Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.mft
File: kuDCRw6wpptO-lhbnLLAZ2ErN54.mft (raw, json)
Hash identifier: 7t0QAu495jobvTUfHeo8zc0VzVXV5gYkqjA6DOhTdI0=
Subject key identifier: 12:AE:22:85:23:2D:5F:F7:CA:0F:E3:16:B3:69:B4:A8:3F:93:75:ED
Authority key identifier: 92:E0:C2:47:0E:B0:A6:9B:4E:FA:58:5B:9C:B2:C0:67:61:2B:37:9E
Certificate issuer: /CN=92e0c2470eb0a69b4efa585b9cb2c067612b379e
Certificate serial: 0198D4E06EB37DE2364535401065CF87A9CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kuDCRw6wpptO-lhbnLLAZ2ErN54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 03:02:14 +0000
Manifest this update: Sat 23 Aug 2025 03:02:14 +0000
Manifest next update: Sun 24 Aug 2025 03:02:14 +0000
Files and hashes: 1: PFjd2yWfyUqACNexTKNE7uw-CUw.roa (hash: 2N8aNvblU0PO6uAwaoOi3OFj+fZYGQD09CyRfcuaD9M=)
2: kuDCRw6wpptO-lhbnLLAZ2ErN54.crl (hash: JjmMH3gv4aUh94EUrVh2dhW07RL6N1xIYDbK4Jof/Wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.mft
rsync://rpki.ripe.net/repository/DEFAULT/kuDCRw6wpptO-lhbnLLAZ2ErN54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:6e:b3:7d:e2:36:45:35:40:10:65:cf:87:a9:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92e0c2470eb0a69b4efa585b9cb2c067612b379e
Validity
Not Before: Aug 23 03:02:14 2025 GMT
Not After : Aug 24 03:02:14 2025 GMT
Subject: CN=12ae2285232d5ff7ca0fe316b369b4a83f9375ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a1:93:98:96:07:67:4a:01:11:ed:d7:35:d6:
04:16:aa:6a:1d:5f:a7:a4:83:24:95:0e:d3:1b:e4:
52:32:ec:3e:fb:5a:a7:cd:a9:c3:72:57:75:4a:55:
2e:fe:63:d0:9b:b9:86:d2:a2:c1:19:e5:2c:fb:19:
18:c5:f2:8a:34:ee:54:1d:92:0e:a7:71:0f:76:67:
e8:93:bf:5e:94:8d:23:b3:87:e8:ee:52:f3:5e:01:
78:73:93:c1:cb:32:49:3c:47:65:cd:b2:c9:72:35:
4c:3e:7f:a1:d2:ee:d4:01:08:b2:8d:61:77:43:e5:
a6:45:e8:0a:04:5e:a6:d0:a9:f3:bd:2a:34:27:fe:
45:26:f0:64:e2:57:c8:3c:64:11:4c:55:90:6f:44:
c4:61:2d:76:b7:9c:82:62:63:7c:3f:41:6b:20:9d:
66:87:be:cd:ee:43:74:49:8e:07:e5:50:c8:01:f1:
cc:52:bb:9b:94:69:9a:fd:bb:01:02:c0:65:9d:86:
07:05:8a:d7:18:c6:f8:e4:84:14:81:e8:4d:0b:e6:
0e:c8:70:b7:96:82:63:a1:9f:e0:32:77:29:c8:64:
a4:12:29:2a:eb:79:ed:8e:16:a0:be:30:75:29:04:
9b:cc:dd:52:20:ce:29:08:36:e6:67:c5:2c:5b:9d:
a3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:AE:22:85:23:2D:5F:F7:CA:0F:E3:16:B3:69:B4:A8:3F:93:75:ED
X509v3 Authority Key Identifier:
keyid:92:E0:C2:47:0E:B0:A6:9B:4E:FA:58:5B:9C:B2:C0:67:61:2B:37:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kuDCRw6wpptO-lhbnLLAZ2ErN54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:5a:12:33:b0:ca:56:c1:28:0a:49:1d:5f:07:d5:26:86:22:
29:64:83:a5:34:e1:eb:07:a2:19:fb:e6:5d:b3:88:8c:95:59:
52:cf:5f:6a:f7:0f:13:6d:e9:86:c6:89:21:93:f8:69:3d:b7:
b1:40:06:d0:d3:1b:4e:f3:c2:04:06:bf:d6:21:91:d4:0d:99:
78:fc:9e:b1:dd:eb:fb:db:0b:8c:2a:a1:a9:da:86:63:ff:24:
63:87:0c:da:f1:0b:f7:97:87:dd:96:d5:bf:6a:04:83:02:33:
f6:00:5a:fb:30:0e:54:9c:19:50:d7:17:e5:13:c8:69:b2:cd:
9d:da:ea:67:a9:e4:e6:a0:6d:c6:28:32:de:09:66:21:09:7a:
ea:b1:ab:62:42:0e:72:1f:15:09:11:e9:79:11:23:76:fb:2e:
b9:7c:cc:f9:d0:c6:5c:b3:7e:90:f6:a6:0e:2e:49:aa:75:f9:
98:c9:10:b5:cc:78:89:d9:df:6c:71:7e:86:8a:3a:d1:de:3a:
c4:c4:2d:d2:08:96:35:c9:3f:26:52:cb:b1:41:ec:15:da:3f:
c2:f2:e0:75:d5:11:47:05:40:d4:40:8d:49:0f:49:e5:10:ce:
22:6a:e1:41:9b:8c:97:8e:69:76:06:cc:ef:36:a9:1b:da:13:
d6:96:c1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:46:49 2025 by rpki-client