Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft
File: KuK_S6R9cV5T4us9AS0_y80bDsA.mft (raw, json)
Hash identifier: D4lJUpojNw08yhLuclGLrEHUZ96NRtq74nyaDLqBLOk=
Subject key identifier: F8:97:BA:7D:10:30:29:10:52:0A:75:9E:86:44:CF:ED:F0:0A:D6:27
Authority key identifier: 2A:E2:BF:4B:A4:7D:71:5E:53:E2:EB:3D:01:2D:3F:CB:CD:1B:0E:C0
Certificate issuer: /CN=2ae2bf4ba47d715e53e2eb3d012d3fcbcd1b0ec0
Certificate serial: 0198D4A824D2651182D30BAC7A2887366319
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KuK_S6R9cV5T4us9AS0_y80bDsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft
Manifest number: 8B
Signing time: Sat 23 Aug 2025 02:00:45 +0000
Manifest this update: Sat 23 Aug 2025 02:00:45 +0000
Manifest next update: Sun 24 Aug 2025 02:00:45 +0000
Files and hashes: 1: ImNYtfmA17VPvuzFmVELDdKaFPo.roa (hash: qTcKtkAu4/tozlJ7sg/B8RXSaVxn+Vv1tRQIyPPwO20=)
2: KuK_S6R9cV5T4us9AS0_y80bDsA.crl (hash: LicFwm+QXduwJyikc6VNcooB9SNxG/30SQuUxSGdVFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KuK_S6R9cV5T4us9AS0_y80bDsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:24:d2:65:11:82:d3:0b:ac:7a:28:87:36:63:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ae2bf4ba47d715e53e2eb3d012d3fcbcd1b0ec0
Validity
Not Before: Aug 23 02:00:45 2025 GMT
Not After : Aug 24 02:00:45 2025 GMT
Subject: CN=f897ba7d10302910520a759e8644cfedf00ad627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9c:4f:70:12:28:22:15:d6:ea:c2:b1:7b:03:
55:04:b5:47:49:9a:aa:e4:30:d8:61:20:83:50:64:
ba:16:1f:63:44:5a:9a:9a:f8:6d:8e:5b:55:9f:fa:
b2:8f:07:3f:69:25:e5:e0:1b:25:6c:a4:2c:c4:ae:
46:23:d2:66:a7:a7:60:95:78:0a:4f:1f:d5:04:9f:
f8:7a:d9:2c:8a:85:72:e2:ba:b7:89:9c:b8:52:35:
8f:f2:09:30:e8:cd:e0:e5:28:ce:db:2b:a1:b5:7a:
b4:14:11:12:99:0e:33:bf:2d:36:fa:63:f7:4b:b9:
2e:a4:46:0d:17:41:e5:ee:88:f2:e7:35:e6:41:10:
c2:4e:8d:b8:f8:98:34:32:76:0c:a2:55:e0:a2:ea:
fd:c7:02:cd:11:79:41:17:3b:e9:3c:dd:ce:a0:cf:
8a:7f:90:c8:1e:b4:f1:89:ee:26:33:eb:b0:01:27:
ec:96:42:c2:a3:59:5f:ae:e8:01:29:c3:b9:5f:b5:
33:e6:69:9c:e1:6d:a1:0a:fa:b0:ef:f4:39:09:49:
8b:21:30:c6:57:23:8e:42:d7:f7:1c:1c:bf:ee:a8:
5b:e1:49:7f:d1:18:21:e0:22:2f:75:b9:7b:29:8f:
27:b5:d0:81:ce:85:df:d9:44:ad:1e:fc:38:5f:38:
e2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:97:BA:7D:10:30:29:10:52:0A:75:9E:86:44:CF:ED:F0:0A:D6:27
X509v3 Authority Key Identifier:
keyid:2A:E2:BF:4B:A4:7D:71:5E:53:E2:EB:3D:01:2D:3F:CB:CD:1B:0E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KuK_S6R9cV5T4us9AS0_y80bDsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:b3:0a:dd:9e:94:b0:f7:28:48:9b:65:1a:b5:c6:b9:42:9a:
c4:8e:67:e2:e0:d5:fc:87:ab:54:d7:49:13:d1:e9:31:33:f2:
37:c8:6f:b5:10:a8:25:6e:2b:ba:cb:10:d0:f0:75:2b:c5:92:
3f:a8:e5:65:a4:1d:19:13:f7:ef:fb:29:a7:cf:74:e7:57:8d:
10:4f:0e:55:1d:82:47:23:74:0b:c4:84:69:c8:44:a5:ff:78:
66:22:24:2a:f4:89:cb:a9:b2:78:8c:ee:27:a8:9c:98:0c:73:
05:59:f4:c9:75:6a:12:b3:6a:0d:ad:c3:bb:97:61:05:bd:19:
ca:63:d4:d6:bc:8d:58:ed:9a:52:46:51:15:66:dd:ef:50:98:
19:a5:b5:fd:84:c2:86:4f:a1:1a:45:86:8a:35:0e:0e:be:8d:
db:ec:de:7c:64:7e:d7:7f:55:e4:fb:f3:ef:f8:74:25:39:62:
23:79:c6:2a:c4:f2:85:dd:2a:0f:09:d1:45:15:4a:6e:4e:4c:
5b:bf:3d:67:8b:1c:c3:98:fa:60:1b:7f:15:fb:5d:e8:aa:4e:
39:ec:66:76:d8:cd:42:d8:50:8d:a7:95:bd:1e:87:b4:8f:99:
0b:c5:a7:45:57:1a:c7:6b:c1:17:39:50:1f:ef:59:0a:29:66:
b8:01:8e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:40 2025 by rpki-client