Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/kuwQUNOpMgq58M4rNloJfuQTSyQ.mft
File: kuwQUNOpMgq58M4rNloJfuQTSyQ.mft (raw, json)
Hash identifier: EoAUW4tloLSiteTBTkMlb1wMlXlmKMEyJWEWpBj+yeU=
Subject key identifier: 4D:72:30:06:C1:68:BD:C7:CB:09:8C:8D:23:70:14:3F:9E:10:CA:93
Authority key identifier: 92:EC:10:50:D3:A9:32:0A:B9:F0:CE:2B:36:5A:09:7E:E4:13:4B:24
Certificate issuer: /CN=92ec1050d3a9320ab9f0ce2b365a097ee4134b24
Certificate serial: 019751FD3C87E73EBB9D161DA63C499BCB5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kuwQUNOpMgq58M4rNloJfuQTSyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/kuwQUNOpMgq58M4rNloJfuQTSyQ.mft
Manifest number: 12B7
Signing time: Mon 09 Jun 2025 00:00:39 +0000
Manifest this update: Mon 09 Jun 2025 00:00:39 +0000
Manifest next update: Tue 10 Jun 2025 00:00:39 +0000
Files and hashes: 1: kuwQUNOpMgq58M4rNloJfuQTSyQ.crl (hash: jkkCoInap7K6WILF1pS1lUPam4yERtv7/B6deFY3oX0=)
2: rcP662t9iU7wmmRm1Yh7D85Kb-4.roa (hash: hNPhEZEICgt5or5b1hN6hdrsIiWH59T8KP+7AQfFMXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/kuwQUNOpMgq58M4rNloJfuQTSyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/kuwQUNOpMgq58M4rNloJfuQTSyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kuwQUNOpMgq58M4rNloJfuQTSyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 00:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:fd:3c:87:e7:3e:bb:9d:16:1d:a6:3c:49:9b:cb:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92ec1050d3a9320ab9f0ce2b365a097ee4134b24
Validity
Not Before: Jun 9 00:00:39 2025 GMT
Not After : Jun 10 00:00:39 2025 GMT
Subject: CN=4d723006c168bdc7cb098c8d2370143f9e10ca93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6f:38:6f:c1:f1:33:11:20:23:29:17:71:2b:
a4:ab:cc:e5:02:e6:ad:e8:34:0c:fd:d0:5b:32:0d:
1a:b4:5d:e1:70:d1:24:f8:b8:99:71:81:ca:34:19:
68:e2:ca:1b:f9:20:61:af:95:b8:7c:98:39:2e:43:
ef:7b:3b:36:5e:21:26:dd:e0:ca:b0:af:ec:08:9a:
2a:6a:04:86:2c:72:28:d2:1c:ae:52:ab:d9:46:cd:
76:85:0b:db:bc:a7:52:85:2e:31:8d:10:8f:73:1c:
2e:ad:5d:ac:80:d8:35:37:a7:72:6e:38:65:fa:4d:
65:07:62:da:5f:37:f0:9a:f7:10:1c:6e:3e:0c:47:
e6:2e:36:f5:d1:12:e3:92:27:40:96:c3:1b:2f:15:
ac:42:8f:a2:9d:67:84:ea:f3:15:6d:3c:e6:6f:29:
eb:22:06:fd:af:ad:5f:0c:8e:d2:8a:0f:88:ad:26:
51:31:cf:a6:02:f7:aa:90:83:03:0d:5e:4b:a6:1d:
63:24:de:7d:40:79:20:f4:9b:11:3f:d5:3a:86:8f:
23:fa:dc:bf:6b:59:5c:06:a6:9f:aa:1d:73:3c:bc:
11:f0:38:98:41:24:d2:69:0c:49:5c:25:8d:29:ac:
ec:db:43:07:f4:4b:41:86:a2:46:35:10:21:bc:2c:
ac:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:72:30:06:C1:68:BD:C7:CB:09:8C:8D:23:70:14:3F:9E:10:CA:93
X509v3 Authority Key Identifier:
