Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.mft
File: kvuPoQ3_NHPmU9v2HJqGQyGApcc.mft (raw, json)
Hash identifier: O1f4ORRufZtuXHqi0Y+Rl/Z9CqzzA57X863vIICcONc=
Subject key identifier: A7:2F:39:01:0F:AF:2B:C4:D0:5B:07:91:A7:64:F4:F8:F7:DC:39:28
Authority key identifier: 92:FB:8F:A1:0D:FF:34:73:E6:53:DB:F6:1C:9A:86:43:21:80:A5:C7
Certificate issuer: /CN=92fb8fa10dff3473e653dbf61c9a86432180a5c7
Certificate serial: 0198D5158067540FCBE8D3A72387A40CA674
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvuPoQ3_NHPmU9v2HJqGQyGApcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.mft
Manifest number: 1259
Signing time: Sat 23 Aug 2025 04:00:12 +0000
Manifest this update: Sat 23 Aug 2025 04:00:12 +0000
Manifest next update: Sun 24 Aug 2025 04:00:12 +0000
Files and hashes: 1: 4deHnJPEkHi_Z6AsiwPaIpTKDAs.roa (hash: F92p4CywFS49zy5OOP8oYTx9eXX41zQ2otjtVHTvTfc=)
2: WvlZiKlby6mz_WZr2UVe0cYuFc8.roa (hash: Y5kWltccMkWlbHWE6g816b2afq8ovZonUhJQEFz4q4A=)
3: kvuPoQ3_NHPmU9v2HJqGQyGApcc.crl (hash: eQOl5Y9SOlKR/meHGAczanCFfTNvL6zAaq+ejPlDY5g=)
4: uYHKtKuRAQeHOfD7lB4qDgo66SU.roa (hash: t+Ob5Y5NgLCxa3TxH9Z/GTAtTAwcsjfnwDTYcaden8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kvuPoQ3_NHPmU9v2HJqGQyGApcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:80:67:54:0f:cb:e8:d3:a7:23:87:a4:0c:a6:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92fb8fa10dff3473e653dbf61c9a86432180a5c7
Validity
Not Before: Aug 23 04:00:12 2025 GMT
Not After : Aug 24 04:00:12 2025 GMT
Subject: CN=a72f39010faf2bc4d05b0791a764f4f8f7dc3928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:91:9b:ee:35:ee:ac:35:9b:2b:ef:f7:b0:61:
d0:b7:37:9a:37:0c:24:03:ec:d6:3e:1c:bb:c1:ad:
2a:f4:d8:94:46:76:74:3a:78:88:5d:64:cf:5f:9e:
ef:2a:4b:47:79:41:e4:7c:bb:11:99:2c:a0:a8:f5:
db:51:76:fd:02:5e:62:1b:fe:91:90:40:47:17:cb:
dc:ec:c2:6f:62:40:09:8f:14:eb:1d:88:00:a6:48:
d8:4a:80:d0:b1:08:7f:bd:62:42:93:a0:46:6f:11:
49:a3:30:64:84:1a:97:27:df:ef:1a:8e:b2:e3:e7:
4b:bd:c7:cd:9a:ac:79:9f:59:bd:1c:58:3e:ec:5d:
08:fb:09:24:a2:60:4f:2c:f5:3e:2a:38:db:ac:df:
65:23:fb:a0:f8:62:f4:11:85:85:7b:33:5e:a6:6d:
c6:0a:d0:24:52:a7:8f:c6:6e:1b:41:69:12:7c:53:
5a:d8:2b:94:a4:12:fb:ad:d0:15:8a:05:06:3e:4f:
5c:59:95:f4:bc:5f:89:66:f9:52:94:32:a1:8b:4a:
f7:3b:16:be:8b:43:8b:3e:51:ad:1c:71:a5:69:8c:
e0:ba:99:89:3a:5e:9c:2d:22:fe:0b:91:a0:11:b4:
f2:11:6c:e9:fc:2c:c8:87:59:2a:e8:31:0f:82:46:
5f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:2F:39:01:0F:AF:2B:C4:D0:5B:07:91:A7:64:F4:F8:F7:DC:39:28
X509v3 Authority Key Identifier:
keyid:92:FB:8F:A1:0D:FF:34:73:E6:53:DB:F6:1C:9A:86:43:21:80:A5:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvuPoQ3_NHPmU9v2HJqGQyGApcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:89:8f:05:85:9d:e5:28:d0:4d:7f:a9:2d:23:20:1c:8e:f5:
d8:a4:72:3a:8a:2a:f3:9d:eb:7e:96:c8:88:8c:d5:40:b1:99:
fd:c5:07:a1:be:05:88:7d:d8:aa:c4:e8:6d:68:0a:f4:ad:70:
b6:07:43:14:7f:7a:e7:8f:44:45:c3:a1:13:4a:ac:72:a2:35:
26:4a:15:e3:00:a6:89:8e:49:d6:9e:f6:30:5f:52:e9:97:7e:
9c:a7:48:0b:12:6f:1f:7a:35:5e:85:66:25:40:ad:d9:72:e9:
03:22:3e:6f:58:f3:67:d5:58:cb:a1:cd:35:44:89:eb:eb:a2:
49:6d:43:c0:b4:21:ad:df:e7:93:3f:14:7a:6f:be:bf:93:cc:
23:60:89:6a:2e:79:72:9e:1b:b0:cf:ac:12:ce:16:aa:e5:d9:
87:0f:4b:5a:58:83:d5:72:57:17:db:6d:61:43:76:d9:dd:ef:
d5:e4:cf:3d:dd:0f:5c:b6:2a:7b:88:3b:e4:b8:56:0f:47:0e:
2d:0f:e3:54:c2:44:5a:8c:1e:46:f2:4c:39:33:f6:84:40:f9:
66:ac:0b:02:7d:b3:f0:08:a9:02:b9:ce:68:69:17:4c:03:1a:
b7:ba:e6:d7:b2:b0:6d:ea:bd:04:04:8a:bf:f5:ff:8d:e2:28:
4d:f3:e3:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:31:07 2025 by rpki-client