Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.mft
File: kuDCRw6wpptO-lhbnLLAZ2ErN54.mft (raw, json)
Hash identifier: Z8C5CAnh1HQokVDfljcPYFNIa1mEAkLhmKYD+M8fPqs=
Subject key identifier: DF:61:C4:70:1B:EF:B8:48:D3:CD:72:AD:E8:5F:12:A9:CD:B4:88:C0
Authority key identifier: 92:E0:C2:47:0E:B0:A6:9B:4E:FA:58:5B:9C:B2:C0:67:61:2B:37:9E
Certificate issuer: /CN=92e0c2470eb0a69b4efa585b9cb2c067612b379e
Certificate serial: 0199FC218695071DC9A9D5A2ED0B18A7A49A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kuDCRw6wpptO-lhbnLLAZ2ErN54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 11:01:19 +0000
Manifest this update: Sun 19 Oct 2025 11:01:19 +0000
Manifest next update: Mon 20 Oct 2025 11:01:19 +0000
Files and hashes: 1: PFjd2yWfyUqACNexTKNE7uw-CUw.roa (hash: 2N8aNvblU0PO6uAwaoOi3OFj+fZYGQD09CyRfcuaD9M=)
2: kuDCRw6wpptO-lhbnLLAZ2ErN54.crl (hash: 5gk5T8VKZAJE/LxN7zrloid4zBgRCeB43H8jhdiHTEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.mft
rsync://rpki.ripe.net/repository/DEFAULT/kuDCRw6wpptO-lhbnLLAZ2ErN54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:86:95:07:1d:c9:a9:d5:a2:ed:0b:18:a7:a4:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92e0c2470eb0a69b4efa585b9cb2c067612b379e
Validity
Not Before: Oct 19 11:01:19 2025 GMT
Not After : Oct 20 11:01:19 2025 GMT
Subject: CN=df61c4701befb848d3cd72ade85f12a9cdb488c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:47:a7:22:24:b1:c5:99:44:e6:ef:5f:09:8a:
ad:0a:94:b1:26:f6:33:8e:ec:bc:98:f9:6b:d1:db:
12:0a:f5:12:53:30:27:ce:7e:4d:bf:9c:a6:28:8d:
64:34:9a:e0:dc:c0:1b:2d:e0:b2:85:f5:83:0c:2a:
fd:39:e5:ee:af:d2:fd:50:49:1f:90:ca:88:1e:13:
6b:11:be:19:d3:7c:db:61:f3:43:39:76:08:e6:b7:
7d:fc:1f:5a:16:f5:09:d1:7a:b7:fc:ee:38:c5:c3:
bd:70:09:ba:ca:73:31:a0:95:09:db:bf:68:32:0f:
4b:6f:d2:f3:56:96:c6:22:8f:ba:e1:33:bd:5a:9a:
db:ae:a5:29:ef:1c:ba:44:3d:33:9b:9c:17:df:fa:
e5:4c:1a:52:aa:a9:d8:4f:9c:14:f7:f8:16:a5:e1:
4f:7a:fb:8f:82:20:b0:90:94:1e:6f:f7:05:53:af:
bc:bb:a2:19:6c:8d:e1:07:ee:e7:fb:a1:1f:d7:28:
80:7d:9b:fd:48:f7:4c:1b:9c:09:37:76:1a:f0:45:
7b:b3:00:94:f1:dd:f4:14:88:fe:6a:de:01:5d:5f:
ef:74:2d:6c:0a:7d:83:59:72:3d:3f:b1:55:03:d3:
37:ed:e0:b5:7d:0f:79:28:91:16:df:11:d2:b5:6d:
d0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:61:C4:70:1B:EF:B8:48:D3:CD:72:AD:E8:5F:12:A9:CD:B4:88:C0
X509v3 Authority Key Identifier:
keyid:92:E0:C2:47:0E:B0:A6:9B:4E:FA:58:5B:9C:B2:C0:67:61:2B:37:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kuDCRw6wpptO-lhbnLLAZ2ErN54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:9f:17:9c:b1:89:8f:77:6a:cb:9a:a7:59:9f:24:56:69:fb:
ae:df:39:62:6b:16:89:19:05:4b:1f:8b:58:fa:58:d7:4e:05:
c5:89:ec:88:03:73:a4:8c:42:a0:a7:31:e6:8d:4c:5f:c7:1b:
d7:3f:c4:78:ff:9e:c2:1f:93:46:0d:56:ef:19:3f:c3:35:56:
7e:79:e3:8c:dc:3a:f2:d7:b9:19:57:0b:3e:32:51:68:ea:93:
28:ce:d9:eb:d6:3f:a1:94:45:b8:c8:fd:c0:8b:28:77:32:20:
3a:ad:11:47:b2:5b:7d:5c:ec:e5:99:18:3d:4e:5d:9d:fc:ca:
2a:da:76:07:b1:aa:32:85:32:78:e8:0f:22:7a:94:4a:d4:2a:
7a:8c:18:cf:17:79:78:c2:19:9c:c4:68:48:13:8a:e3:17:ef:
7b:b0:70:3e:b2:c9:95:3c:43:60:72:6f:b1:dc:93:b1:74:0f:
66:30:ce:1b:25:22:b5:cd:29:42:1c:24:b1:6c:8e:17:82:95:
ac:c3:bb:b2:5e:ef:19:fd:a5:a6:6c:78:51:b0:df:4c:aa:e1:
71:df:59:45:0f:f3:09:a8:78:c6:9c:ca:a6:f9:58:e3:00:93:
ee:05:1e:88:37:09:c6:d6:e9:2a:7b:33:4c:42:3b:7e:61:2f:
6c:1f:ab:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:53 2025 by rpki-client