Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/ku_2FiUC6jtS_YyjrhCNE9a_9lI.mft
File: ku_2FiUC6jtS_YyjrhCNE9a_9lI.mft (raw, json)
Hash identifier: KRHUZ5LLoFccXJES9a1AtYvRv7n2CvZwek+gYu1LceU=
Subject key identifier: 69:65:4A:CD:41:19:61:EA:B3:77:CE:CE:74:BA:04:83:5A:9F:96:DE
Authority key identifier: 92:EF:F6:16:25:02:EA:3B:52:FD:8C:A3:AE:10:8D:13:D6:BF:F6:52
Certificate issuer: /CN=92eff6162502ea3b52fd8ca3ae108d13d6bff652
Certificate serial: 0199FBEC552CAD90A4267273057B32A2A677
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ku_2FiUC6jtS_YyjrhCNE9a_9lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/ku_2FiUC6jtS_YyjrhCNE9a_9lI.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 10:03:13 +0000
Manifest this update: Sun 19 Oct 2025 10:03:13 +0000
Manifest next update: Mon 20 Oct 2025 10:03:13 +0000
Files and hashes: 1: ku_2FiUC6jtS_YyjrhCNE9a_9lI.crl (hash: im2lS6zEoNKjxYCv0Pa/KqKIMLhM2CJeq/FWPQZrUoY=)
2: vIUD6qLiZhlDA8IvWgGD4RFZTgQ.roa (hash: 8f4c2O05sapdQ4wcaKqtNByBFKGfiB5rQ1o7fR58j44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/ku_2FiUC6jtS_YyjrhCNE9a_9lI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/ku_2FiUC6jtS_YyjrhCNE9a_9lI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ku_2FiUC6jtS_YyjrhCNE9a_9lI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:55:2c:ad:90:a4:26:72:73:05:7b:32:a2:a6:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92eff6162502ea3b52fd8ca3ae108d13d6bff652
Validity
Not Before: Oct 19 10:03:13 2025 GMT
Not After : Oct 20 10:03:13 2025 GMT
Subject: CN=69654acd411961eab377cece74ba04835a9f96de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:85:48:cb:d9:d8:03:2f:8c:ae:dd:6b:2b:71:
e3:f1:9d:1c:96:92:19:b1:1e:6b:69:ad:a3:bb:d9:
e7:67:1d:38:81:45:3e:83:d5:f3:43:5a:77:25:ec:
b3:44:75:81:c3:a5:9d:f7:65:14:32:c1:f8:b9:ab:
83:ff:7d:dd:bf:78:c7:3c:f5:fe:ea:29:23:b2:e6:
71:35:1d:4a:8f:d2:94:30:5f:0f:b9:2e:6b:7b:28:
34:e2:71:80:e0:b0:86:f9:a2:5c:a0:5e:e5:74:42:
80:52:4f:f5:cc:08:a2:4b:58:87:2a:0d:1d:21:f0:
24:4f:b7:63:bf:cd:82:ac:8d:07:6f:4d:fc:29:bc:
32:1a:e8:f3:3e:e6:ff:0b:57:d7:3d:a5:6d:d6:a0:
8b:4d:34:04:08:f2:1c:5e:3e:27:d5:0a:10:49:2e:
d2:5b:a7:d2:ff:8f:f9:40:0d:64:32:24:01:98:b6:
6f:1c:d3:f6:6b:5a:d1:bc:1b:de:8e:86:96:7a:98:
6b:7e:d7:81:e2:81:16:32:f8:27:7a:07:b0:f1:d6:
a0:6a:6e:43:ee:ad:3d:8d:fa:c0:a1:a4:85:bc:20:
5e:13:4c:52:e7:b9:88:4a:02:4d:36:9d:03:33:2f:
41:2f:6d:30:bc:94:76:8a:38:a4:b0:57:37:20:d9:
e9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:65:4A:CD:41:19:61:EA:B3:77:CE:CE:74:BA:04:83:5A:9F:96:DE
X509v3 Authority Key Identifier:
