Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/58394a-8cf6-4b11-becb-3ba69131458b/1/kuwpVHbKHZNNsE0AJE_FB5ucl0g.mft
File: kuwpVHbKHZNNsE0AJE_FB5ucl0g.mft (raw, json)
Hash identifier: NPQKFSKdTiIjJjj9DPlEeWCJBG57urjG1qRx9v0XwPQ=
Subject key identifier: 6C:F2:21:70:E6:5E:E3:E0:63:0E:EA:95:04:7E:C9:4C:89:C0:29:C9
Authority key identifier: 92:EC:29:54:76:CA:1D:93:4D:B0:4D:00:24:4F:C5:07:9B:9C:97:48
Certificate issuer: /CN=92ec295476ca1d934db04d00244fc5079b9c9748
Certificate serial: 0199228CDD256EAAC8D467C017E6926023A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kuwpVHbKHZNNsE0AJE_FB5ucl0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/58394a-8cf6-4b11-becb-3ba69131458b/1/kuwpVHbKHZNNsE0AJE_FB5ucl0g.mft
Manifest number: 1282
Signing time: Sun 07 Sep 2025 05:01:20 +0000
Manifest this update: Sun 07 Sep 2025 05:01:20 +0000
Manifest next update: Mon 08 Sep 2025 05:01:20 +0000
Files and hashes: 1: kuwpVHbKHZNNsE0AJE_FB5ucl0g.crl (hash: aiaHY845O9CPKrp2OsgqWpHgXFlaQWPMASnCnuTbb+w=)
2: sZ85FeVfKS3RqKqG5NUDvn--qlo.roa (hash: gTaYc3X+G3Jkjg5kUdF0n9TPsOguK/WjYif95eZGzOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/58394a-8cf6-4b11-becb-3ba69131458b/1/kuwpVHbKHZNNsE0AJE_FB5ucl0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/58394a-8cf6-4b11-becb-3ba69131458b/1/kuwpVHbKHZNNsE0AJE_FB5ucl0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/kuwpVHbKHZNNsE0AJE_FB5ucl0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:dd:25:6e:aa:c8:d4:67:c0:17:e6:92:60:23:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92ec295476ca1d934db04d00244fc5079b9c9748
Validity
Not Before: Sep 7 05:01:20 2025 GMT
Not After : Sep 8 05:01:20 2025 GMT
Subject: CN=6cf22170e65ee3e0630eea95047ec94c89c029c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f9:1d:1c:47:91:e1:85:c3:44:e2:fb:12:d8:
7e:db:74:a5:86:0a:3a:dc:ba:fb:a6:42:62:a2:13:
6f:c8:51:d5:63:eb:51:d2:4a:f2:0d:2c:74:5e:a9:
f0:ec:e5:ef:c9:2e:35:7e:89:0b:d1:b8:50:46:32:
58:78:8f:4a:74:b4:b3:2f:05:4b:45:d7:c0:7b:02:
7f:52:6b:55:fe:45:d1:21:f8:f3:04:f8:67:5d:ab:
c2:32:86:46:a7:b3:72:99:9a:78:3a:2a:e6:02:d2:
fc:21:b3:fc:ca:37:2e:7b:dd:d4:42:d2:4a:d5:00:
7b:65:fa:a0:39:85:bd:69:c0:c7:07:f3:16:1d:b8:
51:63:0d:14:39:56:28:2e:e9:21:98:ea:06:b9:53:
62:d5:9c:c8:7b:0a:cb:6c:2e:e0:00:79:c6:d3:bc:
79:8c:00:eb:d3:81:ac:e0:21:42:25:60:2f:26:b1:
8e:a3:9a:03:27:9b:46:bc:e2:a1:26:e1:83:11:ec:
5c:ad:99:97:62:21:94:de:77:0e:58:3b:5c:9a:03:
5d:67:b9:d1:d7:0c:50:50:94:5f:f3:13:cb:38:ad:
02:6a:34:03:3e:06:70:bf:c1:ca:f2:65:73:ac:79:
f5:ed:8f:c9:56:f1:d4:d9:5f:e0:90:4f:02:6f:5e:
4b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F2:21:70:E6:5E:E3:E0:63:0E:EA:95:04:7E:C9:4C:89:C0:29:C9
X509v3 Authority Key Identifier:
