Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
File: KsPteUra-5HLgalp64qbKQX-4uw.mft (raw, json)
Hash identifier: 0eccN/nSOR5Sre+/9MS4DwKsj34V2gJLY7ksQav4H6Q=
Subject key identifier: BE:9A:73:9C:FA:1D:C2:65:B9:E5:04:30:9F:5F:85:DC:17:7C:D0:96
Authority key identifier: 2A:C3:ED:79:4A:DA:FB:91:CB:81:A9:69:EB:8A:9B:29:05:FE:E2:EC
Certificate issuer: /CN=2ac3ed794adafb91cb81a969eb8a9b2905fee2ec
Certificate serial: 0198D4A807B5ED87C3526F88C78060176404
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 02:00:38 +0000
Manifest this update: Sat 23 Aug 2025 02:00:38 +0000
Manifest next update: Sun 24 Aug 2025 02:00:38 +0000
Files and hashes: 1: KsPteUra-5HLgalp64qbKQX-4uw.crl (hash: UVaQc1qsysdtWeOUfzgfLNnKLM7fDVkwMtMFXyNK56c=)
2: PKyx0DcFoAagRLDeVRH7IggDBvs.roa (hash: pNDjxNhK4qz1Wc21dlphpRgyPK79NSu66uAh/Cd4/LQ=)
3: zxynKoaXLk9CSCbEuR1SMnhOszM.roa (hash: 0C0maO3P6rLabRCNi4Fq6yr5sjK9+mFynQgMmbGpRUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:07:b5:ed:87:c3:52:6f:88:c7:80:60:17:64:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3ed794adafb91cb81a969eb8a9b2905fee2ec
Validity
Not Before: Aug 23 02:00:38 2025 GMT
Not After : Aug 24 02:00:38 2025 GMT
Subject: CN=be9a739cfa1dc265b9e504309f5f85dc177cd096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:0c:e9:77:db:8a:b3:7d:54:c6:66:fa:d9:a8:
44:50:95:c7:38:18:db:03:9d:df:b7:14:28:4a:7e:
c2:16:f9:c7:38:81:1b:d0:3d:89:cf:8a:5c:6e:9e:
8c:13:d9:4c:3d:df:5a:b7:be:d1:24:a8:36:9d:74:
9b:2e:ac:d8:c4:1d:e0:20:df:29:f5:4c:8e:9b:aa:
bd:11:98:85:c6:73:a7:be:7d:51:be:bf:da:ff:1d:
8a:f8:bd:ed:3d:06:09:4c:9a:10:6d:92:b3:1f:16:
2d:b6:75:83:ad:c0:25:9f:19:7f:49:d9:31:75:94:
e9:f6:9e:69:a8:64:10:96:2c:36:fc:14:7f:67:b1:
64:6a:f6:a9:72:a3:ce:7f:1c:56:5b:63:12:53:b4:
13:42:50:ff:e5:1c:34:54:27:55:d6:48:d8:62:5e:
e1:51:6b:53:ba:a4:a3:25:8f:7c:00:7d:44:4e:b4:
32:ca:06:de:0b:b0:89:d7:13:23:c6:ce:b9:6f:37:
fd:d4:3f:43:40:2c:e4:a9:24:dc:b9:5b:09:34:3d:
19:3e:06:00:30:59:8f:b2:05:d9:e8:06:1d:d3:27:
7f:a4:80:f0:b8:43:8e:54:ff:e3:c8:b4:33:54:24:
78:99:ed:b6:10:d4:68:2a:37:1c:be:af:23:3a:f7:
f9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:9A:73:9C:FA:1D:C2:65:B9:E5:04:30:9F:5F:85:DC:17:7C:D0:96
X509v3 Authority Key Identifier:
keyid:2A:C3:ED:79:4A:DA:FB:91:CB:81:A9:69:EB:8A:9B:29:05:FE:E2:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:61:b1:fb:25:24:02:ab:b7:74:11:c3:fd:f4:a2:ec:57:6f:
f3:38:9a:2d:4c:30:be:0d:8a:11:a4:c8:b4:ab:96:38:4b:2a:
28:d9:2f:7b:81:21:18:16:f0:f8:84:d1:40:9f:66:6c:80:33:
c2:c1:e0:38:48:70:bd:06:c1:9b:fa:52:6e:d1:da:55:4b:73:
51:c8:12:1a:b3:13:af:69:6f:4c:5e:02:c3:cb:0c:57:1e:cb:
42:2e:39:26:34:04:04:b8:0a:c6:1d:6b:ab:48:e0:8c:7b:33:
c9:42:12:de:aa:61:70:ed:10:f2:93:56:33:4b:2b:e4:5c:15:
48:9c:4d:63:00:f7:6a:e8:33:aa:57:d1:f9:06:60:23:22:33:
40:e8:e0:da:31:08:fa:3b:0c:de:a5:ea:2f:3c:e5:bf:f4:8d:
ef:b8:45:73:16:88:3a:4f:0b:94:7a:8f:6b:77:ce:ac:e6:c5:
f2:a7:75:db:1e:34:17:a7:09:c6:f2:3c:00:58:88:c4:db:38:
b1:3f:bc:0d:e7:3d:82:bf:3f:26:50:7f:bc:2e:f5:ff:ee:ad:
6c:98:10:91:06:82:52:e4:09:67:2c:44:aa:8d:f2:16:08:86:
09:17:c3:7f:ee:27:f8:f6:ba:c0:64:a2:41:1d:78:c2:8b:57:
2e:46:4e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:59 2025 by rpki-client