keyid:92:EC:10:50:D3:A9:32:0A:B9:F0:CE:2B:36:5A:09:7E:E4:13:4B:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kuwQUNOpMgq58M4rNloJfuQTSyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/kuwQUNOpMgq58M4rNloJfuQTSyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/kuwQUNOpMgq58M4rNloJfuQTSyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:8f:c3:73:b7:dd:73:34:d3:48:ba:38:bf:15:12:a9:ba:3a:
1a:2d:3a:12:5b:89:0b:48:b9:27:af:7e:00:60:47:8c:1f:33:
af:01:d6:cb:27:04:76:2f:3e:9e:4a:63:82:b7:95:fa:2a:63:
e0:7f:2d:97:72:d2:9c:4d:07:b0:af:83:d0:d2:82:5e:c3:7a:
b6:53:42:b4:a6:17:e5:7b:ae:5c:5d:7a:b5:76:65:cc:16:23:
fa:e0:e2:5e:a0:b9:3d:19:72:29:08:0d:62:f9:a2:69:56:ae:
31:9d:f9:de:54:32:e4:c1:26:6c:12:5a:17:0e:22:b7:ac:1b:
e2:3f:d9:c5:1d:8a:ce:23:51:ac:a6:25:e1:ba:69:50:dc:4e:
78:95:c5:ea:e8:6e:7b:23:6a:57:a3:3f:ab:d0:32:fc:e2:47:
7a:f5:5c:2e:d3:8e:5c:12:5e:d2:02:70:d7:8c:7e:6d:a7:99:
d5:a4:c9:0f:c2:92:95:0e:c8:81:d7:c8:e9:67:fc:a9:9f:f6:
25:40:ef:ac:a8:39:19:d5:31:ad:36:35:80:4c:f4:7f:44:e1:
af:9c:3e:97:49:83:9a:d1:f0:af:03:28:f9:b7:98:b1:82:e9:
e4:ae:66:a6:51:ac:86:a6:8d:b6:e1:1d:73:91:b0:1e:aa:1d:
74:18:82:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdR/TyH5z67nRYdpjxJm8teMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZWMxMDUwZDNhOTMyMGFiOWYwY2UyYjM2NWEwOTdlZTQx
MzRiMjQwHhcNMjUwNjA5MDAwMDM5WhcNMjUwNjEwMDAwMDM5WjAzMTEwLwYDVQQD
Eyg0ZDcyMzAwNmMxNjhiZGM3Y2IwOThjOGQyMzcwMTQzZjllMTBjYTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl284b8HxMxEgIykXcSukq8zlAuat
6DQM/dBbMg0atF3hcNEk+LiZcYHKNBlo4sob+SBhr5W4fJg5LkPvezs2XiEm3eDK
sK/sCJoqagSGLHIo0hyuUqvZRs12hQvbvKdShS4xjRCPcxwurV2sgNg1N6dybjhl
+k1lB2LaXzfwmvcQHG4+DEfmLjb10RLjkidAlsMbLxWsQo+inWeE6vMVbTzmbynr
Igb9r61fDI7Sig+IrSZRMc+mAveqkIMDDV5Lph1jJN59QHkg9JsRP9U6ho8j+ty/
a1lcBqafqh1zPLwR8DiYQSTSaQxJXCWNKazs20MH9EtBhqJGNRAhvCysCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE1yMAbBaL3HywmMjSNwFD+eEMqTMB8GA1UdIwQY
MBaAFJLsEFDTqTIKufDOKzZaCX7kE0skMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3V3UVVOT3BNZ3E1OE00ck5sb0pmdVFUU3lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9mNTE2ZjYtZDVhMC00MDg2LTk0ZjIt
YWJkNGM1YzliMzc0LzEva3V3UVVOT3BNZ3E1OE00ck5sb0pmdVFUU3lRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9mNTE2ZjYtZDVhMC00MDg2LTk0ZjItYWJkNGM1YzliMzc0
LzEva3V3UVVOT3BNZ3E1OE00ck5sb0pmdVFUU3lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT4/Dc7fd
czTTSLo4vxUSqbo6Gi06EluJC0i5J69+AGBHjB8zrwHWyycEdi8+nkpjgreV+ipj
4H8tl3LSnE0HsK+D0NKCXsN6tlNCtKYX5XuuXF16tXZlzBYj+uDiXqC5PRlyKQgN
YvmiaVauMZ353lQy5MEmbBJaFw4it6wb4j/ZxR2KziNRrKYl4bppUNxOeJXF6uhu
eyNqV6M/q9Ay/OJHevVcLtOOXBJe0gJw14x+baeZ1aTJD8KSlQ7IgdfI6Wf8qZ/2
JUDvrKg5GdUxrTY1gEz0f0Thr5w+l0mDmtHwrwMo+beYsYLp5K5mplGshqaNtuEd
c5GwHqoddBiCmg==
-----END CERTIFICATE-----
Generated at Mon Jun 9 10:11:20 2025 by rpki-client