keyid:92:EC:29:54:76:CA:1D:93:4D:B0:4D:00:24:4F:C5:07:9B:9C:97:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kuwpVHbKHZNNsE0AJE_FB5ucl0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/58394a-8cf6-4b11-becb-3ba69131458b/1/kuwpVHbKHZNNsE0AJE_FB5ucl0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/58394a-8cf6-4b11-becb-3ba69131458b/1/kuwpVHbKHZNNsE0AJE_FB5ucl0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:99:e3:62:0a:ff:05:40:9a:13:94:8d:e2:e8:b1:bd:a8:df:
a8:df:08:95:37:ea:5c:17:bd:f9:60:f3:ce:6b:ec:58:e5:6b:
3b:52:00:47:bf:10:50:56:4f:54:49:70:1c:44:11:82:76:e5:
d1:27:b8:e7:31:a3:9b:c7:e5:d7:2c:96:6d:09:a7:8e:b5:88:
5f:bd:56:b7:10:57:a2:34:a4:ae:44:5c:90:4b:88:76:49:8c:
8f:6d:7a:d1:cd:3c:cc:13:89:52:df:0b:32:50:4e:30:93:36:
9c:6e:fa:d4:9c:46:13:82:00:53:a4:2b:89:d0:d3:ff:f8:3b:
b8:2e:94:fb:b2:25:6d:33:2c:f3:29:39:2b:8c:a2:a6:35:80:
dd:be:5d:54:b8:37:86:c0:dc:cd:dc:a8:ac:9d:19:1d:b5:34:
8a:df:18:b4:e8:5b:d8:46:de:91:8c:44:d0:5e:38:c7:9a:73:
ed:cf:d5:5c:34:64:a8:32:f5:0b:af:fc:06:d4:3f:7e:b6:40:
95:ad:0f:41:d5:2f:6b:d5:99:99:a6:6c:26:1d:13:52:de:d1:
bd:19:71:45:21:4c:82:7f:55:db:db:01:de:02:04:00:8b:e6:
9a:a0:24:cf:3f:6f:55:55:51:b1:d5:24:37:ff:10:ad:f6:06:
ce:44:87:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijN0lbqrI1GfAF+aSYCOmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZWMyOTU0NzZjYTFkOTM0ZGIwNGQwMDI0NGZjNTA3OWI5
Yzk3NDgwHhcNMjUwOTA3MDUwMTIwWhcNMjUwOTA4MDUwMTIwWjAzMTEwLwYDVQQD
Eyg2Y2YyMjE3MGU2NWVlM2UwNjMwZWVhOTUwNDdlYzk0Yzg5YzAyOWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufkdHEeR4YXDROL7Eth+23Slhgo6
3Lr7pkJiohNvyFHVY+tR0kryDSx0Xqnw7OXvyS41fokL0bhQRjJYeI9KdLSzLwVL
RdfAewJ/UmtV/kXRIfjzBPhnXavCMoZGp7NymZp4OirmAtL8IbP8yjcue93UQtJK
1QB7ZfqgOYW9acDHB/MWHbhRYw0UOVYoLukhmOoGuVNi1ZzIewrLbC7gAHnG07x5
jADr04Gs4CFCJWAvJrGOo5oDJ5tGvOKhJuGDEexcrZmXYiGU3ncOWDtcmgNdZ7nR
1wxQUJRf8xPLOK0CajQDPgZwv8HK8mVzrHn17Y/JVvHU2V/gkE8Cb15LwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGzyIXDmXuPgYw7qlQR+yUyJwCnJMB8GA1UdIwQY
MBaAFJLsKVR2yh2TTbBNACRPxQebnJdIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3V3cFZIYktIWk5Oc0UwQUpFX0ZCNXVjbDBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy81ODM5NGEtOGNmNi00YjExLWJlY2It
M2JhNjkxMzE0NThiLzEva3V3cFZIYktIWk5Oc0UwQUpFX0ZCNXVjbDBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy81ODM5NGEtOGNmNi00YjExLWJlY2ItM2JhNjkxMzE0NThi
LzEva3V3cFZIYktIWk5Oc0UwQUpFX0ZCNXVjbDBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANJnjYgr/
BUCaE5SN4uixvajfqN8IlTfqXBe9+WDzzmvsWOVrO1IAR78QUFZPVElwHEQRgnbl
0Se45zGjm8fl1yyWbQmnjrWIX71WtxBXojSkrkRckEuIdkmMj2160c08zBOJUt8L
MlBOMJM2nG761JxGE4IAU6QridDT//g7uC6U+7IlbTMs8yk5K4yipjWA3b5dVLg3
hsDczdyorJ0ZHbU0it8YtOhb2EbekYxE0F44x5pz7c/VXDRkqDL1C6/8BtQ/frZA
la0PQdUva9WZmaZsJh0TUt7RvRlxRSFMgn9V29sB3gIEAIvmmqAkzz9vVVVRsdUk
N/8QrfYGzkSH8g==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:25:02 2025 by rpki-client