Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.mft
File: KUtbu-F0Z0duIoKIgiGIffVJ9Lk.mft (raw, json)
Hash identifier: 05446VYOVK4Rz9y4XUWz+vDKA4bb9cQ/DbhUTgGuZAo=
Subject key identifier: AC:0B:B8:5C:5F:3B:F6:0D:B0:54:B6:30:8C:6A:D5:A7:E1:16:4E:53
Authority key identifier: 29:4B:5B:BB:E1:74:67:47:6E:22:82:88:82:21:88:7D:F5:49:F4:B9
Certificate issuer: /CN=294b5bbbe17467476e2282888221887df549f4b9
Certificate serial: 0198D4737FAD033096BF3FC4169724B2BFC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.mft
Manifest number: 15DA
Signing time: Sat 23 Aug 2025 01:03:15 +0000
Manifest this update: Sat 23 Aug 2025 01:03:15 +0000
Manifest next update: Sun 24 Aug 2025 01:03:15 +0000
Files and hashes: 1: HJiIfDvFo_sDLMJ5OE82mYFpyHQ.roa (hash: P459lfA3vTZFDKOU1GovB2qolTUez89TIhHTMpHxZQo=)
2: KUtbu-F0Z0duIoKIgiGIffVJ9Lk.crl (hash: Q122zBEAF0Hm+vlenf8xqzJZPNVgZSOH0D9HYNGSChU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.mft
rsync://rpki.ripe.net/repository/DEFAULT/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:7f:ad:03:30:96:bf:3f:c4:16:97:24:b2:bf:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=294b5bbbe17467476e2282888221887df549f4b9
Validity
Not Before: Aug 23 01:03:15 2025 GMT
Not After : Aug 24 01:03:15 2025 GMT
Subject: CN=ac0bb85c5f3bf60db054b6308c6ad5a7e1164e53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:95:82:bd:8a:d3:94:d6:6c:45:9c:dd:8e:42:
3e:df:c7:0d:02:65:b0:96:f7:a0:47:da:3c:93:da:
24:a4:00:bb:c8:17:3d:3b:19:fb:71:b4:de:d9:e9:
1d:a8:9e:d2:e8:aa:f2:6a:dc:59:a9:be:36:47:83:
a7:cd:55:59:70:19:7a:b3:a7:f2:cb:cd:66:0c:0c:
00:df:a0:4c:73:0b:e2:26:97:78:7f:23:32:fa:2c:
03:31:b4:65:74:85:45:59:14:75:fe:61:17:15:98:
e3:1f:ff:79:94:10:77:24:ab:0f:37:37:b3:12:b2:
c7:9c:a8:1e:99:b5:e0:7c:b9:52:b3:d1:15:d2:a8:
ff:32:aa:e7:d0:2e:ec:5c:47:31:69:60:00:ee:12:
e2:69:e6:c9:5e:c9:71:59:68:9c:41:38:94:19:67:
9c:90:c7:e6:3c:50:a5:2a:5b:7e:7b:2c:ac:71:d4:
f8:64:83:22:de:31:65:3d:fa:a0:0d:f8:d9:8b:35:
01:4b:b9:7a:0f:1f:09:b5:66:51:35:43:61:82:6c:
92:df:3d:19:bf:9d:e3:7e:88:ee:ec:e8:3f:b0:c6:
1e:17:6f:c2:c6:78:7c:85:29:d3:8d:38:8d:a9:81:
5b:08:3d:8e:83:ec:2b:cf:44:9b:4c:1b:f5:03:cd:
1d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:0B:B8:5C:5F:3B:F6:0D:B0:54:B6:30:8C:6A:D5:A7:E1:16:4E:53
X509v3 Authority Key Identifier:
keyid:29:4B:5B:BB:E1:74:67:47:6E:22:82:88:82:21:88:7D:F5:49:F4:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:aa:e2:f0:dd:74:df:3e:b4:32:93:e3:26:bc:fc:76:fe:39:
c8:0c:7b:56:28:4c:5c:89:0c:53:6d:a8:1f:5d:bf:9a:b4:10:
e7:2d:c9:14:0b:d0:9b:42:eb:51:2f:0b:23:93:ea:e7:68:06:
6a:90:79:a9:70:b7:76:d4:cd:c9:19:55:a6:63:f9:a3:c6:98:
36:12:78:28:99:16:41:78:2a:6c:18:49:57:c5:a6:52:19:bc:
7e:75:dc:58:cf:25:5f:dd:b0:3b:38:0e:a4:45:8c:c1:55:1e:
3d:12:8b:d5:fa:4c:82:13:c1:95:61:dd:7e:8c:8a:41:1a:a4:
b6:66:17:f7:c5:b4:79:28:03:5c:af:b1:25:b6:f2:ce:44:ba:
6a:f6:0c:fa:f3:fd:e2:e6:7a:7d:42:4b:7a:de:b1:5f:42:d5:
a2:47:c8:95:44:9e:c4:01:0c:83:c6:5d:d2:eb:01:88:17:f6:
4d:05:00:f3:c4:eb:49:f6:1d:bf:5b:56:cc:c2:f0:64:a8:43:
b1:3d:ad:70:1e:db:9f:19:cd:9f:d2:a2:9c:80:b5:cf:d2:06:
40:b1:79:53:07:f7:81:3b:0e:d2:0f:64:04:3e:d1:e4:e0:ee:
6e:4c:58:b4:4a:cf:75:00:78:03:a7:6e:1e:36:ae:5b:1f:44:
fb:a9:4b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:49:17 2025 by rpki-client