keyid:92:EF:F6:16:25:02:EA:3B:52:FD:8C:A3:AE:10:8D:13:D6:BF:F6:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ku_2FiUC6jtS_YyjrhCNE9a_9lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/ku_2FiUC6jtS_YyjrhCNE9a_9lI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/ku_2FiUC6jtS_YyjrhCNE9a_9lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:cc:6f:11:7b:24:5a:4b:67:a9:18:68:eb:e7:ad:ec:24:e6:
bf:02:f6:74:08:77:7d:66:0e:3a:de:85:4f:a6:b8:03:41:d3:
e0:d1:3b:36:c1:b4:20:ea:6f:99:1d:e8:05:13:62:44:4f:94:
7e:02:e5:0a:36:c7:6e:e2:58:b9:71:67:77:b1:4f:d7:79:83:
b0:94:71:85:3e:3c:59:b1:26:e6:61:59:0a:2f:44:86:89:a5:
e1:51:3e:a2:67:9c:87:7a:45:f6:38:ae:5e:06:db:86:3d:5b:
56:e4:67:a8:c5:65:47:7d:ca:64:79:e4:20:b8:d1:b1:34:22:
02:8b:35:b5:30:6b:0d:ba:64:58:14:ff:b7:25:c0:e0:f1:72:
06:d7:29:19:7f:42:cf:e9:51:9f:7f:e8:8b:68:3e:b3:3b:58:
1d:11:c1:f3:6d:a5:2b:b5:a0:98:32:28:e4:a1:3a:8e:82:7d:
7c:c9:b0:e8:b7:46:4d:b6:e2:32:b3:84:ad:93:fd:38:04:41:
e0:15:02:30:0b:bf:ad:d5:3f:96:5f:24:a5:a9:80:c7:52:07:
12:7e:a6:0e:48:b2:f3:6f:3b:57:1f:36:9f:f9:e8:86:96:9c:
cf:16:fe:db:cc:b1:3d:3c:f3:0d:38:51:56:c2:38:81:c9:c6:
d1:02:22:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn77FUsrZCkJnJzBXsyoqZ3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZWZmNjE2MjUwMmVhM2I1MmZkOGNhM2FlMTA4ZDEzZDZi
ZmY2NTIwHhcNMjUxMDE5MTAwMzEzWhcNMjUxMDIwMTAwMzEzWjAzMTEwLwYDVQQD
Eyg2OTY1NGFjZDQxMTk2MWVhYjM3N2NlY2U3NGJhMDQ4MzVhOWY5NmRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIVIy9nYAy+Mrt1rK3Hj8Z0clpIZ
sR5raa2ju9nnZx04gUU+g9XzQ1p3JeyzRHWBw6Wd92UUMsH4uauD/33dv3jHPPX+
6ikjsuZxNR1Kj9KUMF8PuS5reyg04nGA4LCG+aJcoF7ldEKAUk/1zAiiS1iHKg0d
IfAkT7djv82CrI0Hb038KbwyGujzPub/C1fXPaVt1qCLTTQECPIcXj4n1QoQSS7S
W6fS/4/5QA1kMiQBmLZvHNP2a1rRvBvejoaWephrfteB4oEWMvgnegew8dagam5D
7q09jfrAoaSFvCBeE0xS57mISgJNNp0DMy9BL20wvJR2ijiksFc3INnprwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGllSs1BGWHqs3fOznS6BINan5beMB8GA1UdIwQY
MBaAFJLv9hYlAuo7Uv2Mo64QjRPWv/ZSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3VfMkZpVUM2anRTX1l5anJoQ05FOWFfOWxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS83OTQzYTAtY2NhYi00MjYwLWJkNTEt
YWZlODlhYWNjNDkyLzEva3VfMkZpVUM2anRTX1l5anJoQ05FOWFfOWxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS83OTQzYTAtY2NhYi00MjYwLWJkNTEtYWZlODlhYWNjNDky
LzEva3VfMkZpVUM2anRTX1l5anJoQ05FOWFfOWxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkMxvEXsk
WktnqRho6+et7CTmvwL2dAh3fWYOOt6FT6a4A0HT4NE7NsG0IOpvmR3oBRNiRE+U
fgLlCjbHbuJYuXFnd7FP13mDsJRxhT48WbEm5mFZCi9Ehoml4VE+omech3pF9jiu
Xgbbhj1bVuRnqMVlR33KZHnkILjRsTQiAos1tTBrDbpkWBT/tyXA4PFyBtcpGX9C
z+lRn3/oi2g+sztYHRHB822lK7WgmDIo5KE6joJ9fMmw6LdGTbbiMrOErZP9OARB
4BUCMAu/rdU/ll8kpamAx1IHEn6mDkiy8287Vx82n/nohpaczxb+28yxPTzzDThR
VsI4gcnG0QIiSw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:50 2025 by rpki-client