Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ac3e3b-8dcc-40ac-9dab-7e97650d0f86/1/kurmrUuydi4hlOXfUc0NLNPmnKo.mft
File: kurmrUuydi4hlOXfUc0NLNPmnKo.mft (raw, json)
Hash identifier: DkJxonK+EF5m4HbrFojRC+gV9ChZEm0iPrB6hRe7eZo=
Subject key identifier: 73:6F:14:DA:E3:BF:8F:A4:71:FC:91:0B:99:5D:DA:7F:81:5F:77:1C
Authority key identifier: 92:EA:E6:AD:4B:B2:76:2E:21:94:E5:DF:51:CD:0D:2C:D3:E6:9C:AA
Certificate issuer: /CN=92eae6ad4bb2762e2194e5df51cd0d2cd3e69caa
Certificate serial: 019A711368D8E9CCCCDBC32417D54E1EAFC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kurmrUuydi4hlOXfUc0NLNPmnKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ac3e3b-8dcc-40ac-9dab-7e97650d0f86/1/kurmrUuydi4hlOXfUc0NLNPmnKo.mft
Manifest number: 0178
Signing time: Tue 11 Nov 2025 04:01:28 +0000
Manifest this update: Tue 11 Nov 2025 04:01:28 +0000
Manifest next update: Wed 12 Nov 2025 04:01:28 +0000
Files and hashes: 1: BtdE401kz_cCVR9U9U273HfIpS0.roa (hash: hobg2e+hs3cfn/PR8D8QxYlBTsEoPnFPoAQ4C018gyE=)
2: N-56zynZQkjMVarS-v8wIftEaAc.roa (hash: TmBPb/l+t9dFI9/svQZsOGHsNkbPcnVxIX8nhP74Z3o=)
3: kurmrUuydi4hlOXfUc0NLNPmnKo.crl (hash: CHyRZed2sFaHNJgsxlSgCCDnqGdSnEJY6TBpb3u6Wxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ac3e3b-8dcc-40ac-9dab-7e97650d0f86/1/kurmrUuydi4hlOXfUc0NLNPmnKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ac3e3b-8dcc-40ac-9dab-7e97650d0f86/1/kurmrUuydi4hlOXfUc0NLNPmnKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/kurmrUuydi4hlOXfUc0NLNPmnKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:68:d8:e9:cc:cc:db:c3:24:17:d5:4e:1e:af:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92eae6ad4bb2762e2194e5df51cd0d2cd3e69caa
Validity
Not Before: Nov 11 04:01:28 2025 GMT
Not After : Nov 12 04:01:28 2025 GMT
Subject: CN=736f14dae3bf8fa471fc910b995dda7f815f771c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f6:df:e2:a9:7b:4f:21:6a:b7:fd:ef:f1:a3:
44:30:62:5d:52:b3:93:77:9d:21:a1:c7:bb:b4:e5:
9e:57:26:cc:eb:39:65:be:e1:3a:83:88:b3:7c:3a:
ff:e6:14:b7:97:f4:9a:d0:15:0f:ca:c4:cb:e3:ca:
dc:35:11:58:9f:b5:75:00:15:e7:ce:fe:da:a9:ce:
20:05:09:4e:1d:32:b5:83:28:4a:e0:ed:e5:4f:da:
f3:b9:8c:26:5a:4b:32:de:41:24:00:3c:f8:68:8c:
bc:08:02:f0:d3:a7:1e:8b:40:2e:97:67:f4:82:d6:
c3:22:bb:86:c7:83:9d:01:5a:4b:28:d6:91:6f:76:
6b:14:c8:09:86:94:52:12:81:4d:3e:23:33:f5:1b:
96:70:bc:ce:59:45:41:c6:a6:d2:be:3f:3a:86:10:
ea:0b:38:e0:7e:3d:40:4a:39:d7:5a:a7:a7:02:8f:
f0:f3:29:af:ff:21:f5:b9:b1:e4:0c:38:c6:f1:9d:
eb:df:b4:cc:92:cc:01:d5:67:2c:98:85:23:b6:f9:
e4:37:07:83:18:2e:30:3d:89:5f:ab:19:72:c9:8f:
fd:b6:6a:91:c2:be:ab:c9:8b:12:87:c6:99:ff:7f:
36:bf:17:3d:fd:19:13:03:2b:66:9d:59:8f:c8:3f:
7d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:6F:14:DA:E3:BF:8F:A4:71:FC:91:0B:99:5D:DA:7F:81:5F:77:1C
X509v3 Authority Key Identifier:
keyid:92:EA:E6:AD:4B:B2:76:2E:21:94:E5:DF:51:CD:0D:2C:D3:E6:9C:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kurmrUuydi4hlOXfUc0NLNPmnKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ac3e3b-8dcc-40ac-9dab-7e97650d0f86/1/kurmrUuydi4hlOXfUc0NLNPmnKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ac3e3b-8dcc-40ac-9dab-7e97650d0f86/1/kurmrUuydi4hlOXfUc0NLNPmnKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:84:c9:fb:b0:8a:a0:72:f4:ef:d4:15:03:da:15:17:eb:e8:
77:97:7e:9f:fe:a5:db:b4:e1:c1:0c:cc:44:da:45:01:a6:fe:
c6:a7:ee:62:fe:04:12:b7:b8:60:39:51:04:26:5f:a8:3e:06:
e9:e7:5f:b5:8e:1e:80:95:ea:c2:fb:3d:d0:ff:60:20:82:e4:
66:a9:b5:c8:3b:50:6f:e1:f7:3b:34:60:82:84:13:2e:0a:cd:
ef:4f:fa:28:6f:07:17:0c:9a:d1:cd:4c:16:7d:49:43:3e:92:
e6:e6:79:4b:ed:b7:5f:db:8c:a1:e8:39:94:bf:45:3e:80:6a:
28:fc:42:67:67:02:c5:b8:02:79:e8:64:53:19:b7:cc:b7:71:
f5:c0:46:68:52:5e:b2:39:82:c2:cd:ce:12:bb:22:fa:fc:80:
0c:2c:c7:b6:41:07:33:01:b1:9e:db:ab:ff:21:82:bb:4b:a5:
6d:d8:24:03:62:09:b6:ab:9e:38:99:3e:cb:a0:29:e8:f0:25:
2d:c5:61:27:cd:69:cd:a6:5b:48:d8:c8:d8:54:8f:2d:6f:e3:
d3:16:f4:4f:c9:35:31:41:27:39:1c:23:23:67:55:40:2f:5e:
90:3f:7e:2e:e3:3d:28:56:ce:43:72:b0:6f:1c:19:00:8c:34:
ab:b0:3a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:06:36 2025 by rpki-client