Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/kuwQUNOpMgq58M4rNloJfuQTSyQ.mft
File: kuwQUNOpMgq58M4rNloJfuQTSyQ.mft (raw, json)
Hash identifier: Ng7nJgnZKsZ43W8uD472kJ7Eu0+8qYRSdAXcA6eHI/c=
Subject key identifier: BD:66:87:53:E3:5F:27:B8:45:90:AF:C9:2F:93:82:55:8C:91:A1:51
Authority key identifier: 92:EC:10:50:D3:A9:32:0A:B9:F0:CE:2B:36:5A:09:7E:E4:13:4B:24
Certificate issuer: /CN=92ec1050d3a9320ab9f0ce2b365a097ee4134b24
Certificate serial: 019921B0C50D97B6DF9D73C607F230EA67C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kuwQUNOpMgq58M4rNloJfuQTSyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/kuwQUNOpMgq58M4rNloJfuQTSyQ.mft
Manifest number: 13A7
Signing time: Sun 07 Sep 2025 01:00:56 +0000
Manifest this update: Sun 07 Sep 2025 01:00:56 +0000
Manifest next update: Mon 08 Sep 2025 01:00:56 +0000
Files and hashes: 1: kuwQUNOpMgq58M4rNloJfuQTSyQ.crl (hash: sqvc/uzp+TjxlqwPs9pwzmqpS8Og9+D9ULC49BgRCSo=)
2: rcP662t9iU7wmmRm1Yh7D85Kb-4.roa (hash: hNPhEZEICgt5or5b1hN6hdrsIiWH59T8KP+7AQfFMXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/kuwQUNOpMgq58M4rNloJfuQTSyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/kuwQUNOpMgq58M4rNloJfuQTSyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kuwQUNOpMgq58M4rNloJfuQTSyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:c5:0d:97:b6:df:9d:73:c6:07:f2:30:ea:67:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92ec1050d3a9320ab9f0ce2b365a097ee4134b24
Validity
Not Before: Sep 7 01:00:56 2025 GMT
Not After : Sep 8 01:00:56 2025 GMT
Subject: CN=bd668753e35f27b84590afc92f9382558c91a151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:50:5d:b2:cf:1d:a5:7f:bf:26:c2:5b:ad:63:
38:a0:cb:e2:54:f5:95:3b:10:a3:ef:37:c0:99:76:
b6:d2:d2:a7:f2:e5:43:ac:e5:f3:ff:da:7a:9f:8d:
7f:26:12:39:6f:e4:0d:55:dc:3e:a9:e3:85:00:ad:
72:62:d4:31:64:85:2b:01:67:d5:af:3e:f8:7c:67:
90:9f:6e:d8:26:fc:90:0c:89:8f:fa:b0:b3:ef:b7:
8d:94:0c:33:b1:ce:62:fd:5b:05:eb:0a:6e:40:05:
11:63:1a:a9:52:f6:5c:39:ef:15:50:e0:12:7e:62:
f8:62:17:34:ee:d9:ce:09:e1:a3:f4:e6:f4:45:38:
00:53:9b:2a:35:4f:95:ad:fb:92:01:d7:a1:83:f5:
ac:48:98:91:9d:02:16:ba:fe:00:82:a9:97:6d:d3:
11:81:26:56:4f:24:0c:92:65:f4:58:08:86:2b:49:
04:f6:5d:7b:31:59:85:a2:73:f5:3c:ff:ee:c1:cf:
98:f1:67:73:80:30:3c:43:ea:df:e1:ba:05:f6:14:
49:53:f5:1a:37:05:b9:a0:07:a6:02:b3:9f:5b:bc:
c1:cd:d5:75:76:dd:8f:09:ed:4b:e2:a9:e0:8a:94:
16:40:49:47:5c:a9:29:06:e9:6c:ea:63:99:1c:18:
e4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:66:87:53:E3:5F:27:B8:45:90:AF:C9:2F:93:82:55:8C:91:A1:51
X509v3 Authority Key Identifier:
keyid:92:EC:10:50:D3:A9:32:0A:B9:F0:CE:2B:36:5A:09:7E:E4:13:4B:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kuwQUNOpMgq58M4rNloJfuQTSyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/kuwQUNOpMgq58M4rNloJfuQTSyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/kuwQUNOpMgq58M4rNloJfuQTSyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:1e:ab:5b:02:3e:e3:c7:3a:50:98:50:20:e9:ce:09:16:39:
aa:42:d6:38:e2:81:f7:ad:40:d1:3a:25:d1:e7:a8:e3:e6:3d:
e9:2c:31:ff:90:0c:48:6d:a1:01:71:cd:8e:bb:fe:41:88:b1:
80:7b:27:69:62:f6:ff:9f:cf:cf:e3:5c:86:3e:aa:1f:02:9f:
ef:1f:59:63:1f:6f:33:32:38:59:3e:64:d4:e6:14:5b:3c:ca:
af:69:9e:7d:80:74:8f:74:f5:70:80:08:67:31:99:93:b1:cc:
26:f4:24:c6:47:74:62:2e:66:37:0e:00:ac:f8:14:85:09:06:
ef:5b:66:e3:30:14:6b:f0:f2:63:79:24:5f:6d:0a:09:7f:ce:
2f:7c:6a:fd:ca:d1:dc:e1:72:76:7e:ca:88:84:f8:eb:5f:3f:
39:5c:a4:58:f9:70:54:5c:d6:01:57:b0:0d:5f:43:6f:23:1c:
93:d0:bf:f5:dc:2b:9b:4b:99:f5:72:86:1a:e6:12:85:61:29:
6f:64:b0:0b:dc:53:17:f7:36:29:7c:5f:19:56:05:05:2d:8e:
94:8a:49:95:b4:6e:26:db:ac:ad:bd:96:b1:89:3f:e0:e8:3b:
9c:16:aa:40:ee:32:cb:e8:45:98:d5:78:bb:68:cf:f2:c7:51:
b3:6a:79:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:12:09 2025 by rpki-client