Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.mft
File: kuDCRw6wpptO-lhbnLLAZ2ErN54.mft (raw, json)
Hash identifier: B5LAasldLi3lRYPfJkn8QnKgOVpVdC0hnvH/kdUDN4s=
Subject key identifier: D1:48:89:7F:AC:71:B9:B9:49:76:09:E1:E2:C5:3D:63:54:63:BB:08
Authority key identifier: 92:E0:C2:47:0E:B0:A6:9B:4E:FA:58:5B:9C:B2:C0:67:61:2B:37:9E
Certificate issuer: /CN=92e0c2470eb0a69b4efa585b9cb2c067612b379e
Certificate serial: 019767E0F517A0E82DF7A7E3592A79EFD21C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kuDCRw6wpptO-lhbnLLAZ2ErN54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.mft
Manifest number: 158F
Signing time: Fri 13 Jun 2025 06:01:25 +0000
Manifest this update: Fri 13 Jun 2025 06:01:25 +0000
Manifest next update: Sat 14 Jun 2025 06:01:25 +0000
Files and hashes: 1: PFjd2yWfyUqACNexTKNE7uw-CUw.roa (hash: 2N8aNvblU0PO6uAwaoOi3OFj+fZYGQD09CyRfcuaD9M=)
2: kuDCRw6wpptO-lhbnLLAZ2ErN54.crl (hash: MheTIXdLMrdyoBHunx7R3W13Ta6XAiIxtXtaM2zj76k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.mft
rsync://rpki.ripe.net/repository/DEFAULT/kuDCRw6wpptO-lhbnLLAZ2ErN54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 06:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:67:e0:f5:17:a0:e8:2d:f7:a7:e3:59:2a:79:ef:d2:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92e0c2470eb0a69b4efa585b9cb2c067612b379e
Validity
Not Before: Jun 13 06:01:25 2025 GMT
Not After : Jun 14 06:01:25 2025 GMT
Subject: CN=d148897fac71b9b9497609e1e2c53d635463bb08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:cd:21:a5:e4:04:d2:61:26:01:a2:68:8a:b4:
4f:15:ef:d3:a8:02:c4:4f:64:09:4c:f6:19:a3:c4:
49:9e:5b:e1:3f:d8:f1:bd:c7:3c:09:54:66:75:d9:
e3:f7:2d:e8:a9:61:65:b3:1a:22:90:a0:72:4e:5e:
ef:d2:a8:24:e6:75:87:ef:fa:e7:06:fa:ea:c3:31:
b8:0d:99:6e:94:d6:d4:c1:14:5d:59:d6:b5:e6:03:
86:4e:07:b4:03:1f:c3:ff:30:9d:5c:21:68:69:6f:
4f:f4:e2:e5:bc:f7:d9:31:7d:d2:bf:75:42:a0:c9:
59:94:4e:bd:9c:5c:27:03:87:d8:ab:ac:2f:36:45:
1b:3f:e5:40:14:d4:5a:26:02:79:b3:f1:de:c5:e8:
e5:74:1a:c2:06:80:23:bb:97:de:f3:d6:51:4a:9a:
cf:93:5b:04:c3:08:7e:49:cc:90:e8:51:60:f5:8a:
a9:13:9b:6b:73:14:d6:55:93:8a:80:3e:19:9c:b4:
fb:62:86:e0:54:d4:e8:80:02:48:bb:23:f1:13:1b:
3e:60:f2:d2:12:bd:71:c4:e0:09:c3:9e:f8:7d:93:
34:7b:43:05:cb:38:c8:a4:de:fe:80:51:e1:6b:77:
80:d8:db:b3:58:9b:d9:e9:39:41:85:0a:ac:f6:15:
77:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:48:89:7F:AC:71:B9:B9:49:76:09:E1:E2:C5:3D:63:54:63:BB:08
X509v3 Authority Key Identifier:
keyid:92:E0:C2:47:0E:B0:A6:9B:4E:FA:58:5B:9C:B2:C0:67:61:2B:37:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kuDCRw6wpptO-lhbnLLAZ2ErN54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:aa:fa:6c:5b:44:30:f2:59:67:5c:2f:d7:44:27:4e:41:c5:
68:d2:35:fc:c3:4b:48:e7:ab:68:11:b7:b6:2e:d1:00:b1:d8:
55:f6:69:e7:cc:4e:ac:a2:a8:a4:cf:b2:9a:74:25:bd:2d:78:
8b:b8:07:a4:e1:38:0e:bf:17:a3:16:1d:28:0b:87:f0:2d:97:
fa:f6:5c:86:5f:17:8b:0b:61:81:ce:34:6e:54:2d:a3:d2:78:
2b:69:b0:67:be:4b:cc:2c:14:36:a4:a3:16:f3:dc:f6:5c:32:
7c:f0:b3:58:d2:09:01:b1:34:a0:aa:c9:6e:15:38:e1:d8:13:
b2:8b:ad:11:12:fb:54:2b:84:e8:6e:9d:4f:11:f7:4a:da:24:
e6:94:c1:44:fa:2f:5a:fb:71:71:73:9e:a1:e4:0a:23:2f:b8:
c4:d9:4c:2f:c2:c7:2f:56:f1:5f:cb:0b:ed:5c:e5:e3:25:ec:
ff:47:33:da:b4:6e:fe:91:85:ae:7a:a1:0d:c7:e1:ef:3e:0b:
61:6e:3c:9a:76:2c:73:e5:87:6e:6a:7a:07:0c:67:68:06:7d:
5c:23:9d:1b:cb:56:e8:bb:e3:4b:df:9a:8c:ac:73:dd:ef:5d:
41:50:cb:fb:42:51:86:45:72:6e:88:d1:3e:66:c3:c1:84:ab:
c6:ed:d1:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdn4PUXoOgt96fjWSp579IcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZTBjMjQ3MGViMGE2OWI0ZWZhNTg1YjljYjJjMDY3NjEy
YjM3OWUwHhcNMjUwNjEzMDYwMTI1WhcNMjUwNjE0MDYwMTI1WjAzMTEwLwYDVQQD
EyhkMTQ4ODk3ZmFjNzFiOWI5NDk3NjA5ZTFlMmM1M2Q2MzU0NjNiYjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy80hpeQE0mEmAaJoirRPFe/TqALE
T2QJTPYZo8RJnlvhP9jxvcc8CVRmddnj9y3oqWFlsxoikKByTl7v0qgk5nWH7/rn
BvrqwzG4DZlulNbUwRRdWda15gOGTge0Ax/D/zCdXCFoaW9P9OLlvPfZMX3Sv3VC
oMlZlE69nFwnA4fYq6wvNkUbP+VAFNRaJgJ5s/HexejldBrCBoAju5fe89ZRSprP
k1sEwwh+ScyQ6FFg9YqpE5trcxTWVZOKgD4ZnLT7YobgVNTogAJIuyPxExs+YPLS
Er1xxOAJw574fZM0e0MFyzjIpN7+gFHha3eA2NuzWJvZ6TlBhQqs9hV3KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNFIiX+scbm5SXYJ4eLFPWNUY7sIMB8GA1UdIwQY
MBaAFJLgwkcOsKabTvpYW5yywGdhKzeeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3VEQ1J3NndwcHRPLWxoYm5MTEFaMkVyTjU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xM2IwY2QtNTk5Mi00NTYxLTk3Mjkt
YjMwZmUwNThkMTYyLzEva3VEQ1J3NndwcHRPLWxoYm5MTEFaMkVyTjU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8xM2IwY2QtNTk5Mi00NTYxLTk3MjktYjMwZmUwNThkMTYy
LzEva3VEQ1J3NndwcHRPLWxoYm5MTEFaMkVyTjU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQqr6bFtE
MPJZZ1wv10QnTkHFaNI1/MNLSOeraBG3ti7RALHYVfZp58xOrKKopM+ymnQlvS14
i7gHpOE4Dr8XoxYdKAuH8C2X+vZchl8Xiwthgc40blQto9J4K2mwZ75LzCwUNqSj
FvPc9lwyfPCzWNIJAbE0oKrJbhU44dgTsoutERL7VCuE6G6dTxH3Stok5pTBRPov
WvtxcXOeoeQKIy+4xNlML8LHL1bxX8sL7Vzl4yXs/0cz2rRu/pGFrnqhDcfh7z4L
YW48mnYsc+WHbmp6BwxnaAZ9XCOdG8tW6LvjS9+ajKxz3e9dQVDL+0JRhkVybojR
PmbDwYSrxu3Rdg==
-----END CERTIFICATE-----
Generated at Fri Jun 13 15:36:57 2025 by rpki-client