g.crl (hash: mxm8N+Yuk3HrRlbTqLiIrAYh8n5JALKcgkdCYj7B6QQ=)
2: sZ85FeVfKS3RqKqG5NUDvn--qlo.roa (hash: gTaYc3X+G3Jkjg5kUdF0n9TPsOguK/WjYif95eZGzOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/58394a-8cf6-4b11-becb-3ba69131458b/1/kuwpVHbKHZNNsE0AJE_FB5ucl0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/58394a-8cf6-4b11-becb-3ba69131458b/1/kuwpVHbKHZNNsE0AJE_FB5ucl0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/kuwpVHbKHZNNsE0AJE_FB5ucl0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:13:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:86:1f:ce:75:70:57:bb:6f:49:58:77:7e:26:35:72:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92ec295476ca1d934db04d00244fc5079b9c9748
Validity
Not Before: Aug 7 20:01:27 2025 GMT
Not After : Aug 8 20:01:27 2025 GMT
Subject: CN=710f2e09a22930ddf19da04f22f23080fd5a17ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6d:6d:55:51:e4:fe:82:40:0e:47:78:09:9a:
1b:be:4d:1f:d4:34:38:73:03:7a:b2:2c:05:07:b2:
d2:7d:02:4a:8a:5c:d2:6a:2e:6c:f0:42:b7:5c:af:
eb:a7:fd:71:11:60:ba:f6:35:d3:24:4a:90:1f:3b:
d1:b0:3e:a3:2b:71:ad:be:d5:7e:3e:da:88:4a:53:
4b:7b:f3:a6:07:7d:91:c5:dd:6e:aa:1c:e0:ac:e9:
1f:f9:ce:4d:eb:24:71:99:d9:d6:fe:ee:46:72:0e:
37:e8:7e:28:2d:a4:87:7d:f8:bf:61:17:be:92:e9:
8d:94:dd:1e:86:56:f9:28:64:3d:1b:67:7e:da:36:
9c:23:cc:4b:e2:aa:b1:9a:ba:6b:7f:7d:14:ba:d4:
7e:94:25:6c:e9:a1:5a:bd:1f:50:99:da:d3:b6:78:
bd:55:fa:15:41:2a:8f:2b:d9:6f:b4:48:5a:e5:02:
42:e0:a9:07:59:8f:b9:55:be:76:fd:e7:da:96:21:
15:ba:bf:0d:84:28:1f:5c:dc:f6:54:61:ae:20:62:
a6:41:9d:fb:6e:10:b3:39:46:9f:63:ba:ba:09:d2:
66:51:7c:00:71:20:58:81:28:be:bf:2b:80:cd:7d:
18:7a:31:4c:a6:04:0a:d8:6f:2a:f2:1f:4a:26:63:
ae:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:0F:2E:09:A2:29:30:DD:F1:9D:A0:4F:22:F2:30:80:FD:5A:17:EC
X509v3 Authority Key Identifier:
keyid:92:EC:29:54:76:CA:1D:93:4D:B0:4D:00:24:4F:C5:07:9B:9C:97:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kuwpVHbKHZNNsE0AJE_FB5ucl0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/58394a-8cf6-4b11-becb-3ba69131458b/1/kuwpVHbKHZNNsE0AJE_FB5ucl0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/58394a-8cf6-4b11-becb-3ba69131458b/1/kuwpVHbKHZNNsE0AJE_FB5ucl0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:37:d0:f3:3b:81:b6:45:bd:74:37:0a:33:d2:4a:e4:18:95:
92:8e:0c:78:51:5c:54:56:cd:d8:1e:3a:e7:52:35:90:70:7c:
84:7d:4c:5d:43:fe:52:5a:8e:7c:9a:0d:8d:aa:cd:42:86:14:
f8:7e:ef:04:f5:82:ed:d2:cd:61:0e:6d:9a:b5:59:ff:bd:44:
52:7d:cd:82:be:cc:47:25:67:8e:a4:85:fb:0e:00:95:72:29:
95:81:0a:ce:fb:5e:b4:7e:65:99:78:1c:76:5f:bb:20:fe:ec:
36:d6:81:77:3a:28:33:88:87:e3:04:71:76:29:f8:60:a0:12:
31:d7:98:7e:0c:b4:32:61:eb:e2:8e:22:b9:de:b9:9f:73:6a:
ae:a3:5f:e0:86:25:7f:9e:4f:52:37:a6:95:cd:f6:ad:1d:a7:
b0:c2:93:6a:fa:f8:10:ea:91:64:ca:71:f1:39:27:83:c4:a5:
c6:24:be:cc:dd:d0:a3:22:c6:e3:6b:e0:e6:25:4d:86:be:ee:
9d:17:78:12:3a:82:41:fb:d4:68:3f:eb:cf:4f:7b:b6:87:01:
55:75:f7:27:a8:79:d8:e5:1c:a7:8e:a3:19:24:94:ae:03:8d:
53:85:41:8f:4b:60:7e:a5:f1:11:b4:52:e6:e0:8b:d8:f1:d8:
ef:67:81:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:15:44 2025 by rpki-client