Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/ku_2FiUC6jtS_YyjrhCNE9a_9lI.mft
File: ku_2FiUC6jtS_YyjrhCNE9a_9lI.mft (raw, json)
Hash identifier: t1QoMHpOKn0kK3Qbc18QVVTJ1ksNE3YfhO/8M2WSFC4=
Subject key identifier: 71:7A:1A:1E:15:17:A8:0B:1D:D2:AC:E7:BC:A2:F1:61:05:D8:28:05
Authority key identifier: 92:EF:F6:16:25:02:EA:3B:52:FD:8C:A3:AE:10:8D:13:D6:BF:F6:52
Certificate issuer: /CN=92eff6162502ea3b52fd8ca3ae108d13d6bff652
Certificate serial: 019921B28110817A8CBBF2F420D08A26D689
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ku_2FiUC6jtS_YyjrhCNE9a_9lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/ku_2FiUC6jtS_YyjrhCNE9a_9lI.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 01:02:50 +0000
Manifest this update: Sun 07 Sep 2025 01:02:50 +0000
Manifest next update: Mon 08 Sep 2025 01:02:50 +0000
Files and hashes: 1: ku_2FiUC6jtS_YyjrhCNE9a_9lI.crl (hash: m6GAUbS1Cw0mpfJ3n9rT3i/3XQw+ycaLm/SqAUsejOA=)
2: vIUD6qLiZhlDA8IvWgGD4RFZTgQ.roa (hash: 8f4c2O05sapdQ4wcaKqtNByBFKGfiB5rQ1o7fR58j44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/ku_2FiUC6jtS_YyjrhCNE9a_9lI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/ku_2FiUC6jtS_YyjrhCNE9a_9lI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ku_2FiUC6jtS_YyjrhCNE9a_9lI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:81:10:81:7a:8c:bb:f2:f4:20:d0:8a:26:d6:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92eff6162502ea3b52fd8ca3ae108d13d6bff652
Validity
Not Before: Sep 7 01:02:50 2025 GMT
Not After : Sep 8 01:02:50 2025 GMT
Subject: CN=717a1a1e1517a80b1dd2ace7bca2f16105d82805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fb:16:bb:df:10:e7:7f:a0:e6:f5:01:bb:4e:
1b:f8:9b:9f:9c:70:6c:a6:35:08:93:f4:9a:9f:70:
ae:66:5c:83:ac:3b:cc:9b:a2:1f:38:80:1c:4f:9c:
44:e9:ba:06:81:c8:b7:ea:9d:a0:71:46:80:11:eb:
61:a1:f5:60:43:50:59:18:99:33:69:c4:f1:45:1a:
80:17:fa:ac:f7:4b:d7:2f:6a:f2:b9:2c:04:ee:b3:
63:30:9e:98:7e:9f:c8:0c:17:bc:8f:0a:30:60:1b:
b1:d3:55:2b:65:ca:87:45:58:99:9c:ee:e6:f3:d9:
52:13:00:45:3d:b8:d6:62:4f:79:18:06:cf:3d:39:
36:3c:e6:5e:6b:c4:43:6f:a4:85:3c:03:01:6f:d0:
e7:28:a5:ed:1b:38:ee:04:cf:f8:ca:ae:15:8c:4a:
c3:14:34:b3:e7:28:20:e8:cf:cb:e3:e4:5f:9a:35:
5b:15:be:cf:d2:88:bb:4e:1a:b4:10:6c:5c:cb:87:
fe:81:1e:87:e5:5a:14:cc:f1:62:ed:40:20:da:e7:
86:2d:f8:1e:e3:06:3d:40:3f:42:85:e3:0a:6d:20:
1a:24:ff:a3:30:6c:75:90:13:25:11:07:b2:15:d4:
6f:bc:72:13:34:09:b7:05:19:3a:71:f6:fd:d1:1f:
13:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:7A:1A:1E:15:17:A8:0B:1D:D2:AC:E7:BC:A2:F1:61:05:D8:28:05
X509v3 Authority Key Identifier:
keyid:92:EF:F6:16:25:02:EA:3B:52:FD:8C:A3:AE:10:8D:13:D6:BF:F6:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ku_2FiUC6jtS_YyjrhCNE9a_9lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/ku_2FiUC6jtS_YyjrhCNE9a_9lI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/ku_2FiUC6jtS_YyjrhCNE9a_9lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:b0:f5:60:aa:c2:86:00:7a:3f:15:a1:cf:b6:e0:3f:7f:6f:
ca:41:75:b3:6e:0e:c5:01:d3:40:83:07:83:f7:fa:45:22:0e:
37:a8:3c:2e:3d:3f:66:42:06:7b:2e:7a:34:02:dd:0e:bd:5b:
49:72:01:13:bf:04:0d:25:69:15:bb:05:63:63:6e:88:46:81:
38:a8:31:ed:ce:e1:ff:bc:32:f8:3a:27:c2:fc:46:05:4c:9e:
36:a2:d1:f1:ce:7d:be:f9:67:e3:9a:47:ba:28:bd:07:64:a3:
a2:5b:34:cc:44:fc:23:f8:f5:9f:b8:33:29:d5:3c:dd:be:0c:
5d:c1:5b:65:a2:fc:cd:44:21:5e:fa:ec:e5:32:ca:48:c7:58:
2a:33:31:85:9f:bd:7b:c9:4e:03:b8:b2:70:a2:ac:88:12:d5:
93:33:18:ad:cc:6a:7c:4f:7a:c0:16:56:de:2c:fe:61:a1:dc:
f2:f2:64:6c:fc:fe:51:28:88:4b:31:d5:c8:8e:ff:5c:47:b9:
49:bf:87:30:c4:26:98:89:e5:59:9f:bf:a0:17:46:6d:31:62:
b5:2b:b3:2f:c7:31:d1:8e:db:ed:4b:7e:63:02:24:e3:17:b5:
c8:92:dd:61:29:fe:ae:f9:74:f1:01:e3:5d:c2:f6:8a:61:65:
c8:8a:ed:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhsoEQgXqMu/L0INCKJtaJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZWZmNjE2MjUwMmVhM2I1MmZkOGNhM2FlMTA4ZDEzZDZi
ZmY2NTIwHhcNMjUwOTA3MDEwMjUwWhcNMjUwOTA4MDEwMjUwWjAzMTEwLwYDVQQD
Eyg3MTdhMWExZTE1MTdhODBiMWRkMmFjZTdiY2EyZjE2MTA1ZDgyODA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/sWu98Q53+g5vUBu04b+JufnHBs
pjUIk/San3CuZlyDrDvMm6IfOIAcT5xE6boGgci36p2gcUaAEethofVgQ1BZGJkz
acTxRRqAF/qs90vXL2ryuSwE7rNjMJ6Yfp/IDBe8jwowYBux01UrZcqHRViZnO7m
89lSEwBFPbjWYk95GAbPPTk2POZea8RDb6SFPAMBb9DnKKXtGzjuBM/4yq4VjErD
FDSz5ygg6M/L4+RfmjVbFb7P0oi7Thq0EGxcy4f+gR6H5VoUzPFi7UAg2ueGLfge
4wY9QD9CheMKbSAaJP+jMGx1kBMlEQeyFdRvvHITNAm3BRk6cfb90R8ThQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHF6Gh4VF6gLHdKs57yi8WEF2CgFMB8GA1UdIwQY
MBaAFJLv9hYlAuo7Uv2Mo64QjRPWv/ZSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3VfMkZpVUM2anRTX1l5anJoQ05FOWFfOWxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS83OTQzYTAtY2NhYi00MjYwLWJkNTEt
YWZlODlhYWNjNDkyLzEva3VfMkZpVUM2anRTX1l5anJoQ05FOWFfOWxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS83OTQzYTAtY2NhYi00MjYwLWJkNTEtYWZlODlhYWNjNDky
LzEva3VfMkZpVUM2anRTX1l5anJoQ05FOWFfOWxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD7D1YKrC
hgB6PxWhz7bgP39vykF1s24OxQHTQIMHg/f6RSION6g8Lj0/ZkIGey56NALdDr1b
SXIBE78EDSVpFbsFY2NuiEaBOKgx7c7h/7wy+DonwvxGBUyeNqLR8c59vvln45pH
uii9B2Sjols0zET8I/j1n7gzKdU83b4MXcFbZaL8zUQhXvrs5TLKSMdYKjMxhZ+9
e8lOA7iycKKsiBLVkzMYrcxqfE96wBZW3iz+YaHc8vJkbPz+USiISzHVyI7/XEe5
Sb+HMMQmmInlWZ+/oBdGbTFitSuzL8cx0Y7b7Ut+YwIk4xe1yJLdYSn+rvl08QHj
XcL2imFlyIrtyg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:09:20 2025 by rpki-client