Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/58394a-8cf6-4b11-becb-3ba69131458b/1/kuwpVHbKHZNNsE0AJE_FB5ucl0g.mft
File: kuwpVHbKHZNNsE0AJE_FB5ucl0g.mft (raw, json)
Hash identifier: gJOe1XbKAlCYFOApA4HZYWzRxh7sTLrxKyQN319Ymek=
Subject key identifier: 29:6D:CC:D3:C0:99:A7:0D:EC:3F:62:D2:51:8D:7C:0E:0E:84:81:B1
Authority key identifier: 92:EC:29:54:76:CA:1D:93:4D:B0:4D:00:24:4F:C5:07:9B:9C:97:48
Certificate issuer: /CN=92ec295476ca1d934db04d00244fc5079b9c9748
Certificate serial: 0199FCC65EB41785D5FE6F6CEAAF792F0F92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kuwpVHbKHZNNsE0AJE_FB5ucl0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/58394a-8cf6-4b11-becb-3ba69131458b/1/kuwpVHbKHZNNsE0AJE_FB5ucl0g.mft
Manifest number: 12F3
Signing time: Sun 19 Oct 2025 14:01:22 +0000
Manifest this update: Sun 19 Oct 2025 14:01:22 +0000
Manifest next update: Mon 20 Oct 2025 14:01:22 +0000
Files and hashes: 1: kuwpVHbKHZNNsE0AJE_FB5ucl0g.crl (hash: 0XO52H92cMsXg+0XxB8fvjp7063YLmCQ6YLIShkmT/k=)
2: sZ85FeVfKS3RqKqG5NUDvn--qlo.roa (hash: gTaYc3X+G3Jkjg5kUdF0n9TPsOguK/WjYif95eZGzOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/58394a-8cf6-4b11-becb-3ba69131458b/1/kuwpVHbKHZNNsE0AJE_FB5ucl0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/58394a-8cf6-4b11-becb-3ba69131458b/1/kuwpVHbKHZNNsE0AJE_FB5ucl0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/kuwpVHbKHZNNsE0AJE_FB5ucl0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:5e:b4:17:85:d5:fe:6f:6c:ea:af:79:2f:0f:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92ec295476ca1d934db04d00244fc5079b9c9748
Validity
Not Before: Oct 19 14:01:22 2025 GMT
Not After : Oct 20 14:01:22 2025 GMT
Subject: CN=296dccd3c099a70dec3f62d2518d7c0e0e8481b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:eb:ab:90:30:ca:60:37:b5:c7:56:02:b0:fa:
40:f6:35:73:2c:a6:3c:68:a6:21:35:0c:4e:45:09:
eb:e1:cb:eb:97:f5:87:14:1c:35:58:af:8a:e1:e0:
44:59:47:63:9b:c5:c0:50:55:83:12:ea:e5:54:9c:
b3:38:ff:9b:c8:8b:f6:3a:5d:f4:1e:f1:aa:a9:34:
98:bc:b4:e1:b9:95:3f:15:57:c1:f4:dc:36:32:5e:
33:8d:76:cc:7a:4e:11:fd:84:09:50:54:7e:12:11:
e9:2b:bd:10:f2:4d:96:8b:67:9b:d9:69:60:cb:f8:
c8:ec:5f:45:73:da:6a:22:f4:80:75:19:79:6c:84:
96:28:d1:2b:3c:21:e9:3a:fd:ca:62:27:b5:34:a2:
68:5c:2b:14:d3:06:e1:0f:83:18:d1:ec:41:f3:11:
1d:11:49:e9:92:7b:12:be:66:f6:be:c8:ce:08:1a:
17:55:9a:6d:77:d0:76:d2:50:81:aa:9c:6e:d0:69:
0c:e8:45:1b:44:3c:eb:b7:ad:75:71:91:55:2c:e8:
0e:e0:c5:b6:2f:77:88:36:38:82:7a:d1:85:9f:56:
11:53:19:7e:9a:14:4b:be:07:4c:82:dc:ab:19:c5:
5f:7d:a4:60:cb:8c:9d:4a:3f:ee:18:72:26:fa:7b:
ec:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:6D:CC:D3:C0:99:A7:0D:EC:3F:62:D2:51:8D:7C:0E:0E:84:81:B1
X509v3 Authority Key Identifier:
keyid:92:EC:29:54:76:CA:1D:93:4D:B0:4D:00:24:4F:C5:07:9B:9C:97:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kuwpVHbKHZNNsE0AJE_FB5ucl0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/58394a-8cf6-4b11-becb-3ba69131458b/1/kuwpVHbKHZNNsE0AJE_FB5ucl0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/58394a-8cf6-4b11-becb-3ba69131458b/1/kuwpVHbKHZNNsE0AJE_FB5ucl0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:b2:f6:7a:7c:9c:3f:20:9d:91:a8:a9:a0:8b:3a:79:03:4f:
3e:78:0d:87:f8:24:63:8a:24:4a:d4:c1:4f:53:cb:b8:28:14:
99:5a:6e:7c:e7:75:55:b5:72:84:5c:9b:91:c5:66:14:23:46:
38:9c:57:32:68:c8:52:d4:e0:36:76:d7:e7:ad:05:92:90:c2:
0f:10:33:56:bd:de:d4:db:a7:cd:36:b9:8a:17:cb:68:79:e2:
7c:6e:c2:3b:9d:e7:e4:67:f6:7c:e6:2a:11:d9:7a:97:14:5e:
fe:07:1f:fe:ee:5d:66:36:f8:71:3e:22:e6:ef:83:dc:c8:fe:
c1:e5:01:ac:80:ef:f6:92:9e:90:f4:71:5b:f6:6e:10:80:40:
91:e5:5c:7a:61:47:1c:7c:1f:6f:91:74:0e:4e:23:0a:0e:f3:
3a:69:0a:fb:5a:fa:a3:21:d2:e8:b3:6b:ae:d9:4b:55:c7:e0:
ec:b8:ea:b9:d2:0d:05:f9:6b:89:a6:a5:bb:e6:c6:66:de:9b:
b1:22:b8:c4:d3:9d:ca:ee:28:2f:29:60:8c:07:b0:0e:13:40:
30:5d:80:2f:0e:a5:50:15:a3:18:ad:4c:77:58:33:c4:12:05:
da:76:64:44:dd:70:af:02:6b:71:ae:32:b0:17:b0:78:99:3d:
c0:e2:13:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:57:01 2025 by rpki-client