Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/ku_2FiUC6jtS_YyjrhCNE9a_9lI.mft
File: ku_2FiUC6jtS_YyjrhCNE9a_9lI.mft (raw, json)
Hash identifier: CYM+ZcVtq+tEO1fLGw813CqIRbb3eRPC89ufmkF1suU=
Subject key identifier: A1:B3:DE:71:1E:28:A3:51:A3:BD:27:90:FD:93:D8:4E:83:BA:EB:40
Authority key identifier: 92:EF:F6:16:25:02:EA:3B:52:FD:8C:A3:AE:10:8D:13:D6:BF:F6:52
Certificate issuer: /CN=92eff6162502ea3b52fd8ca3ae108d13d6bff652
Certificate serial: 019763959A534FE1400FAF94E86C7530F3AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ku_2FiUC6jtS_YyjrhCNE9a_9lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/ku_2FiUC6jtS_YyjrhCNE9a_9lI.mft
Manifest number: 158A
Signing time: Thu 12 Jun 2025 10:00:37 +0000
Manifest this update: Thu 12 Jun 2025 10:00:37 +0000
Manifest next update: Fri 13 Jun 2025 10:00:37 +0000
Files and hashes: 1: ku_2FiUC6jtS_YyjrhCNE9a_9lI.crl (hash: MptQhrnKjSl9p01bfbm5KCWHit5yUwCVUd2M/yga18g=)
2: vIUD6qLiZhlDA8IvWgGD4RFZTgQ.roa (hash: 8f4c2O05sapdQ4wcaKqtNByBFKGfiB5rQ1o7fR58j44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/ku_2FiUC6jtS_YyjrhCNE9a_9lI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/ku_2FiUC6jtS_YyjrhCNE9a_9lI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ku_2FiUC6jtS_YyjrhCNE9a_9lI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:95:9a:53:4f:e1:40:0f:af:94:e8:6c:75:30:f3:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92eff6162502ea3b52fd8ca3ae108d13d6bff652
Validity
Not Before: Jun 12 10:00:37 2025 GMT
Not After : Jun 13 10:00:37 2025 GMT
Subject: CN=a1b3de711e28a351a3bd2790fd93d84e83baeb40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6e:68:fe:27:a7:6a:ca:64:43:ee:8d:da:3a:
ab:04:19:42:3e:06:7e:b6:fe:68:ef:15:90:30:17:
3c:35:87:bf:65:b2:eb:7a:fc:b7:dd:14:a7:f4:ca:
d1:c7:64:ec:46:ee:32:e1:15:69:a0:bf:03:99:4f:
2b:53:4b:e0:86:29:98:11:05:30:72:3b:f3:fb:be:
8c:a5:c6:27:73:58:74:06:fb:6a:c6:02:d0:17:eb:
68:93:06:60:9d:62:90:98:ee:31:0d:a4:1c:8b:06:
52:21:28:53:2f:af:32:ec:b4:c3:59:6e:97:c7:af:
95:35:a4:eb:46:ab:2c:92:75:cf:6d:05:c4:07:1d:
98:cd:0e:12:d3:cf:5f:c1:a2:f6:bd:56:29:08:1d:
06:bc:30:e4:72:94:be:a0:42:44:af:39:70:0c:e6:
75:95:e0:a4:f0:6a:fb:a2:c1:b2:c4:88:36:01:1e:
30:00:94:b9:29:3e:0b:c1:9c:25:42:6f:2d:8f:e4:
3c:47:c3:af:c8:72:f0:3c:ed:39:53:c5:63:54:7a:
96:d5:29:b9:6c:25:f2:29:21:e1:16:30:49:46:83:
6c:96:32:83:1c:21:97:c7:7a:3f:7a:2f:d0:f5:e1:
92:61:ff:c9:90:a0:3b:b1:6e:ed:2e:42:36:40:72:
a0:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B3:DE:71:1E:28:A3:51:A3:BD:27:90:FD:93:D8:4E:83:BA:EB:40
X509v3 Authority Key Identifier:
keyid:92:EF:F6:16:25:02:EA:3B:52:FD:8C:A3:AE:10:8D:13:D6:BF:F6:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ku_2FiUC6jtS_YyjrhCNE9a_9lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/ku_2FiUC6jtS_YyjrhCNE9a_9lI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/ku_2FiUC6jtS_YyjrhCNE9a_9lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:04:ce:9c:4c:1b:e1:fd:dd:aa:9b:41:1d:35:b2:c8:06:6a:
99:63:9e:8e:a2:3b:83:b7:cd:5b:d2:5d:d9:eb:7b:f8:0b:7e:
3b:ba:b1:96:e7:74:03:09:77:aa:cd:3d:ec:b7:27:21:af:e4:
ee:b8:1b:ac:53:d1:74:08:39:7f:b6:cc:fc:65:81:b7:9f:b1:
31:f6:df:dd:87:6a:4a:b6:b8:5b:c5:59:7a:55:5d:8c:25:78:
da:fd:28:ec:71:5c:7d:77:cd:2b:dc:36:1d:3b:57:cf:2f:5d:
4e:6f:ed:d5:8d:4f:b6:b2:e6:c3:38:9c:3e:9e:9b:1c:cb:ad:
3b:ef:e8:5e:7d:bc:df:15:e0:18:4b:3e:f0:48:7e:8d:40:f2:
9c:2a:63:ac:16:9c:12:3c:0a:72:4d:44:81:4f:48:2a:72:82:
76:0b:55:85:14:2d:0d:90:d2:b6:d0:ef:ca:97:37:cd:69:c0:
15:29:3c:0a:e4:cd:ce:4e:fd:3e:f3:b6:3e:cf:59:54:13:bf:
e7:db:b4:31:db:55:97:4a:91:eb:32:07:9d:aa:b8:44:0e:24:
79:42:28:45:1a:18:a4:34:dd:4e:79:f9:40:cc:f0:b5:c2:48:
9e:53:23:ff:21:fe:af:58:9f:52:1b:b0:35:98:cf:f9:23:0e:
6f:f0:1b:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdjlZpTT+FAD6+U6Gx1MPOtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZWZmNjE2MjUwMmVhM2I1MmZkOGNhM2FlMTA4ZDEzZDZi
ZmY2NTIwHhcNMjUwNjEyMTAwMDM3WhcNMjUwNjEzMTAwMDM3WjAzMTEwLwYDVQQD
EyhhMWIzZGU3MTFlMjhhMzUxYTNiZDI3OTBmZDkzZDg0ZTgzYmFlYjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn25o/ienaspkQ+6N2jqrBBlCPgZ+
tv5o7xWQMBc8NYe/ZbLrevy33RSn9MrRx2TsRu4y4RVpoL8DmU8rU0vghimYEQUw
cjvz+76MpcYnc1h0BvtqxgLQF+tokwZgnWKQmO4xDaQciwZSIShTL68y7LTDWW6X
x6+VNaTrRqssknXPbQXEBx2YzQ4S089fwaL2vVYpCB0GvDDkcpS+oEJErzlwDOZ1
leCk8Gr7osGyxIg2AR4wAJS5KT4LwZwlQm8tj+Q8R8OvyHLwPO05U8VjVHqW1Sm5
bCXyKSHhFjBJRoNsljKDHCGXx3o/ei/Q9eGSYf/JkKA7sW7tLkI2QHKgtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKGz3nEeKKNRo70nkP2T2E6DuutAMB8GA1UdIwQY
MBaAFJLv9hYlAuo7Uv2Mo64QjRPWv/ZSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3VfMkZpVUM2anRTX1l5anJoQ05FOWFfOWxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS83OTQzYTAtY2NhYi00MjYwLWJkNTEt
YWZlODlhYWNjNDkyLzEva3VfMkZpVUM2anRTX1l5anJoQ05FOWFfOWxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS83OTQzYTAtY2NhYi00MjYwLWJkNTEtYWZlODlhYWNjNDky
LzEva3VfMkZpVUM2anRTX1l5anJoQ05FOWFfOWxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcgTOnEwb
4f3dqptBHTWyyAZqmWOejqI7g7fNW9Jd2et7+At+O7qxlud0Awl3qs097LcnIa/k
7rgbrFPRdAg5f7bM/GWBt5+xMfbf3YdqSra4W8VZelVdjCV42v0o7HFcfXfNK9w2
HTtXzy9dTm/t1Y1PtrLmwzicPp6bHMutO+/oXn283xXgGEs+8Eh+jUDynCpjrBac
EjwKck1EgU9IKnKCdgtVhRQtDZDSttDvypc3zWnAFSk8CuTNzk79PvO2Ps9ZVBO/
59u0MdtVl0qR6zIHnaq4RA4keUIoRRoYpDTdTnn5QMzwtcJInlMj/yH+r1ifUhuw
NZjP+SMOb/AbXA==
-----END CERTIFICATE-----
Generated at Thu Jun 12 13:12:50 2025 by rpki-client