Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.mft
File: KUtbu-F0Z0duIoKIgiGIffVJ9Lk.mft (raw, json)
Hash identifier: UqUjxR93Suxp4y9h50ZchusDM9XsS+afrry14XkDFUk=
Subject key identifier: E4:CB:A7:90:1F:A8:EA:67:FC:50:5B:61:49:B1:0D:77:7F:52:98:B4
Authority key identifier: 29:4B:5B:BB:E1:74:67:47:6E:22:82:88:82:21:88:7D:F5:49:F4:B9
Certificate issuer: /CN=294b5bbbe17467476e2282888221887df549f4b9
Certificate serial: 019A4EF4114924C6C59048BA9B7919733EFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.mft
Manifest number: 169E
Signing time: Tue 04 Nov 2025 13:00:09 +0000
Manifest this update: Tue 04 Nov 2025 13:00:09 +0000
Manifest next update: Wed 05 Nov 2025 13:00:09 +0000
Files and hashes: 1: HJiIfDvFo_sDLMJ5OE82mYFpyHQ.roa (hash: P459lfA3vTZFDKOU1GovB2qolTUez89TIhHTMpHxZQo=)
2: KUtbu-F0Z0duIoKIgiGIffVJ9Lk.crl (hash: S2ATY/iXtiIiBUGa60XplOvnRAgZgrg4E6KHJ8yom3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.mft
rsync://rpki.ripe.net/repository/DEFAULT/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:11:49:24:c6:c5:90:48:ba:9b:79:19:73:3e:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=294b5bbbe17467476e2282888221887df549f4b9
Validity
Not Before: Nov 4 13:00:09 2025 GMT
Not After : Nov 5 13:00:09 2025 GMT
Subject: CN=e4cba7901fa8ea67fc505b6149b10d777f5298b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:24:c1:f5:41:db:57:61:ac:e3:4e:34:14:f3:
07:ba:4e:78:1f:d2:6d:c0:cc:92:bf:64:3d:7e:a9:
3d:2d:21:01:b8:80:e6:5e:73:58:cc:68:0f:7a:81:
61:23:58:40:a4:93:27:d8:ff:93:34:63:3c:eb:74:
1c:a1:d3:3e:89:e9:89:a0:90:73:cc:03:a1:7e:39:
84:2a:e9:a6:17:25:7a:d2:ee:0a:dc:ad:7a:c0:b8:
2a:58:32:77:3e:5c:6e:f0:23:6c:10:82:3c:4d:e0:
9d:44:4f:c2:ed:00:97:89:e0:cb:30:17:72:b0:c9:
4c:5b:f0:5f:b2:ef:9b:6e:a5:de:23:51:0c:fc:0e:
2d:0a:38:57:89:3a:0e:21:4a:08:86:8e:21:30:39:
74:91:e5:13:48:e0:ce:32:4e:ce:f2:78:04:57:51:
ca:da:f5:60:20:af:7f:6c:c9:c5:ae:bc:77:86:1d:
3d:b4:4d:62:35:7d:25:30:fb:9f:33:8b:46:e1:f0:
7a:24:a1:6e:88:67:54:59:f1:61:04:0a:83:a2:44:
ed:a1:48:45:10:e4:25:ed:9f:e9:1a:93:1e:1d:b2:
87:a9:c0:da:61:54:95:59:2f:28:8f:f7:bf:37:90:
69:82:cf:d4:ef:a3:53:3d:9d:99:62:5e:dd:c7:8b:
46:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:CB:A7:90:1F:A8:EA:67:FC:50:5B:61:49:B1:0D:77:7F:52:98:B4
X509v3 Authority Key Identifier:
keyid:29:4B:5B:BB:E1:74:67:47:6E:22:82:88:82:21:88:7D:F5:49:F4:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:1b:b5:87:61:a4:b8:84:c4:33:e3:63:6b:e5:f3:eb:59:9d:
ba:68:3d:92:26:92:c2:fd:d8:3d:40:eb:c1:50:b7:91:5b:02:
fb:61:03:5b:35:c7:5e:bb:22:e2:b0:ee:6f:3a:1e:bd:be:00:
c3:a9:29:a0:5e:4f:18:23:0f:d0:62:ac:11:17:f3:79:fc:1f:
4a:d2:1c:e0:52:34:c6:e8:a2:ec:b5:03:b1:39:34:02:95:41:
6a:58:60:bb:6f:9d:23:ba:95:62:4a:9d:1c:38:95:8b:c3:a3:
30:1c:5d:cc:47:35:84:00:79:ce:7c:82:20:42:34:3c:85:19:
7e:8c:ca:6b:9e:b2:47:4d:62:4d:98:28:23:2d:bc:01:3a:c8:
38:fe:4f:4b:04:4e:1a:cf:dd:41:5a:10:ba:9c:ee:5f:35:eb:
60:15:0d:da:6c:93:9e:83:91:72:ea:a9:4e:13:f7:68:26:14:
fa:3f:c3:99:ca:87:7d:c6:d5:cb:58:d5:50:0b:77:e9:09:e0:
c7:08:f5:b8:58:9b:49:5f:11:31:6d:45:21:e6:3e:c0:ea:2d:
40:1e:8d:dc:09:2e:bd:a8:92:79:6f:0b:fd:db:bf:95:b8:3a:
c7:42:bc:b8:ef:6a:ca:8a:83:59:94:56:00:5b:a8:c5:9a:f0:
b6:ff:05:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9BFJJMbFkEi6m3kZcz7/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NGI1YmJiZTE3NDY3NDc2ZTIyODI4ODgyMjE4ODdkZjU0
OWY0YjkwHhcNMjUxMTA0MTMwMDA5WhcNMjUxMTA1MTMwMDA5WjAzMTEwLwYDVQQD
EyhlNGNiYTc5MDFmYThlYTY3ZmM1MDViNjE0OWIxMGQ3NzdmNTI5OGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2iTB9UHbV2Gs4040FPMHuk54H9Jt
wMySv2Q9fqk9LSEBuIDmXnNYzGgPeoFhI1hApJMn2P+TNGM863QcodM+iemJoJBz
zAOhfjmEKummFyV60u4K3K16wLgqWDJ3Plxu8CNsEII8TeCdRE/C7QCXieDLMBdy
sMlMW/Bfsu+bbqXeI1EM/A4tCjhXiToOIUoIho4hMDl0keUTSODOMk7O8ngEV1HK
2vVgIK9/bMnFrrx3hh09tE1iNX0lMPufM4tG4fB6JKFuiGdUWfFhBAqDokTtoUhF
EOQl7Z/pGpMeHbKHqcDaYVSVWS8oj/e/N5Bpgs/U76NTPZ2ZYl7dx4tGjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOTLp5AfqOpn/FBbYUmxDXd/Upi0MB8GA1UdIwQY
MBaAFClLW7vhdGdHbiKCiIIhiH31SfS5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1V0YnUtRjBaMGR1SW9LSWdpR0lmZlZKOUxrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9kMzY3ODMtNGQ1Yi00MjVlLTk0OWYt
YzQxZDg2MDk4ZGY3LzEvS1V0YnUtRjBaMGR1SW9LSWdpR0lmZlZKOUxrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9kMzY3ODMtNGQ1Yi00MjVlLTk0OWYtYzQxZDg2MDk4ZGY3
LzEvS1V0YnUtRjBaMGR1SW9LSWdpR0lmZlZKOUxrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAehu1h2Gk
uITEM+Nja+Xz61mdumg9kiaSwv3YPUDrwVC3kVsC+2EDWzXHXrsi4rDubzoevb4A
w6kpoF5PGCMP0GKsERfzefwfStIc4FI0xuii7LUDsTk0ApVBalhgu2+dI7qVYkqd
HDiVi8OjMBxdzEc1hAB5znyCIEI0PIUZfozKa56yR01iTZgoIy28ATrIOP5PSwRO
Gs/dQVoQupzuXzXrYBUN2myTnoORcuqpThP3aCYU+j/DmcqHfcbVy1jVUAt36Qng
xwj1uFibSV8RMW1FIeY+wOotQB6N3AkuvaiSeW8L/du/lbg6x0K8uO9qyoqDWZRW
AFuoxZrwtv8F/w==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:15:30 2025 by rpki-client