
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/84c3d5-8ab2-44ac-942b-c4b9c539407b/1/kt2u3zcPNa-LXut_hubPr6zojU4.mft
File: kt2u3zcPNa-LXut_hubPr6zojU4.mft (raw, json)
Hash identifier: rZJDdN0j3mO5HwdElinQLNzgTGVp3/bd89X2uqB4xP8=
Subject key identifier: 9C:82:99:A0:EA:CF:A3:38:02:9C:F2:CE:C4:39:07:AE:2A:69:91:CC
Authority key identifier: 92:DD:AE:DF:37:0F:35:AF:8B:5E:EB:7F:86:E6:CF:AF:AC:E8:8D:4E
Certificate issuer: /CN=92ddaedf370f35af8b5eeb7f86e6cfaface88d4e
Certificate serial: 0198D5F149347CD7CE295347BB17DE458BBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kt2u3zcPNa-LXut_hubPr6zojU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/84c3d5-8ab2-44ac-942b-c4b9c539407b/1/kt2u3zcPNa-LXut_hubPr6zojU4.mft
Manifest number: 069C
Signing time: Sat 23 Aug 2025 08:00:16 +0000
Manifest this update: Sat 23 Aug 2025 08:00:16 +0000
Manifest next update: Sun 24 Aug 2025 08:00:16 +0000
Files and hashes: 1: dqOSF9Ies6urS5k4Ct3cQtw5VN8.roa (hash: J3BiGkZdoL6h6rfESwdaItaaKVovQQqfeD9nGDkL6og=)
2: kt2u3zcPNa-LXut_hubPr6zojU4.crl (hash: k90iBnDGfpa4/2A9Or6sDdu3ketKM2nCqhfUDJLQZO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/84c3d5-8ab2-44ac-942b-c4b9c539407b/1/kt2u3zcPNa-LXut_hubPr6zojU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/84c3d5-8ab2-44ac-942b-c4b9c539407b/1/kt2u3zcPNa-LXut_hubPr6zojU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kt2u3zcPNa-LXut_hubPr6zojU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:49:34:7c:d7:ce:29:53:47:bb:17:de:45:8b:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92ddaedf370f35af8b5eeb7f86e6cfaface88d4e
Validity
Not Before: Aug 23 08:00:16 2025 GMT
Not After : Aug 24 08:00:16 2025 GMT
Subject: CN=9c8299a0eacfa338029cf2cec43907ae2a6991cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:73:bf:e8:bf:47:ab:87:57:9d:7c:82:04:4b:
74:90:55:b4:ee:31:91:49:c1:72:1a:a7:38:ca:f3:
38:dc:85:e2:48:0c:5b:d0:d7:4f:fa:08:43:50:ee:
59:3f:6d:b1:85:ac:1a:55:75:55:9b:35:9a:da:ff:
56:bd:96:da:75:38:93:e7:ad:0a:cf:e7:f8:1c:fe:
b4:69:d1:51:b9:b0:6e:10:7d:69:47:0a:d8:aa:a0:
2c:e4:1f:73:79:d8:cc:a6:ef:ef:73:44:91:b9:5c:
e7:2f:16:96:d4:c3:43:82:12:70:55:e1:5c:86:6b:
41:9d:02:74:08:81:0d:85:76:12:55:52:c6:72:14:
88:2c:bc:33:bc:f8:da:1d:6b:e3:23:6f:24:4a:09:
e8:08:db:ad:e8:a7:98:66:2f:f6:3d:f2:55:ed:8f:
28:9f:2f:38:81:ee:4f:9a:63:4b:06:af:fa:2e:f6:
c2:41:40:96:79:d6:4e:a3:e3:64:38:78:89:33:b9:
bb:2a:e7:77:6f:30:31:3f:26:5e:90:cb:0e:62:0e:
de:5f:1f:c3:c3:28:52:aa:15:d4:da:7b:44:02:6b:
fb:9d:d9:7a:1f:f8:60:e6:1d:cb:ea:6c:6c:4e:4f:
45:7c:2e:2f:3b:74:8d:f7:07:9f:37:fa:65:34:a9:
c8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:82:99:A0:EA:CF:A3:38:02:9C:F2:CE:C4:39:07:AE:2A:69:91:CC
X509v3 Authority Key Identifier:
keyid:92:DD:AE:DF:37:0F:35:AF:8B:5E:EB:7F:86:E6:CF:AF:AC:E8:8D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kt2u3zcPNa-LXut_hubPr6zojU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/84c3d5-8ab2-44ac-942b-c4b9c539407b/1/kt2u3zcPNa-LXut_hubPr6zojU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/84c3d5-8ab2-44ac-942b-c4b9c539407b/1/kt2u3zcPNa-LXut_hubPr6zojU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:ba:9a:25:46:f9:42:02:90:43:6e:8f:8b:e0:1a:80:e3:d1:
de:12:5e:94:c6:a7:e5:9e:5c:a9:76:ce:a6:5b:15:28:db:83:
68:0c:ae:9e:aa:55:d9:7f:29:5f:5c:b4:72:cf:dd:4d:56:2a:
5a:ec:84:3b:d0:bf:50:8c:de:18:ce:af:1b:d4:0f:c0:94:d1:
f7:9b:bd:f0:9c:14:df:42:66:f4:5d:81:49:25:62:0b:c0:c5:
72:7e:0d:d1:39:8d:d7:b5:2b:ba:5d:52:3a:57:75:5b:ce:65:
6b:1c:b6:71:77:ce:c0:5f:81:98:09:05:62:a0:36:23:2f:67:
42:84:a2:46:ec:de:4c:e2:b0:80:36:8c:59:5f:09:0c:7e:af:
39:c9:d0:79:c7:8a:be:5a:17:ac:5f:40:5f:2e:65:fa:33:99:
e2:96:81:22:12:13:39:38:de:f3:d7:4b:47:cb:3b:47:54:ae:
8b:78:21:a1:fb:ad:31:e6:69:cb:52:70:8c:ee:9c:eb:0d:b3:
7c:3e:b4:d3:6d:fd:2d:1b:d8:fc:4d:68:10:71:bb:23:10:a5:
02:78:2e:cb:e2:ad:2b:a7:62:6d:3b:3a:32:25:a7:5a:e3:c6:
c9:3f:02:c9:19:ed:53:55:29:d1:50:6e:fb:10:61:73:95:47:
38:df:61:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:00:07 2025 by rpki-client