Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.mft
File: KUtbu-F0Z0duIoKIgiGIffVJ9Lk.mft (raw, json)
Hash identifier: zPg+b1/VFPEipRRLI9opK8aC7VA5UMOXdf1BgEniCMk=
Subject key identifier: 7D:9D:9F:29:FC:AA:CC:1C:C7:EA:4D:7D:1B:76:BB:AB:6F:AA:08:AC
Authority key identifier: 29:4B:5B:BB:E1:74:67:47:6E:22:82:88:82:21:88:7D:F5:49:F4:B9
Certificate issuer: /CN=294b5bbbe17467476e2282888221887df549f4b9
Certificate serial: 0197B6A0EECC4080BB4E71EE803807A0D47F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.mft
Manifest number: 1546
Signing time: Sat 28 Jun 2025 13:01:29 +0000
Manifest this update: Sat 28 Jun 2025 13:01:29 +0000
Manifest next update: Sun 29 Jun 2025 13:01:29 +0000
Files and hashes: 1: HJiIfDvFo_sDLMJ5OE82mYFpyHQ.roa (hash: P459lfA3vTZFDKOU1GovB2qolTUez89TIhHTMpHxZQo=)
2: KUtbu-F0Z0duIoKIgiGIffVJ9Lk.crl (hash: 5IheOKqs6GaWbvAKpckpb+hxHPJUi4BtUJdOcXxZB/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.mft
rsync://rpki.ripe.net/repository/DEFAULT/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:ee:cc:40:80:bb:4e:71:ee:80:38:07:a0:d4:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=294b5bbbe17467476e2282888221887df549f4b9
Validity
Not Before: Jun 28 13:01:29 2025 GMT
Not After : Jun 29 13:01:29 2025 GMT
Subject: CN=7d9d9f29fcaacc1cc7ea4d7d1b76bbab6faa08ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:be:da:12:e3:dc:e8:7c:30:25:67:6c:94:11:
7f:e0:a9:d8:55:e7:c2:3f:3b:68:56:a0:4f:5a:35:
26:20:7c:85:17:5b:18:f3:2b:55:9e:6b:8f:69:d0:
d5:82:ae:8a:95:98:fa:58:10:16:88:f2:45:72:94:
f0:76:17:da:24:7e:e0:2e:3f:f5:db:c9:93:49:12:
02:66:f9:22:3f:2c:97:89:32:f2:b4:ff:09:90:78:
5d:82:fd:d1:07:18:c9:f9:1b:2d:28:06:61:a2:6b:
a7:93:d5:c4:c3:15:c1:91:7c:9a:ab:98:0e:db:95:
5b:a0:11:0a:e4:06:8a:19:9d:b4:b9:d2:44:c3:dc:
86:f8:01:7b:1f:98:e1:26:16:41:9a:52:37:0e:cd:
cd:8a:17:79:21:25:8b:ac:f4:ec:aa:bb:c3:a5:19:
a3:1a:e0:3d:39:2f:29:e0:62:45:09:d5:43:60:8e:
a5:41:52:68:14:45:80:e2:25:bc:f9:7d:90:61:32:
d3:5d:54:4c:eb:ea:6a:ee:79:0a:2a:61:ba:0d:5c:
4b:39:74:a0:31:91:ed:11:c4:74:51:5f:6e:d0:16:
be:cd:d8:73:a8:51:bc:3c:54:f1:4d:a4:b4:40:92:
3c:03:0d:a1:b9:70:67:c0:de:54:b4:00:a7:a9:34:
92:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:9D:9F:29:FC:AA:CC:1C:C7:EA:4D:7D:1B:76:BB:AB:6F:AA:08:AC
X509v3 Authority Key Identifier:
keyid:29:4B:5B:BB:E1:74:67:47:6E:22:82:88:82:21:88:7D:F5:49:F4:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:4b:8b:ba:ec:a2:b3:09:69:8d:e5:de:b9:57:f1:84:0a:02:
cc:db:52:bc:68:fa:ef:91:fc:0e:df:d1:2d:31:4e:66:3a:fc:
b5:b3:28:17:76:d7:89:7f:91:f9:ac:5a:be:f6:7c:a3:1c:20:
7a:bd:ce:1c:b8:31:b2:9f:ec:53:5b:84:fd:54:68:2e:c2:f5:
13:7a:b0:b4:55:e9:5f:bf:99:b5:52:e0:68:fb:17:51:ed:97:
9d:ab:9f:33:30:27:11:49:48:b6:08:04:25:8c:db:e1:ec:1d:
46:0d:40:74:3f:ff:f3:10:78:b6:d2:68:87:51:61:6b:74:4f:
f5:e1:c3:3c:66:d6:5c:6c:bc:b1:06:41:bf:bf:ec:c8:0b:1b:
c5:4f:ea:e7:eb:ba:d4:f6:31:7b:dd:e0:7a:c3:2c:00:77:03:
1d:cc:66:7a:f2:67:13:aa:d7:ba:d3:a8:6d:ee:3e:fb:51:99:
7e:44:f0:6c:ff:e4:05:7c:7d:2d:d8:92:ce:a3:ff:75:0f:a2:
38:18:63:1d:fd:9a:08:b1:10:a1:41:d2:25:5c:d4:91:18:37:
cd:83:a6:f6:5c:6a:02:d2:a2:48:14:be:7d:09:47:fb:e7:7c:
f6:4c:21:5d:b1:5e:bf:1a:00:6a:02:fc:1b:b6:a8:6f:d3:c1:
9b:ee:1c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:11:36 2025 by rpki-client