Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.mft
File: kuDCRw6wpptO-lhbnLLAZ2ErN54.mft (raw, json)
Hash identifier: DqtSpZ6J484v9tkYlTX+0QNgHOeEbB6P/vfqyXmH83Y=
Subject key identifier: 21:98:C8:B4:C7:E2:07:C6:45:08:E3:CF:64:6B:6F:95:8E:A8:6F:C5
Authority key identifier: 92:E0:C2:47:0E:B0:A6:9B:4E:FA:58:5B:9C:B2:C0:67:61:2B:37:9E
Certificate issuer: /CN=92e0c2470eb0a69b4efa585b9cb2c067612b379e
Certificate serial: 019A71EE6ECD6AEE53E9A7BB3FCA97DB5071
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kuDCRw6wpptO-lhbnLLAZ2ErN54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 08:00:42 +0000
Manifest this update: Tue 11 Nov 2025 08:00:42 +0000
Manifest next update: Wed 12 Nov 2025 08:00:42 +0000
Files and hashes: 1: PFjd2yWfyUqACNexTKNE7uw-CUw.roa (hash: 2N8aNvblU0PO6uAwaoOi3OFj+fZYGQD09CyRfcuaD9M=)
2: kuDCRw6wpptO-lhbnLLAZ2ErN54.crl (hash: SrXZS9ct0J7mFI8OOPa29OkgSoyiNAEgOyWJE+wgwa8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.mft
rsync://rpki.ripe.net/repository/DEFAULT/kuDCRw6wpptO-lhbnLLAZ2ErN54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:6e:cd:6a:ee:53:e9:a7:bb:3f:ca:97:db:50:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92e0c2470eb0a69b4efa585b9cb2c067612b379e
Validity
Not Before: Nov 11 08:00:42 2025 GMT
Not After : Nov 12 08:00:42 2025 GMT
Subject: CN=2198c8b4c7e207c64508e3cf646b6f958ea86fc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1f:4c:4b:a2:17:2c:3e:87:34:7b:c3:8c:49:
87:41:db:e4:1a:d0:5a:e2:21:43:91:01:86:b6:36:
c4:be:20:a6:eb:4c:65:1d:65:b2:c5:c6:48:02:21:
5a:da:50:14:fc:f0:7e:83:02:f5:4d:14:42:12:b9:
38:e9:52:29:04:be:7f:dc:94:a0:34:d3:fd:26:86:
6f:ed:f5:fb:87:18:e9:55:fe:dc:87:fb:72:54:23:
ad:dc:cb:ee:cf:dc:a2:ac:19:8c:4f:51:87:e8:cf:
5c:d3:1e:44:ee:73:28:1b:78:a4:ec:9a:76:1b:fd:
89:86:49:9f:94:56:f3:aa:d3:37:0e:54:91:b7:63:
f9:19:37:3a:9b:dc:3c:f7:09:e4:65:50:c4:f0:37:
a6:3a:77:30:d3:dc:91:61:55:6d:41:16:31:d8:69:
7b:6c:e3:49:11:33:5e:9a:87:83:a6:f0:db:0c:bb:
a4:0a:4f:30:24:c3:05:e5:de:ae:83:ca:02:20:75:
ce:20:92:02:3e:21:50:89:fd:8d:19:d3:c2:65:7a:
67:aa:65:0b:00:ff:2a:4d:f8:9f:3e:e4:11:4b:50:
64:04:1f:15:38:3f:5c:2a:ad:2d:e1:83:2f:19:49:
db:57:c7:0e:0e:35:22:14:85:76:cf:ec:0e:a0:a7:
71:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:98:C8:B4:C7:E2:07:C6:45:08:E3:CF:64:6B:6F:95:8E:A8:6F:C5
X509v3 Authority Key Identifier:
keyid:92:E0:C2:47:0E:B0:A6:9B:4E:FA:58:5B:9C:B2:C0:67:61:2B:37:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kuDCRw6wpptO-lhbnLLAZ2ErN54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:0c:69:e5:5c:f0:98:fb:15:a9:9e:ed:0d:a8:46:5f:34:e3:
7f:5b:33:ad:e5:20:4d:81:ae:47:e4:de:c1:c9:9e:d9:39:aa:
43:52:f9:77:11:c4:4c:19:72:76:50:82:4d:ff:4a:02:5f:01:
0c:26:fc:6d:55:0e:a5:99:f2:fc:b3:00:bc:5e:2a:71:1b:d5:
db:3b:dc:97:b6:fc:49:b0:d3:6d:6b:88:26:20:84:32:6d:2c:
62:fa:ba:dc:63:f2:a2:c1:0a:fb:0d:71:07:56:2e:8d:e8:22:
d5:52:06:e2:e1:13:e2:fa:4a:64:9b:77:94:af:9d:99:7f:e1:
0c:14:ad:e1:4f:d4:44:21:a2:03:67:8f:34:59:d2:af:61:c4:
d4:e2:ae:6a:fb:b9:e1:59:40:a3:81:47:a4:07:5b:4d:4b:dd:
50:3f:86:44:f4:a2:99:9c:63:15:b0:43:cf:ff:bb:62:86:8e:
4c:ae:0b:57:76:28:46:d2:d5:0e:1b:62:cb:34:da:83:d3:b6:
42:5b:c9:59:63:87:67:ce:14:f3:9c:81:50:c3:cb:10:1b:54:
d1:71:24:7d:b7:66:6c:27:cb:0b:01:22:9a:36:fb:25:b3:a0:
83:a7:88:d2:b6:ff:ec:6d:a2:12:3d:04:06:1d:5d:80:cf:af:
6f:d4:bb:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:19:09 2025 by rpki-client