Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.mft
File: kuDCRw6wpptO-lhbnLLAZ2ErN54.mft (raw, json)
Hash identifier: c1yE3v8EIDjh8QVgDN8hcyJwTh4VfaoLPhMuoJbug7A=
Subject key identifier: 7E:C0:20:BC:3E:4E:9E:07:8C:66:D6:29:08:BB:BC:A0:33:05:5D:3D
Authority key identifier: 92:E0:C2:47:0E:B0:A6:9B:4E:FA:58:5B:9C:B2:C0:67:61:2B:37:9E
Certificate issuer: /CN=92e0c2470eb0a69b4efa585b9cb2c067612b379e
Certificate serial: 0199221E673C5A96EA744C8362F925F10066
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kuDCRw6wpptO-lhbnLLAZ2ErN54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.mft
Manifest number: 1674
Signing time: Sun 07 Sep 2025 03:00:41 +0000
Manifest this update: Sun 07 Sep 2025 03:00:41 +0000
Manifest next update: Mon 08 Sep 2025 03:00:41 +0000
Files and hashes: 1: PFjd2yWfyUqACNexTKNE7uw-CUw.roa (hash: 2N8aNvblU0PO6uAwaoOi3OFj+fZYGQD09CyRfcuaD9M=)
2: kuDCRw6wpptO-lhbnLLAZ2ErN54.crl (hash: jC88o4G4Cx9uWpU8eBBcVe0KjxlSBJRm5QyaDAH0Wo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.mft
rsync://rpki.ripe.net/repository/DEFAULT/kuDCRw6wpptO-lhbnLLAZ2ErN54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:67:3c:5a:96:ea:74:4c:83:62:f9:25:f1:00:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92e0c2470eb0a69b4efa585b9cb2c067612b379e
Validity
Not Before: Sep 7 03:00:41 2025 GMT
Not After : Sep 8 03:00:41 2025 GMT
Subject: CN=7ec020bc3e4e9e078c66d62908bbbca033055d3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c4:28:2a:c6:e7:95:d8:a0:b0:3d:dd:43:b4:
50:79:55:ae:ff:2f:f5:95:2f:31:a2:22:bc:0b:89:
65:dd:15:a0:5f:06:cb:42:b1:a4:20:07:6a:ee:38:
ff:8f:29:7e:5a:58:f3:8b:b1:d1:ba:76:45:b3:5b:
c3:40:bc:74:b4:d1:51:fe:b8:a5:53:ca:7e:30:97:
e2:4e:7c:5f:bd:3d:2d:42:52:27:7d:4d:aa:be:6e:
82:7a:6a:9f:da:4b:5f:4d:78:82:d2:7a:08:95:ed:
31:05:04:a7:27:6f:2b:96:3c:78:0a:56:99:59:b6:
15:96:8f:33:8b:0d:8e:60:ea:52:c9:50:ce:a3:2d:
6f:fc:9f:a9:b5:91:66:99:44:0d:3a:7d:ee:95:39:
62:bf:2b:b5:fe:e7:c5:da:dc:8a:95:b3:8d:95:12:
87:5c:37:ff:8b:77:9c:f7:23:50:1b:a1:d4:af:e0:
3d:ea:f7:d5:70:a2:b9:34:5f:00:3e:9d:f5:41:4f:
e3:75:6a:09:ac:77:83:aa:e5:61:22:f4:1a:d3:2e:
4f:b0:f0:51:0d:12:81:90:fe:b4:03:31:5b:c6:4a:
af:73:1a:ee:f6:e0:62:00:bf:de:65:80:52:e3:1b:
84:79:64:3c:8e:3d:f3:42:09:f0:75:2d:12:7d:da:
70:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C0:20:BC:3E:4E:9E:07:8C:66:D6:29:08:BB:BC:A0:33:05:5D:3D
X509v3 Authority Key Identifier:
keyid:92:E0:C2:47:0E:B0:A6:9B:4E:FA:58:5B:9C:B2:C0:67:61:2B:37:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kuDCRw6wpptO-lhbnLLAZ2ErN54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:7b:34:a4:a8:c5:6b:cb:da:e5:ed:94:d8:ce:68:b8:5b:66:
14:a3:67:4c:60:01:30:33:3a:f5:80:9a:58:38:4b:3b:84:f5:
3c:e7:71:fc:a3:89:16:a8:26:bb:b6:48:eb:05:19:86:73:e2:
5a:2a:26:ac:a9:d3:d3:c6:51:bb:d3:5f:c3:22:3d:5b:2f:f4:
98:35:03:19:ae:76:94:aa:46:2c:04:e2:25:0d:dc:a6:02:e0:
3a:4c:63:18:83:9d:17:b8:d6:a3:e6:aa:50:f1:2e:61:8b:7a:
62:33:86:44:ec:72:0c:cd:79:de:f3:ee:b0:58:ad:18:70:31:
b2:8d:7f:a5:a9:dc:6d:97:5c:56:6c:8f:1f:46:3b:75:ee:24:
7b:60:b6:79:de:8f:65:bd:0c:8a:0f:1c:bc:72:5b:15:59:ff:
06:1b:95:d9:bb:ad:6f:bd:0c:a6:a5:f9:4e:f0:0a:74:04:44:
cb:4c:33:d5:8c:43:e2:e6:4c:ff:58:db:76:ae:41:09:7b:c6:
31:96:99:c4:bb:a9:6c:e2:02:5f:1e:d4:61:21:b3:64:eb:e9:
07:6d:8b:30:9b:7d:e3:29:84:49:1a:c1:19:76:6c:d6:28:f3:
0c:8b:3b:24:23:90:2c:24:20:a6:b5:8e:50:7c:5f:3a:47:1d:
3e:78:eb:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:09:23 2025 by rpki-client