Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft
File: KuK_S6R9cV5T4us9AS0_y80bDsA.mft (raw, json)
Hash identifier: h4RRspEid/0rv+Rk1WeqDiJwiL+g89rjbSBXMNEbxNQ=
Subject key identifier: 7F:5F:A6:5D:5D:43:33:DE:7E:9A:74:92:BB:A1:A4:F1:A9:A0:9F:C4
Authority key identifier: 2A:E2:BF:4B:A4:7D:71:5E:53:E2:EB:3D:01:2D:3F:CB:CD:1B:0E:C0
Certificate issuer: /CN=2ae2bf4ba47d715e53e2eb3d012d3fcbcd1b0ec0
Certificate serial: 0199183F5D1087451CA602D2E39F599B64D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KuK_S6R9cV5T4us9AS0_y80bDsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft
Manifest number: AE
Signing time: Fri 05 Sep 2025 05:00:29 +0000
Manifest this update: Fri 05 Sep 2025 05:00:29 +0000
Manifest next update: Sat 06 Sep 2025 05:00:29 +0000
Files and hashes: 1: ImNYtfmA17VPvuzFmVELDdKaFPo.roa (hash: qTcKtkAu4/tozlJ7sg/B8RXSaVxn+Vv1tRQIyPPwO20=)
2: KuK_S6R9cV5T4us9AS0_y80bDsA.crl (hash: GwdX8YNZH1NLm7zASB9/J7N1p9JQF57o/atD1QLych8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KuK_S6R9cV5T4us9AS0_y80bDsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:3f:5d:10:87:45:1c:a6:02:d2:e3:9f:59:9b:64:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ae2bf4ba47d715e53e2eb3d012d3fcbcd1b0ec0
Validity
Not Before: Sep 5 05:00:29 2025 GMT
Not After : Sep 6 05:00:29 2025 GMT
Subject: CN=7f5fa65d5d4333de7e9a7492bba1a4f1a9a09fc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e7:a9:ff:61:c7:be:6c:bd:7a:e3:0f:dc:86:
03:b1:a6:69:e2:df:62:e7:85:30:fd:89:4b:3b:0f:
01:d3:50:ef:f6:ce:77:b8:c3:da:17:d5:6f:6b:b8:
8a:d9:22:8c:b4:be:2b:4f:16:b9:18:aa:a8:b7:72:
82:6b:96:0d:cd:c7:a2:c6:bb:6c:27:d4:56:96:41:
e4:3d:e0:a6:63:26:64:63:b5:40:fd:7d:bc:7d:40:
f2:2b:29:f0:ad:18:96:a7:5a:9a:ca:4b:04:ab:df:
e4:6e:6a:43:4f:bf:15:fb:66:2c:9c:e2:f4:3b:09:
5a:b6:4f:8e:4e:1a:62:87:4e:90:74:ec:d0:31:2d:
63:b8:ee:8f:55:0c:03:cb:5c:44:c0:30:00:e9:56:
12:91:3b:47:91:44:29:9f:82:72:de:fa:ad:e6:08:
a8:aa:68:0b:89:b9:c8:88:e3:49:1e:7d:da:d1:72:
68:db:e7:6f:29:d5:c0:8b:f0:bd:a0:cd:3a:99:69:
2d:6b:02:0b:ac:f0:c0:38:98:eb:22:ab:d9:b6:3e:
8b:b1:97:b0:fb:4a:08:d0:6e:ed:e3:25:bd:86:86:
0a:89:56:bf:5f:8e:2b:61:18:8c:aa:88:7a:cc:b8:
60:c8:7d:85:1e:cd:23:c1:2e:d0:ba:c2:34:46:76:
12:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:5F:A6:5D:5D:43:33:DE:7E:9A:74:92:BB:A1:A4:F1:A9:A0:9F:C4
X509v3 Authority Key Identifier:
keyid:2A:E2:BF:4B:A4:7D:71:5E:53:E2:EB:3D:01:2D:3F:CB:CD:1B:0E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KuK_S6R9cV5T4us9AS0_y80bDsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:51:1f:a0:7b:69:91:2c:32:9d:13:f1:ee:99:0a:54:18:23:
6a:c0:81:c6:ca:28:f7:f6:24:5c:a5:ed:07:5d:cf:31:8d:7a:
ce:13:2d:5d:15:2b:aa:7d:63:c6:02:db:4a:f0:85:c7:8a:0c:
6f:82:90:fc:bb:93:8a:dc:5c:48:69:35:96:0c:20:a7:e0:8d:
0d:54:b4:24:00:72:17:82:1d:96:b9:50:3b:b0:df:cd:76:39:
5c:0c:7f:7d:23:45:3b:ce:75:4c:d9:4c:64:ab:2a:61:94:6f:
3e:97:09:0b:9c:b0:c9:fa:ac:88:25:fd:4b:91:3f:df:f0:d3:
66:93:fd:77:65:f3:39:75:a5:b3:28:21:6d:d8:45:da:d0:00:
14:3a:b3:55:19:fe:43:c1:3d:0e:db:42:32:fa:bb:21:2c:f0:
6c:03:09:18:2c:24:e8:49:d0:f0:be:61:6f:52:45:11:a1:4a:
4c:08:b3:95:67:72:89:2e:9c:0e:ae:d1:98:b4:5b:a6:e4:44:
47:24:ce:88:ce:c7:73:81:d6:af:c5:c5:5e:22:ca:8b:5a:a8:
6e:ee:83:f6:2a:8b:0b:ac:7b:91:c3:ea:24:4c:2b:03:2b:7e:
7e:86:83:9e:11:f3:7c:6d:18:72:fa:10:89:49:95:97:40:3c:
74:98:92:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 07:34:04 2025 by rpki-client