Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft
File: KuK_S6R9cV5T4us9AS0_y80bDsA.mft (raw, json)
Hash identifier: H9s+w7jGmCmRtwzCRWMDXSuJ9dz2GBAv4N9nGxDZJbA=
Subject key identifier: 3B:A8:1F:96:6D:38:75:B7:02:2A:E0:86:03:AE:0A:1A:66:6C:F4:4E
Authority key identifier: 2A:E2:BF:4B:A4:7D:71:5E:53:E2:EB:3D:01:2D:3F:CB:CD:1B:0E:C0
Certificate issuer: /CN=2ae2bf4ba47d715e53e2eb3d012d3fcbcd1b0ec0
Certificate serial: 0199FC213CE9CCF482E8541D08B6D9FE5CFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KuK_S6R9cV5T4us9AS0_y80bDsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft
Manifest number: 0124
Signing time: Sun 19 Oct 2025 11:01:00 +0000
Manifest this update: Sun 19 Oct 2025 11:01:00 +0000
Manifest next update: Mon 20 Oct 2025 11:01:00 +0000
Files and hashes: 1: ImNYtfmA17VPvuzFmVELDdKaFPo.roa (hash: qTcKtkAu4/tozlJ7sg/B8RXSaVxn+Vv1tRQIyPPwO20=)
2: KuK_S6R9cV5T4us9AS0_y80bDsA.crl (hash: y1sF9ClhFNqdIlDmwJm34wpLuQgLYXz1YC2pw6QGIOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KuK_S6R9cV5T4us9AS0_y80bDsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:3c:e9:cc:f4:82:e8:54:1d:08:b6:d9:fe:5c:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ae2bf4ba47d715e53e2eb3d012d3fcbcd1b0ec0
Validity
Not Before: Oct 19 11:01:00 2025 GMT
Not After : Oct 20 11:01:00 2025 GMT
Subject: CN=3ba81f966d3875b7022ae08603ae0a1a666cf44e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f8:fe:1d:55:00:58:3d:4c:60:e0:f5:bb:eb:
38:5c:2f:e8:a2:03:74:7b:ef:eb:13:0d:72:1b:60:
c8:0d:96:6d:fd:cf:2e:47:9e:c6:1a:fe:6b:28:9a:
0b:e4:e8:7d:e4:e2:63:ff:ea:56:c7:01:f1:ef:27:
fe:9b:63:29:db:10:66:c1:3b:5f:57:53:49:fc:6d:
09:9d:c8:96:1e:78:ae:0d:10:16:4a:6d:63:aa:5e:
6f:95:66:a6:87:04:32:1a:e0:33:e7:8c:4a:c3:e2:
25:39:9e:f8:f5:42:25:6f:1a:15:4f:26:73:f3:83:
53:f4:e7:2e:bb:46:63:61:15:73:1f:c6:75:0a:0f:
90:5f:59:11:68:35:1c:93:dd:9c:97:dd:f1:5f:09:
c8:d5:7b:de:e0:5a:61:d7:53:f5:6d:85:51:82:56:
54:0c:a7:61:41:0c:7f:b2:22:ab:c6:3a:17:dc:90:
40:9f:db:1b:e1:df:a0:4f:f3:7d:e1:ab:80:e3:ae:
ac:57:59:e8:cb:03:1f:61:d8:64:2f:58:4d:95:de:
d7:e8:6e:5d:3c:f0:fb:62:c0:e4:df:1e:38:43:10:
1c:3b:fa:58:dc:9a:31:39:08:b5:f5:3a:fa:45:dc:
d6:cf:78:86:2a:d6:94:72:d9:d9:29:89:db:5a:09:
e3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A8:1F:96:6D:38:75:B7:02:2A:E0:86:03:AE:0A:1A:66:6C:F4:4E
X509v3 Authority Key Identifier:
keyid:2A:E2:BF:4B:A4:7D:71:5E:53:E2:EB:3D:01:2D:3F:CB:CD:1B:0E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KuK_S6R9cV5T4us9AS0_y80bDsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:a6:bc:59:7f:7f:c9:bd:c3:d5:02:a1:19:d3:64:43:d1:f4:
99:ed:fb:b2:ad:f4:24:76:bc:2e:05:99:3a:56:00:54:e2:60:
e1:56:67:13:e0:79:20:8d:4d:0a:b4:63:da:f4:bc:26:36:e2:
3e:cf:83:cb:2c:64:1c:a8:bf:cb:a9:71:7e:bb:22:ed:80:3e:
6d:fb:d6:3b:c5:56:e1:b7:ea:89:52:9f:f1:49:e3:b3:6a:32:
87:f9:a9:e0:cc:79:19:c6:35:76:88:ae:b1:ab:50:d1:e0:0b:
55:d6:93:4b:db:c8:41:a4:bc:e7:c6:c4:70:13:11:83:99:76:
04:b0:b3:9c:72:ac:0a:6c:de:fe:0e:2c:b4:5e:52:aa:cf:db:
5c:86:2d:92:a5:85:26:17:8f:a9:69:db:63:8b:5b:a8:da:88:
70:a4:24:6e:f1:36:6c:b4:ec:2a:12:92:23:df:40:ce:28:fe:
80:97:71:d7:a5:15:58:83:58:1e:e0:c7:1c:ec:17:96:57:aa:
dc:19:c7:2b:d6:9b:97:44:92:cf:6a:95:34:07:b3:75:4c:72:
23:b6:29:b8:ae:f8:ec:31:87:63:8a:ff:90:ee:07:89:e0:33:
60:52:64:9a:96:c6:46:43:10:c0:1a:1e:db:66:fb:44:91:e3:
2f:df:ea:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:30:29 2025 by rpki-client