Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft
File: KuK_S6R9cV5T4us9AS0_y80bDsA.mft (raw, json)
Hash identifier: MnFCw6hmEC/nxrXyP8gxv7DNvCdl/y+lhwRkLl4sunw=
Subject key identifier: 1E:FF:FB:F6:2E:D5:62:36:D9:D0:0C:86:58:70:59:B3:6C:6D:15:CF
Authority key identifier: 2A:E2:BF:4B:A4:7D:71:5E:53:E2:EB:3D:01:2D:3F:CB:CD:1B:0E:C0
Certificate issuer: /CN=2ae2bf4ba47d715e53e2eb3d012d3fcbcd1b0ec0
Certificate serial: 019A71EEF4C51313BE92E200DE22E7785309
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KuK_S6R9cV5T4us9AS0_y80bDsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft
Manifest number: 0161
Signing time: Tue 11 Nov 2025 08:01:16 +0000
Manifest this update: Tue 11 Nov 2025 08:01:16 +0000
Manifest next update: Wed 12 Nov 2025 08:01:16 +0000
Files and hashes: 1: ImNYtfmA17VPvuzFmVELDdKaFPo.roa (hash: qTcKtkAu4/tozlJ7sg/B8RXSaVxn+Vv1tRQIyPPwO20=)
2: KuK_S6R9cV5T4us9AS0_y80bDsA.crl (hash: u199H5axNb8u7i9Ul276uJmH55gOyQ2UahViqMQKFWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KuK_S6R9cV5T4us9AS0_y80bDsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:f4:c5:13:13:be:92:e2:00:de:22:e7:78:53:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ae2bf4ba47d715e53e2eb3d012d3fcbcd1b0ec0
Validity
Not Before: Nov 11 08:01:16 2025 GMT
Not After : Nov 12 08:01:16 2025 GMT
Subject: CN=1efffbf62ed56236d9d00c86587059b36c6d15cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:cb:9e:42:64:00:0f:d0:86:f8:21:72:64:53:
29:e9:c0:80:05:b2:b8:5c:77:aa:00:2e:d3:ff:6d:
7d:92:59:68:84:bf:df:74:41:c1:4f:a3:aa:af:e5:
c0:8d:de:f3:d0:59:b8:c7:3a:59:6a:7c:e1:d9:5c:
0b:6c:34:d7:fd:eb:ea:bb:84:5e:55:ce:4a:f8:2c:
02:18:0f:67:05:39:86:3c:ad:a0:f3:62:88:0b:15:
79:14:68:7b:39:2a:53:e5:f2:42:c7:6e:32:72:03:
88:04:c3:df:53:68:27:31:85:d8:55:68:6b:4c:79:
6a:71:18:2a:c6:9a:9a:8a:46:a8:44:31:6d:4f:57:
a4:71:b2:69:76:43:e6:29:6c:b7:ae:10:a6:63:cd:
5a:4f:88:c1:e3:4c:4c:47:93:b9:76:4e:d9:9e:26:
7a:ba:08:55:a4:7a:12:57:2f:42:93:42:c0:59:bb:
4e:39:a4:1c:ce:36:e1:0b:bb:c2:de:c4:38:a0:4c:
6f:b4:e1:86:3d:50:78:0b:2a:4a:e6:16:32:96:c9:
67:96:a3:aa:73:18:36:ad:6e:e4:e7:32:c3:ce:fa:
a7:2c:24:87:b0:cc:8a:fd:94:5c:0e:6f:a7:ba:dd:
7f:0c:0b:2a:35:8f:df:f1:d0:3f:3f:e0:9a:e6:c5:
e9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:FF:FB:F6:2E:D5:62:36:D9:D0:0C:86:58:70:59:B3:6C:6D:15:CF
X509v3 Authority Key Identifier:
keyid:2A:E2:BF:4B:A4:7D:71:5E:53:E2:EB:3D:01:2D:3F:CB:CD:1B:0E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KuK_S6R9cV5T4us9AS0_y80bDsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:19:c7:dd:9f:0f:58:d7:fc:6e:2c:bd:74:43:53:17:28:8a:
99:d9:97:57:16:37:45:2c:36:44:8b:ae:92:2c:34:60:b8:da:
c2:66:19:52:8b:39:9f:0c:1d:58:9e:0e:c7:96:59:dd:83:74:
48:57:5f:69:b9:17:00:1d:3a:4d:8f:bf:c0:78:94:cc:0a:66:
ad:85:df:41:10:0f:ee:eb:ce:4d:64:0e:ec:70:63:8f:d3:ab:
cb:25:6a:86:c9:6c:de:ec:36:13:7f:c7:13:4d:70:56:c7:a6:
8b:93:18:81:26:ce:73:0e:32:08:5c:95:94:69:80:78:58:38:
2d:53:cd:a4:9b:29:5c:81:ce:66:81:23:3b:fc:a0:2b:db:d4:
45:50:3c:b8:34:86:f0:c9:56:9a:2c:f3:e9:72:68:0d:53:e6:
80:aa:97:73:8a:86:13:c2:5d:3e:be:93:49:8f:43:45:82:43:
b2:2b:40:00:f0:a6:3f:cc:35:1f:41:6e:7c:c2:15:77:c4:05:
42:a5:b5:1d:34:1c:bb:e6:b9:76:cd:84:35:9c:32:30:75:1d:
72:f3:83:9f:68:59:cc:2e:7b:b7:e3:33:06:49:8c:b9:8b:4a:
30:0f:99:68:38:e6:fe:bc:3a:48:c8:70:54:0c:de:09:5b:2b:
b3:4c:e9:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:20:38 2025 by rpki-client