Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/kuwQUNOpMgq58M4rNloJfuQTSyQ.mft
File: kuwQUNOpMgq58M4rNloJfuQTSyQ.mft (raw, json)
Hash identifier: qz1qqC8BKAXSbky+pQ2LtgivOaCnR5ROE4es/AQcinw=
Subject key identifier: CE:B1:58:DD:04:06:DE:58:09:94:55:4F:1A:EB:4E:01:9D:04:B0:3B
Authority key identifier: 92:EC:10:50:D3:A9:32:0A:B9:F0:CE:2B:36:5A:09:7E:E4:13:4B:24
Certificate issuer: /CN=92ec1050d3a9320ab9f0ce2b365a097ee4134b24
Certificate serial: 0199FBEB450F0B45F74DAD9690AB46B43C14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kuwQUNOpMgq58M4rNloJfuQTSyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/kuwQUNOpMgq58M4rNloJfuQTSyQ.mft
Manifest number: 1418
Signing time: Sun 19 Oct 2025 10:02:03 +0000
Manifest this update: Sun 19 Oct 2025 10:02:03 +0000
Manifest next update: Mon 20 Oct 2025 10:02:03 +0000
Files and hashes: 1: kuwQUNOpMgq58M4rNloJfuQTSyQ.crl (hash: 3p+IXux8V1lFT1WRgPl5edGhgVlX8nopGNz4flddyZM=)
2: rcP662t9iU7wmmRm1Yh7D85Kb-4.roa (hash: hNPhEZEICgt5or5b1hN6hdrsIiWH59T8KP+7AQfFMXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/kuwQUNOpMgq58M4rNloJfuQTSyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/kuwQUNOpMgq58M4rNloJfuQTSyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kuwQUNOpMgq58M4rNloJfuQTSyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:45:0f:0b:45:f7:4d:ad:96:90:ab:46:b4:3c:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92ec1050d3a9320ab9f0ce2b365a097ee4134b24
Validity
Not Before: Oct 19 10:02:03 2025 GMT
Not After : Oct 20 10:02:03 2025 GMT
Subject: CN=ceb158dd0406de580994554f1aeb4e019d04b03b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fb:1a:75:e7:e9:30:8a:c0:ba:84:d2:d6:8d:
26:7a:38:f6:48:58:b5:ff:bc:4e:4c:1b:85:a6:7f:
67:31:55:b9:6a:ae:2d:58:9b:84:1f:f5:49:07:2e:
f2:f7:66:7f:cb:7e:35:dd:61:c2:c4:fd:a3:48:c6:
b3:09:2a:61:52:cb:dd:8c:c9:91:66:1a:7c:27:20:
a4:08:51:7d:db:84:df:e2:dc:4e:23:b2:50:31:37:
34:5a:53:e5:3b:b3:b9:0d:8d:51:40:9d:9f:0c:03:
fd:c4:60:dc:67:f4:2d:24:0a:3d:98:5f:14:da:33:
8b:5f:2c:62:70:d7:33:3d:98:68:b5:49:a9:fb:fb:
e7:f8:81:57:08:40:08:d9:bf:67:ed:13:89:8f:8c:
f6:94:e6:d9:9b:a0:b3:1a:e0:46:0c:71:d7:d4:62:
cb:ce:6b:c2:67:e9:c5:66:0c:60:8c:89:7e:b5:d6:
9b:36:94:85:0a:78:39:5e:15:84:2c:50:e6:f9:48:
3f:4c:b2:bc:86:d4:a4:2e:70:9b:bc:49:4f:9a:a1:
32:6f:24:7d:e7:67:f0:b2:79:ac:4a:39:85:2a:4b:
bc:05:ae:de:15:cb:c9:86:25:ae:29:89:30:59:be:
a5:f2:81:f9:dd:7a:92:22:30:1e:c6:11:45:4f:21:
98:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B1:58:DD:04:06:DE:58:09:94:55:4F:1A:EB:4E:01:9D:04:B0:3B
X509v3 Authority Key Identifier:
keyid:92:EC:10:50:D3:A9:32:0A:B9:F0:CE:2B:36:5A:09:7E:E4:13:4B:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kuwQUNOpMgq58M4rNloJfuQTSyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/kuwQUNOpMgq58M4rNloJfuQTSyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/kuwQUNOpMgq58M4rNloJfuQTSyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:28:6c:14:e4:6e:dd:aa:6f:cc:83:4f:a9:81:00:72:8d:29:
e3:ea:82:85:77:f0:ac:50:5a:29:32:15:7c:79:06:39:a8:d6:
53:e0:02:c4:e6:f8:f1:dd:9e:f0:c2:d3:48:0a:8b:de:d0:3c:
d5:db:42:dc:d2:eb:18:a7:6c:29:23:3f:01:c6:07:31:22:e4:
92:bc:51:67:f5:94:b2:7f:a6:5a:11:f0:d6:f1:a2:1d:16:e3:
90:21:12:df:ee:8d:20:ed:64:33:4f:56:f9:8a:72:94:ef:c7:
47:2d:2e:4e:2b:ac:53:3e:25:d3:e2:d9:90:5c:8c:b1:25:8e:
aa:0e:7a:4a:81:01:13:0c:c0:46:77:a7:9f:33:79:2f:5e:0b:
e7:49:5d:12:26:fa:13:f9:1b:89:a0:30:89:3c:25:9d:f7:98:
2e:d6:67:fc:07:55:cb:b1:29:1e:05:7c:2a:7a:79:8d:bb:bd:
ae:5f:be:31:ae:84:58:15:e0:92:2a:86:4b:6f:b3:4f:7a:38:
bf:c9:f8:cc:b7:a6:78:79:ac:43:2b:21:b3:21:47:eb:a6:35:
d7:ee:28:35:0e:1d:a9:15:36:50:0a:08:b8:bd:2b:ad:b6:de:
38:d0:00:56:33:af:d3:67:4e:77:b1:09:ba:2d:61:28:76:4e:
63:e4:14:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:24:29 2025 by rpki-client