Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.mft
File: KUtbu-F0Z0duIoKIgiGIffVJ9Lk.mft (raw, json)
Hash identifier: F8Odo/MzAMQX5gQGqwt6UQGWcqFHMT5UsgFxq4fmxcQ=
Subject key identifier: 13:95:8D:67:86:A9:97:1A:03:73:9D:F6:0C:17:7F:F8:07:A5:7C:5B
Authority key identifier: 29:4B:5B:BB:E1:74:67:47:6E:22:82:88:82:21:88:7D:F5:49:F4:B9
Certificate issuer: /CN=294b5bbbe17467476e2282888221887df549f4b9
Certificate serial: 019873E319D21CDD47A55B154437E5CE5CC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.mft
Manifest number: 15A8
Signing time: Mon 04 Aug 2025 07:01:59 +0000
Manifest this update: Mon 04 Aug 2025 07:01:59 +0000
Manifest next update: Tue 05 Aug 2025 07:01:59 +0000
Files and hashes: 1: HJiIfDvFo_sDLMJ5OE82mYFpyHQ.roa (hash: P459lfA3vTZFDKOU1GovB2qolTUez89TIhHTMpHxZQo=)
2: KUtbu-F0Z0duIoKIgiGIffVJ9Lk.crl (hash: F+uI0cSeup8EF6onlozCQhQ3yZM0LipixosB9E7vESM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.mft
rsync://rpki.ripe.net/repository/DEFAULT/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:19:d2:1c:dd:47:a5:5b:15:44:37:e5:ce:5c:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=294b5bbbe17467476e2282888221887df549f4b9
Validity
Not Before: Aug 4 07:01:59 2025 GMT
Not After : Aug 5 07:01:59 2025 GMT
Subject: CN=13958d6786a9971a03739df60c177ff807a57c5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d2:b0:5c:3b:94:d3:e3:d9:1b:85:8d:2c:65:
1f:85:cc:88:b1:c5:48:22:2c:e5:8e:0b:ab:d7:56:
15:08:6e:f7:f1:0e:4c:b1:41:0f:b8:0a:b6:af:90:
68:01:cc:a2:cc:38:41:46:09:b7:28:f9:3c:6e:d8:
bf:6f:4a:d5:10:10:d3:42:02:f3:ad:7c:ea:a6:4f:
68:00:27:5a:e3:24:60:26:16:16:77:01:82:06:3d:
5a:a2:4b:aa:c7:e8:92:18:b1:bb:34:4b:b4:c8:fa:
30:5d:e5:96:50:da:ef:ba:d3:c5:47:b5:9a:ea:43:
b5:51:4a:95:82:a2:d2:06:10:ad:7d:ed:82:26:3e:
19:0d:30:6f:19:88:ad:ed:ff:b2:ab:64:08:f5:a6:
b1:c4:36:15:e9:7e:ce:7f:67:e3:8e:62:27:1f:b6:
ee:cd:98:1c:4d:7e:8f:95:5d:ed:b7:e2:ac:88:bc:
ca:d4:11:8d:e9:48:f7:45:f8:8c:f1:66:e5:e1:e7:
fd:1c:d2:6f:44:42:57:28:a1:40:74:6f:38:65:6e:
44:26:cd:0e:dc:77:07:4d:72:d5:26:07:83:63:4c:
c9:a7:d0:3f:d4:f9:bd:d6:75:0a:0e:47:a4:d5:b6:
bb:b1:93:a0:b4:37:e4:57:6f:9e:c4:7a:a9:88:a4:
90:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:95:8D:67:86:A9:97:1A:03:73:9D:F6:0C:17:7F:F8:07:A5:7C:5B
X509v3 Authority Key Identifier:
keyid:29:4B:5B:BB:E1:74:67:47:6E:22:82:88:82:21:88:7D:F5:49:F4:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:65:9a:5a:0c:d1:bd:ff:1a:de:e9:26:be:07:5b:41:fc:3f:
6b:03:48:1f:05:55:10:9e:4d:24:fd:57:37:80:c4:fb:b9:1e:
54:b2:b0:5f:4b:d3:2c:c5:2f:01:ba:8c:48:44:04:11:40:03:
07:c4:98:67:a3:42:b9:73:76:0e:57:af:b5:90:d4:dd:b3:33:
45:09:fa:df:34:bf:4d:06:a7:83:f9:83:cb:25:da:4f:58:24:
4b:73:00:eb:15:90:a7:77:ba:e2:1f:2f:34:d1:5c:c9:f1:c5:
09:c2:7c:5a:46:8f:a2:bc:39:f5:00:17:56:4d:90:1f:15:b3:
f7:8c:67:fe:08:66:b0:ab:62:5b:7a:4c:e0:ec:b7:21:77:04:
01:0f:cd:e2:ae:55:41:93:cf:3b:b9:e5:ab:23:73:16:28:61:
d2:36:a1:42:ad:db:a6:15:f4:a7:2b:61:b4:c6:5e:03:8f:45:
10:73:40:c9:06:33:1a:3b:9b:98:9a:bd:ac:79:d3:e4:20:9b:
63:6c:2a:c4:27:eb:38:9f:72:6b:73:71:22:56:25:0f:20:dd:
b6:a9:03:b1:0e:da:26:52:23:b5:07:1a:37:22:78:3d:42:fc:
11:3f:5d:b7:c3:1e:7e:12:0b:73:4a:55:75:21:4f:71:d3:48:
76:a8:f6:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:31 2025 by rpki-client