Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ac3e3b-8dcc-40ac-9dab-7e97650d0f86/1/kurmrUuydi4hlOXfUc0NLNPmnKo.mft
File: kurmrUuydi4hlOXfUc0NLNPmnKo.mft (raw, json)
Hash identifier: AwOiX4tFmzLGpPkkmQDHFiUO/Do1JCDNbMKI7yFVrU8=
Subject key identifier: 0A:C6:EA:D6:58:F3:05:60:16:F4:4A:5A:C3:2B:0C:3A:CE:F9:59:A7
Authority key identifier: 92:EA:E6:AD:4B:B2:76:2E:21:94:E5:DF:51:CD:0D:2C:D3:E6:9C:AA
Certificate issuer: /CN=92eae6ad4bb2762e2194e5df51cd0d2cd3e69caa
Certificate serial: 019922FA057C6A6BE4B15F3FA40E5130C768
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kurmrUuydi4hlOXfUc0NLNPmnKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ac3e3b-8dcc-40ac-9dab-7e97650d0f86/1/kurmrUuydi4hlOXfUc0NLNPmnKo.mft
Manifest number: CB
Signing time: Sun 07 Sep 2025 07:00:34 +0000
Manifest this update: Sun 07 Sep 2025 07:00:34 +0000
Manifest next update: Mon 08 Sep 2025 07:00:34 +0000
Files and hashes: 1: BtdE401kz_cCVR9U9U273HfIpS0.roa (hash: hobg2e+hs3cfn/PR8D8QxYlBTsEoPnFPoAQ4C018gyE=)
2: N-56zynZQkjMVarS-v8wIftEaAc.roa (hash: TmBPb/l+t9dFI9/svQZsOGHsNkbPcnVxIX8nhP74Z3o=)
3: kurmrUuydi4hlOXfUc0NLNPmnKo.crl (hash: u2m7qtGMTAfuv6yub3xEN58SIt5icrQQiudEG1w77FQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ac3e3b-8dcc-40ac-9dab-7e97650d0f86/1/kurmrUuydi4hlOXfUc0NLNPmnKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ac3e3b-8dcc-40ac-9dab-7e97650d0f86/1/kurmrUuydi4hlOXfUc0NLNPmnKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/kurmrUuydi4hlOXfUc0NLNPmnKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:05:7c:6a:6b:e4:b1:5f:3f:a4:0e:51:30:c7:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92eae6ad4bb2762e2194e5df51cd0d2cd3e69caa
Validity
Not Before: Sep 7 07:00:34 2025 GMT
Not After : Sep 8 07:00:34 2025 GMT
Subject: CN=0ac6ead658f3056016f44a5ac32b0c3acef959a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b9:e0:d3:ac:3b:ff:bc:11:cf:b0:7d:1c:fc:
70:2e:1a:75:a0:fe:b5:f9:a6:4d:d2:f7:4b:5c:12:
1e:76:94:d0:3f:c3:01:59:04:97:9f:95:d2:57:a3:
0b:9a:92:87:43:af:97:b4:ee:20:f3:b1:3b:a7:9a:
ee:08:a3:b2:ec:ec:bf:0e:27:3d:4f:5e:65:1a:47:
c8:88:a8:22:c5:60:6f:2b:af:82:18:ba:cc:d8:0e:
2c:d7:84:fb:2c:6f:95:87:89:ea:6d:9c:15:a3:0b:
35:75:b1:07:80:4b:3f:55:37:54:2a:13:14:de:f3:
47:19:c0:53:73:28:69:6f:4e:5d:44:6d:76:c3:ff:
60:f8:86:3e:33:4c:2d:62:6f:0d:ab:cf:d3:18:ce:
a5:28:08:66:f5:b2:db:23:da:31:d4:60:bd:e4:a7:
ea:fd:68:20:3a:9f:14:f7:bd:ac:23:65:09:0f:ee:
40:8c:59:93:ec:0b:39:bf:bf:e8:e7:57:ba:f6:8c:
39:71:d9:b1:5e:e9:70:ea:71:f4:86:49:15:b4:cd:
5b:13:26:bc:6a:f2:99:1d:b6:22:a6:50:39:0b:6a:
bc:e6:db:7c:06:4f:29:ea:ae:54:f1:1a:c1:51:f0:
ef:c2:e8:e9:bc:05:02:31:e9:40:87:7f:06:fa:00:
64:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C6:EA:D6:58:F3:05:60:16:F4:4A:5A:C3:2B:0C:3A:CE:F9:59:A7
X509v3 Authority Key Identifier:
keyid:92:EA:E6:AD:4B:B2:76:2E:21:94:E5:DF:51:CD:0D:2C:D3:E6:9C:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kurmrUuydi4hlOXfUc0NLNPmnKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ac3e3b-8dcc-40ac-9dab-7e97650d0f86/1/kurmrUuydi4hlOXfUc0NLNPmnKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ac3e3b-8dcc-40ac-9dab-7e97650d0f86/1/kurmrUuydi4hlOXfUc0NLNPmnKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:b8:be:29:5b:09:f8:b1:80:40:ea:81:e4:11:1e:51:56:e6:
a7:b2:af:35:62:36:ac:a4:a8:e4:1d:91:72:c2:f2:61:e8:f2:
3b:08:e8:7c:c4:1b:f7:d9:e5:f4:9e:1c:22:d4:2e:5b:db:63:
a7:5c:e3:e8:7b:d3:36:7b:0b:19:62:8e:c5:7b:21:7f:52:8e:
5b:35:3c:12:12:b2:0b:0c:d9:da:a7:f9:e8:4b:43:fa:81:de:
3a:a5:57:22:50:ed:ac:5f:b9:cf:bc:76:65:de:70:ed:f1:ab:
91:43:ee:ae:5d:44:62:2f:82:7f:07:24:34:8f:18:fd:6a:39:
f9:a1:78:ca:57:90:dd:ab:9d:f6:92:0c:3b:bd:c6:c3:1e:b8:
46:16:65:7a:a2:4b:cd:00:fb:5d:af:b3:89:98:d3:a4:67:62:
ea:e0:2e:87:2b:09:d7:84:cf:19:c5:72:08:bb:15:3e:91:36:
b7:2c:bd:31:a8:92:82:ef:5e:26:04:36:61:76:44:65:23:7c:
14:2c:d3:a3:c6:3c:9a:30:ad:46:27:79:3b:2c:2c:f2:fb:00:
5d:ac:a4:e4:a0:1d:bb:95:66:11:5e:d4:b8:bb:42:48:5a:da:
32:92:02:9d:d7:d9:5a:e2:b8:af:41:6a:59:bb:7a:3c:b4:49:
24:31:0b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:05:49 2025 by rpki-client