Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
File: KsPteUra-5HLgalp64qbKQX-4uw.mft (raw, json)
Hash identifier: sWol0bAYGkzMjvxCDlJx/i7wM/8QjESMjneZznC//Qs=
Subject key identifier: B9:B6:F8:20:BC:0C:F0:6E:B5:3E:E2:BE:65:F7:D7:74:8C:F8:5C:76
Authority key identifier: 2A:C3:ED:79:4A:DA:FB:91:CB:81:A9:69:EB:8A:9B:29:05:FE:E2:EC
Certificate issuer: /CN=2ac3ed794adafb91cb81a969eb8a9b2905fee2ec
Certificate serial: 01993914FEC56B315A50F50C40955F1CDDDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
Manifest number: 167F
Signing time: Thu 11 Sep 2025 14:01:41 +0000
Manifest this update: Thu 11 Sep 2025 14:01:41 +0000
Manifest next update: Fri 12 Sep 2025 14:01:41 +0000
Files and hashes: 1: KsPteUra-5HLgalp64qbKQX-4uw.crl (hash: hvfO8Lj39qIZdvHGyWC4CwZrkiFPQLDa3LJwZ5XGQNE=)
2: PKyx0DcFoAagRLDeVRH7IggDBvs.roa (hash: pNDjxNhK4qz1Wc21dlphpRgyPK79NSu66uAh/Cd4/LQ=)
3: zxynKoaXLk9CSCbEuR1SMnhOszM.roa (hash: 0C0maO3P6rLabRCNi4Fq6yr5sjK9+mFynQgMmbGpRUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 14:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:39:14:fe:c5:6b:31:5a:50:f5:0c:40:95:5f:1c:dd:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3ed794adafb91cb81a969eb8a9b2905fee2ec
Validity
Not Before: Sep 11 14:01:41 2025 GMT
Not After : Sep 12 14:01:41 2025 GMT
Subject: CN=b9b6f820bc0cf06eb53ee2be65f7d7748cf85c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7a:a2:bf:36:18:c3:d3:a3:1f:c6:87:01:20:
ac:96:f4:35:65:50:eb:19:38:e7:3b:c8:f0:5f:52:
20:7d:88:99:f3:42:5e:b9:c9:60:0d:6a:40:43:45:
9d:be:d5:09:45:04:34:61:e8:5b:b2:0e:84:a1:b3:
d7:9c:d9:3b:1f:57:15:2d:63:68:87:9c:b7:d1:67:
f8:33:f8:8a:f1:60:e0:74:4a:4b:c5:0d:bc:04:00:
f2:42:7c:db:ed:5a:10:6c:59:27:3c:12:d9:53:a7:
89:db:92:f4:98:74:55:c2:bb:85:b7:f0:47:2c:b4:
c5:fe:2d:28:58:aa:62:df:34:4b:88:e9:3d:2f:b3:
04:cd:53:7d:43:c9:62:78:63:95:88:3b:23:1f:3b:
d0:77:00:46:8e:d1:bf:12:61:ad:52:00:54:99:87:
9e:90:4c:96:aa:74:db:b5:cb:db:6d:c2:55:ec:b3:
c0:cd:d2:fa:f8:91:9b:2b:0c:63:dd:53:c3:a0:a5:
de:45:b8:73:67:cd:e9:e8:a4:83:77:72:39:3f:fe:
81:72:36:40:d8:57:a7:8c:fb:1d:d0:ed:00:5b:81:
1d:96:e5:06:6a:9c:94:18:12:6f:e5:c1:5a:19:ed:
7f:dd:20:fe:70:1a:e1:d2:b8:06:22:23:e4:7c:e8:
dd:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B6:F8:20:BC:0C:F0:6E:B5:3E:E2:BE:65:F7:D7:74:8C:F8:5C:76
X509v3 Authority Key Identifier:
keyid:2A:C3:ED:79:4A:DA:FB:91:CB:81:A9:69:EB:8A:9B:29:05:FE:E2:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:12:7e:ce:cb:79:d0:29:22:dc:b6:2f:b6:7a:55:c9:e1:4c:
6f:72:22:4f:c4:fc:03:11:66:0c:7a:01:c4:9f:5b:37:ce:61:
e6:b2:7c:03:11:85:75:cb:d1:71:94:56:3a:6f:60:6c:70:60:
f7:1e:26:5f:f5:66:fd:03:00:e1:a7:8b:0b:83:f7:34:06:f6:
8f:38:e6:ba:9c:0a:dc:81:a4:36:dc:ea:9b:ce:88:b7:1c:50:
bd:7e:17:b7:c7:ce:82:0d:4a:fb:2f:f9:ee:c2:33:46:22:3f:
a8:83:16:db:68:a0:cf:69:03:af:b4:c1:82:5b:b2:8f:dc:27:
46:28:6e:4c:08:ab:8a:c1:65:b1:bc:be:7b:28:f2:bb:7b:68:
2b:40:40:03:65:e7:d2:a7:df:5b:5c:38:bb:f6:39:bf:a7:d8:
5f:1d:77:92:9b:eb:8d:69:75:c3:11:16:b6:f1:9a:0d:47:68:
4b:56:a6:36:1e:5f:e9:12:89:7f:19:b1:70:04:ab:db:ba:79:
d0:39:27:e3:67:fd:66:c5:d7:b6:eb:ba:cb:fc:95:27:fe:21:
5c:2b:bd:f2:85:5e:39:b5:eb:1b:df:cc:ca:ab:34:9d:05:91:
2c:53:28:9a:d4:5d:9d:17:39:30:93:04:44:51:b9:22:f1:fe:
fd:7d:40:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk5FP7FazFaUPUMQJVfHN3dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYzNlZDc5NGFkYWZiOTFjYjgxYTk2OWViOGE5YjI5MDVm
ZWUyZWMwHhcNMjUwOTExMTQwMTQxWhcNMjUwOTEyMTQwMTQxWjAzMTEwLwYDVQQD
EyhiOWI2ZjgyMGJjMGNmMDZlYjUzZWUyYmU2NWY3ZDc3NDhjZjg1Yzc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXqivzYYw9OjH8aHASCslvQ1ZVDr
GTjnO8jwX1IgfYiZ80JeuclgDWpAQ0WdvtUJRQQ0Yehbsg6EobPXnNk7H1cVLWNo
h5y30Wf4M/iK8WDgdEpLxQ28BADyQnzb7VoQbFknPBLZU6eJ25L0mHRVwruFt/BH
LLTF/i0oWKpi3zRLiOk9L7MEzVN9Q8lieGOViDsjHzvQdwBGjtG/EmGtUgBUmYee
kEyWqnTbtcvbbcJV7LPAzdL6+JGbKwxj3VPDoKXeRbhzZ83p6KSDd3I5P/6BcjZA
2FenjPsd0O0AW4EdluUGapyUGBJv5cFaGe1/3SD+cBrh0rgGIiPkfOjdCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLm2+CC8DPButT7ivmX313SM+Fx2MB8GA1UdIwQY
MBaAFCrD7XlK2vuRy4GpaeuKmykF/uLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3NQdGVVcmEtNUhMZ2FscDY0cWJLUVgtNHV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi83YjEyN2ItNDRjZS00Y2FkLWFkOGYt
MDg5YzFjM2Q0MzU3LzEvS3NQdGVVcmEtNUhMZ2FscDY0cWJLUVgtNHV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi83YjEyN2ItNDRjZS00Y2FkLWFkOGYtMDg5YzFjM2Q0MzU3
LzEvS3NQdGVVcmEtNUhMZ2FscDY0cWJLUVgtNHV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAahJ+zst5
0Cki3LYvtnpVyeFMb3IiT8T8AxFmDHoBxJ9bN85h5rJ8AxGFdcvRcZRWOm9gbHBg
9x4mX/Vm/QMA4aeLC4P3NAb2jzjmupwK3IGkNtzqm86ItxxQvX4Xt8fOgg1K+y/5
7sIzRiI/qIMW22igz2kDr7TBgluyj9wnRihuTAirisFlsby+eyjyu3toK0BAA2Xn
0qffW1w4u/Y5v6fYXx13kpvrjWl1wxEWtvGaDUdoS1amNh5f6RKJfxmxcASr27p5
0Dkn42f9ZsXXtuu6y/yVJ/4hXCu98oVeObXrG9/Myqs0nQWRLFMomtRdnRc5MJME
RFG5IvH+/X1Agw==
-----END CERTIFICATE-----
Generated at Thu Sep 11 21:27:27 2025 by rpki-client