Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ac3e3b-8dcc-40ac-9dab-7e97650d0f86/1/kurmrUuydi4hlOXfUc0NLNPmnKo.mft
File: kurmrUuydi4hlOXfUc0NLNPmnKo.mft (raw, json)
Hash identifier: aBrQC0WBJDxA6iOcO40juf7D4o2smzGjbLXp9EH11tk=
Subject key identifier: A8:2A:11:42:E3:9A:5F:BB:63:4C:C9:71:0B:A9:4F:A5:3D:33:AA:FF
Authority key identifier: 92:EA:E6:AD:4B:B2:76:2E:21:94:E5:DF:51:CD:0D:2C:D3:E6:9C:AA
Certificate issuer: /CN=92eae6ad4bb2762e2194e5df51cd0d2cd3e69caa
Certificate serial: 0198D5BBBDFC1724D170F1554D25597DA224
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kurmrUuydi4hlOXfUc0NLNPmnKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ac3e3b-8dcc-40ac-9dab-7e97650d0f86/1/kurmrUuydi4hlOXfUc0NLNPmnKo.mft
Manifest number: A3
Signing time: Sat 23 Aug 2025 07:01:47 +0000
Manifest this update: Sat 23 Aug 2025 07:01:47 +0000
Manifest next update: Sun 24 Aug 2025 07:01:47 +0000
Files and hashes: 1: BtdE401kz_cCVR9U9U273HfIpS0.roa (hash: hobg2e+hs3cfn/PR8D8QxYlBTsEoPnFPoAQ4C018gyE=)
2: N-56zynZQkjMVarS-v8wIftEaAc.roa (hash: TmBPb/l+t9dFI9/svQZsOGHsNkbPcnVxIX8nhP74Z3o=)
3: kurmrUuydi4hlOXfUc0NLNPmnKo.crl (hash: Ssce/DnwcmlsVhi8sIS1493bt50CMA4tyY5nHxFkNn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ac3e3b-8dcc-40ac-9dab-7e97650d0f86/1/kurmrUuydi4hlOXfUc0NLNPmnKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ac3e3b-8dcc-40ac-9dab-7e97650d0f86/1/kurmrUuydi4hlOXfUc0NLNPmnKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/kurmrUuydi4hlOXfUc0NLNPmnKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:bd:fc:17:24:d1:70:f1:55:4d:25:59:7d:a2:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92eae6ad4bb2762e2194e5df51cd0d2cd3e69caa
Validity
Not Before: Aug 23 07:01:47 2025 GMT
Not After : Aug 24 07:01:47 2025 GMT
Subject: CN=a82a1142e39a5fbb634cc9710ba94fa53d33aaff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ad:89:30:33:0c:53:29:70:6d:1f:55:e3:48:
bb:77:dc:8c:52:ca:ac:07:29:26:7c:19:20:bf:87:
b5:cd:a1:ce:ec:83:ec:b6:f2:82:94:b2:ca:c5:f4:
fa:29:a0:0d:34:68:1f:0c:a5:0c:2c:c4:88:40:28:
71:18:bc:b0:2b:d9:e8:86:84:77:48:3b:f8:17:b8:
bb:59:16:8d:18:5e:08:a8:69:a2:10:63:26:8f:5d:
be:08:da:89:5a:e9:34:dc:70:0d:20:85:fa:72:ac:
99:51:e5:1e:a4:0c:d0:f1:6f:ec:37:88:2e:13:b2:
4c:82:95:46:a3:9a:5a:fb:93:b3:75:b2:f0:de:00:
92:79:b1:44:fb:97:28:2b:39:e7:c3:25:8e:34:7c:
b9:61:28:02:55:4e:82:f0:bb:24:3b:9e:50:6a:f5:
c9:c0:b1:fd:54:50:bd:80:39:35:39:c2:37:70:2d:
65:e0:5e:27:42:6e:34:18:31:29:f3:7f:6f:c1:20:
53:be:5c:21:37:c9:78:86:35:d4:ce:59:a0:e0:52:
d0:6d:5a:52:89:0f:19:2b:a7:b7:ac:86:d6:de:46:
69:28:a3:f7:48:4e:5c:34:69:6e:5e:c4:4a:fa:a0:
ff:82:49:31:c4:bb:d5:76:e2:ab:a0:56:f7:04:c5:
d7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:2A:11:42:E3:9A:5F:BB:63:4C:C9:71:0B:A9:4F:A5:3D:33:AA:FF
X509v3 Authority Key Identifier:
keyid:92:EA:E6:AD:4B:B2:76:2E:21:94:E5:DF:51:CD:0D:2C:D3:E6:9C:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kurmrUuydi4hlOXfUc0NLNPmnKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ac3e3b-8dcc-40ac-9dab-7e97650d0f86/1/kurmrUuydi4hlOXfUc0NLNPmnKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ac3e3b-8dcc-40ac-9dab-7e97650d0f86/1/kurmrUuydi4hlOXfUc0NLNPmnKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:b0:b8:c3:48:60:5a:f2:c8:6a:19:63:0a:82:68:3a:cb:de:
f8:80:1e:29:57:ee:7b:73:22:d6:51:e1:82:02:17:53:2c:e7:
cf:60:f8:a3:f0:d1:be:28:20:19:e4:a9:54:e3:33:7b:aa:fe:
a3:4f:f2:30:27:91:0f:de:20:5f:f6:f2:f0:53:e6:a5:93:9a:
53:89:41:4f:c0:e3:46:ea:04:01:04:9f:4e:16:e3:43:40:c5:
09:64:1a:fd:3c:46:be:c6:c8:11:ed:0d:42:70:db:55:e2:f4:
b3:b3:4d:a8:62:b7:90:87:41:ec:fc:8a:76:f3:d8:f2:20:9c:
c7:4f:e0:d7:bb:eb:69:b8:86:b8:58:b1:ef:36:81:76:c4:ce:
89:78:2a:d2:52:c0:53:fa:fe:74:1e:fe:9e:12:19:66:7c:71:
bb:82:b2:4c:9f:9c:74:4e:ae:b5:b0:c3:05:8e:d0:73:62:05:
06:d2:1f:15:c4:6d:aa:13:6e:48:4e:a8:79:d9:7c:24:23:b2:
be:7f:90:cb:3c:a3:cf:cc:6b:47:8b:e7:75:76:7b:b5:65:f9:
77:d8:58:45:11:fd:e1:31:85:72:b3:d9:b0:86:1d:0e:01:33:
d3:65:de:53:a0:69:4b:4d:b1:93:40:84:1c:5c:3e:1c:5e:d2:
fb:05:6b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:52 2025 by rpki-client