Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft
File: KuK_S6R9cV5T4us9AS0_y80bDsA.mft (raw, json)
Hash identifier: OQAXFN45yWYsDnMs1MoUk3U+j3F1nN8/yj+RD2VvJcY=
Subject key identifier: 61:6F:9B:D0:15:74:C8:80:AA:A9:6A:0D:29:5E:76:58:74:72:44:26
Authority key identifier: 2A:E2:BF:4B:A4:7D:71:5E:53:E2:EB:3D:01:2D:3F:CB:CD:1B:0E:C0
Certificate issuer: /CN=2ae2bf4ba47d715e53e2eb3d012d3fcbcd1b0ec0
Certificate serial: 019826D978597C3A984F281E434AFD832890
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KuK_S6R9cV5T4us9AS0_y80bDsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft
Manifest number: 31
Signing time: Sun 20 Jul 2025 08:00:42 +0000
Manifest this update: Sun 20 Jul 2025 08:00:42 +0000
Manifest next update: Mon 21 Jul 2025 08:00:42 +0000
Files and hashes: 1: ImNYtfmA17VPvuzFmVELDdKaFPo.roa (hash: qTcKtkAu4/tozlJ7sg/B8RXSaVxn+Vv1tRQIyPPwO20=)
2: KuK_S6R9cV5T4us9AS0_y80bDsA.crl (hash: CYvJ3PHSPKUAlXKgGmLP2qgE9lojXAWsnAG6ZGLOPsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KuK_S6R9cV5T4us9AS0_y80bDsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:26:d9:78:59:7c:3a:98:4f:28:1e:43:4a:fd:83:28:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ae2bf4ba47d715e53e2eb3d012d3fcbcd1b0ec0
Validity
Not Before: Jul 20 08:00:42 2025 GMT
Not After : Jul 21 08:00:42 2025 GMT
Subject: CN=616f9bd01574c880aaa96a0d295e765874724426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:41:21:61:42:da:28:ad:64:57:38:54:aa:32:
67:8d:09:2c:fb:65:ca:65:17:e8:80:62:54:e8:de:
03:71:44:86:98:cd:7e:f3:19:11:3b:f3:19:60:98:
bb:5b:5e:5f:dc:35:b9:5c:99:d4:7a:84:f6:0c:13:
bf:b7:d1:2e:c7:92:3c:54:0f:37:87:80:70:c4:90:
dc:85:5b:d6:e0:7a:f4:87:30:8d:ed:5c:72:66:d8:
ca:12:34:b7:99:75:d2:b7:cb:5e:33:01:b9:c3:ab:
5e:22:01:5f:06:a8:d8:9c:ec:c1:14:a7:7c:44:d1:
45:f6:96:b3:9e:03:33:8b:24:ab:4e:e3:55:46:0f:
26:8f:c5:99:12:78:a5:27:dc:8e:00:28:1f:01:89:
f2:08:91:fa:1d:22:28:f3:49:b7:73:1a:6b:25:a8:
91:86:85:f9:0e:e6:a9:61:b6:af:88:74:59:b1:06:
fb:1c:c0:b0:67:30:5e:e9:54:ce:ce:59:84:c4:24:
c6:94:74:89:31:25:d1:76:4c:49:9a:be:f5:3f:fc:
6a:9d:a0:03:5e:63:5c:f9:41:8a:a3:59:cf:05:4b:
8e:b4:64:b2:82:8b:3c:07:94:05:f4:65:7b:4a:e8:
de:37:e6:02:9b:44:1e:cc:b1:1d:24:e6:31:98:de:
75:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:6F:9B:D0:15:74:C8:80:AA:A9:6A:0D:29:5E:76:58:74:72:44:26
X509v3 Authority Key Identifier:
keyid:2A:E2:BF:4B:A4:7D:71:5E:53:E2:EB:3D:01:2D:3F:CB:CD:1B:0E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KuK_S6R9cV5T4us9AS0_y80bDsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:33:c2:97:6e:ac:99:5b:6d:45:f7:ec:b9:19:c4:e1:91:35:
38:2e:ff:9d:2b:d7:e1:31:78:de:80:2a:e9:e1:91:4e:9c:a8:
c4:3b:71:7d:57:bb:8f:ca:ba:79:a8:4d:79:3b:ce:0f:62:bf:
df:cc:2a:b4:79:17:9d:d6:e8:3e:5b:65:6b:cc:d5:b8:4b:db:
31:60:96:fd:da:a0:dc:30:b7:83:cb:bd:ca:d2:be:2b:77:36:
aa:21:b2:fc:4d:d9:76:40:d7:6e:84:c8:4d:c7:32:b2:39:36:
27:02:a5:03:06:4d:d4:c6:38:e1:99:8b:00:86:5b:80:92:69:
c6:35:90:4a:11:41:64:fb:17:d5:94:36:51:cb:68:e4:80:d2:
41:0d:cd:07:fa:62:83:7d:ee:c7:89:ed:2e:51:93:2d:39:f7:
61:2e:e6:62:7d:06:8f:c2:b1:ed:e7:cc:80:24:70:e7:64:c0:
73:95:4c:28:bb:86:7c:64:1c:83:83:fb:02:04:c5:a0:e6:eb:
ed:ea:e0:1f:40:37:1a:e1:a5:a1:a5:58:96:b4:ca:af:02:26:
d3:5f:0d:cd:bf:2d:c2:97:59:df:eb:9d:39:a7:6c:fc:18:84:
d6:05:f5:bb:65:86:e3:da:b0:a2:f7:a9:97:74:d7:63:0d:59:
48:c0:bb:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 17:27:39 2025 by rpki-client