Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ac3e3b-8dcc-40ac-9dab-7e97650d0f86/1/kurmrUuydi4hlOXfUc0NLNPmnKo.mft
File: kurmrUuydi4hlOXfUc0NLNPmnKo.mft (raw, json)
Hash identifier: mXBSq7d8T4bcuIOR+4qc/nXaQgZghpK5BmvZTa8HxBA=
Subject key identifier: 2E:85:2D:80:30:7A:C9:C9:3A:2F:07:2C:B4:EE:BB:1E:2A:0B:81:37
Authority key identifier: 92:EA:E6:AD:4B:B2:76:2E:21:94:E5:DF:51:CD:0D:2C:D3:E6:9C:AA
Certificate issuer: /CN=92eae6ad4bb2762e2194e5df51cd0d2cd3e69caa
Certificate serial: 0199FD3472AC12DD7FBC7275DA248BFE1974
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kurmrUuydi4hlOXfUc0NLNPmnKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ac3e3b-8dcc-40ac-9dab-7e97650d0f86/1/kurmrUuydi4hlOXfUc0NLNPmnKo.mft
Manifest number: 013C
Signing time: Sun 19 Oct 2025 16:01:36 +0000
Manifest this update: Sun 19 Oct 2025 16:01:36 +0000
Manifest next update: Mon 20 Oct 2025 16:01:36 +0000
Files and hashes: 1: BtdE401kz_cCVR9U9U273HfIpS0.roa (hash: hobg2e+hs3cfn/PR8D8QxYlBTsEoPnFPoAQ4C018gyE=)
2: N-56zynZQkjMVarS-v8wIftEaAc.roa (hash: TmBPb/l+t9dFI9/svQZsOGHsNkbPcnVxIX8nhP74Z3o=)
3: kurmrUuydi4hlOXfUc0NLNPmnKo.crl (hash: Vfd0eORg94dKCjrqODBHzXmZV8VmFBeYH1zS4o62Gdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ac3e3b-8dcc-40ac-9dab-7e97650d0f86/1/kurmrUuydi4hlOXfUc0NLNPmnKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ac3e3b-8dcc-40ac-9dab-7e97650d0f86/1/kurmrUuydi4hlOXfUc0NLNPmnKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/kurmrUuydi4hlOXfUc0NLNPmnKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:72:ac:12:dd:7f:bc:72:75:da:24:8b:fe:19:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92eae6ad4bb2762e2194e5df51cd0d2cd3e69caa
Validity
Not Before: Oct 19 16:01:36 2025 GMT
Not After : Oct 20 16:01:36 2025 GMT
Subject: CN=2e852d80307ac9c93a2f072cb4eebb1e2a0b8137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:93:38:00:ff:b7:54:14:32:bb:4d:94:de:5a:
30:f3:39:b2:4b:df:bd:68:42:d0:ed:59:2a:45:a7:
0c:93:6d:a0:25:c0:b5:f2:82:b9:23:21:ad:31:cc:
76:a6:f9:f8:e8:5b:c7:1b:76:77:08:f1:67:a9:2a:
95:a5:64:64:70:93:32:41:e9:6b:c1:fe:dd:8b:6e:
ad:d0:08:d6:cc:1f:77:fe:f8:e2:ab:30:c3:b9:22:
e0:15:d9:09:6b:06:a0:c3:95:4e:73:0d:39:0d:33:
91:38:1e:a4:bc:40:1e:32:a1:b8:f8:a8:38:9a:4f:
b5:78:8d:b3:34:e7:1b:f3:36:56:d4:61:9a:e9:d2:
35:8c:08:5d:63:6e:4b:af:4c:62:07:8c:92:2f:31:
e0:5c:72:99:72:a3:3e:1d:94:d7:a0:2c:1f:01:bb:
7d:0f:97:b0:9e:e4:a2:58:2e:b2:2d:a8:fc:45:29:
61:8c:13:da:15:da:f2:80:95:d6:9a:94:83:0d:df:
b4:44:82:8a:79:dc:09:20:63:7d:06:a4:22:e5:c0:
01:c0:41:8d:1b:17:59:97:94:f7:8f:84:84:61:97:
1c:5e:1e:87:01:bf:97:b8:34:67:1e:df:d1:3e:c7:
d4:f3:6e:f6:19:9b:58:2d:33:59:c3:e6:ba:69:46:
df:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:85:2D:80:30:7A:C9:C9:3A:2F:07:2C:B4:EE:BB:1E:2A:0B:81:37
X509v3 Authority Key Identifier:
keyid:92:EA:E6:AD:4B:B2:76:2E:21:94:E5:DF:51:CD:0D:2C:D3:E6:9C:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kurmrUuydi4hlOXfUc0NLNPmnKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ac3e3b-8dcc-40ac-9dab-7e97650d0f86/1/kurmrUuydi4hlOXfUc0NLNPmnKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ac3e3b-8dcc-40ac-9dab-7e97650d0f86/1/kurmrUuydi4hlOXfUc0NLNPmnKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:22:b8:3a:3b:d4:87:3f:49:f8:2d:7f:82:dd:6f:6d:a1:2e:
95:d0:12:c3:6f:77:47:fe:83:7d:da:2a:0b:6b:2b:f6:a0:fe:
97:d1:09:30:16:f4:76:01:09:4f:03:5f:ae:80:31:52:33:e0:
13:b2:01:57:d6:8e:54:d8:09:83:04:08:7a:d0:9e:5a:fa:7a:
67:63:24:b1:36:36:0f:18:68:b1:4b:50:d0:38:e7:ed:e1:ad:
b4:75:09:d1:c8:3a:92:9e:2f:a3:96:e8:6a:29:3b:9c:f7:71:
39:fd:31:8a:7f:4a:78:ba:25:18:56:38:41:5b:18:00:fb:28:
6b:80:85:12:59:8d:e6:ed:c0:3e:ec:24:99:09:46:5e:16:41:
d7:0e:48:a9:c2:04:f0:08:a2:d6:a9:da:5f:ca:35:9f:04:06:
39:23:08:97:d0:f1:9b:79:2b:d5:73:67:b3:8d:e6:15:26:f3:
fb:0b:6f:98:60:ab:ae:96:ef:c0:d6:c9:7f:d9:65:65:6a:51:
5a:35:37:01:f2:27:8d:af:2c:32:01:7a:81:89:55:1e:d7:de:
a9:8b:a8:d0:fb:2f:34:b9:d2:9d:75:9f:f0:b9:4a:fa:19:62:
96:24:61:c9:a0:73:28:1e:56:e8:d9:42:f7:57:9c:d8:74:24:
45:e8:03:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:19:38 2025 by rpki-client