Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/58394a-8cf6-4b11-becb-3ba69131458b/1/kuwpVHbKHZNNsE0AJE_FB5ucl0g.mft
File: kuwpVHbKHZNNsE0AJE_FB5ucl0g.mft (raw, json)
Hash identifier: OzywFs8HmyJqC7cBUMIxFNnUaDx8zjEiJfRHP7wlfQY=
Subject key identifier: B1:BC:50:C0:FC:13:0B:74:60:B2:AC:17:FE:8E:F7:C0:ED:5D:73:01
Authority key identifier: 92:EC:29:54:76:CA:1D:93:4D:B0:4D:00:24:4F:C5:07:9B:9C:97:48
Certificate issuer: /CN=92ec295476ca1d934db04d00244fc5079b9c9748
Certificate serial: 019A729361B7CF0FD35BBEB6EC9F94E8ADA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kuwpVHbKHZNNsE0AJE_FB5ucl0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/58394a-8cf6-4b11-becb-3ba69131458b/1/kuwpVHbKHZNNsE0AJE_FB5ucl0g.mft
Manifest number: 1330
Signing time: Tue 11 Nov 2025 11:00:52 +0000
Manifest this update: Tue 11 Nov 2025 11:00:52 +0000
Manifest next update: Wed 12 Nov 2025 11:00:52 +0000
Files and hashes: 1: kuwpVHbKHZNNsE0AJE_FB5ucl0g.crl (hash: QNwb6ND0rP1YDV1oIuBNqdn7lQEqmRtJE1vpRL5yGyo=)
2: sZ85FeVfKS3RqKqG5NUDvn--qlo.roa (hash: gTaYc3X+G3Jkjg5kUdF0n9TPsOguK/WjYif95eZGzOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/58394a-8cf6-4b11-becb-3ba69131458b/1/kuwpVHbKHZNNsE0AJE_FB5ucl0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/58394a-8cf6-4b11-becb-3ba69131458b/1/kuwpVHbKHZNNsE0AJE_FB5ucl0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/kuwpVHbKHZNNsE0AJE_FB5ucl0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:61:b7:cf:0f:d3:5b:be:b6:ec:9f:94:e8:ad:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92ec295476ca1d934db04d00244fc5079b9c9748
Validity
Not Before: Nov 11 11:00:52 2025 GMT
Not After : Nov 12 11:00:52 2025 GMT
Subject: CN=b1bc50c0fc130b7460b2ac17fe8ef7c0ed5d7301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:af:a3:3c:1d:10:05:80:66:60:26:42:4f:89:
3a:34:d1:5d:17:6d:d5:79:c6:36:47:ea:c4:ae:57:
92:15:94:12:b7:8b:69:30:51:7e:67:24:1f:ac:d0:
9c:e5:31:5c:94:83:7a:e6:09:bd:c0:3b:3b:4b:f6:
cf:1c:df:da:b7:0b:e5:39:e4:fc:30:cb:59:74:1a:
ae:41:cb:6e:f7:b1:9b:05:c9:38:02:5b:04:30:10:
f5:d7:74:8e:80:db:80:58:61:20:4a:83:70:bc:b5:
85:9c:ea:06:0b:81:78:01:c9:60:1d:71:21:9b:85:
b0:09:f7:f1:b1:79:0b:bc:bd:8b:a7:19:9d:4d:fe:
1e:49:7e:7d:82:c3:1c:80:bf:ea:11:d9:af:61:25:
bc:2f:c5:d6:de:97:a3:24:98:2e:b4:d5:a4:4d:39:
86:64:16:66:30:13:05:8b:56:26:75:ae:c1:57:f9:
59:8c:0f:4c:ff:19:2b:3c:ce:19:f3:71:f5:29:1c:
6c:02:d8:9b:95:18:ab:c4:99:7c:b1:b6:0e:1a:05:
23:82:ef:40:62:40:88:a8:a0:d3:82:16:da:2b:01:
e1:68:46:33:55:66:62:96:17:28:eb:aa:e0:24:ce:
c4:94:25:bf:08:16:c8:71:33:a4:50:32:cc:5d:c9:
3d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:BC:50:C0:FC:13:0B:74:60:B2:AC:17:FE:8E:F7:C0:ED:5D:73:01
X509v3 Authority Key Identifier:
keyid:92:EC:29:54:76:CA:1D:93:4D:B0:4D:00:24:4F:C5:07:9B:9C:97:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kuwpVHbKHZNNsE0AJE_FB5ucl0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/58394a-8cf6-4b11-becb-3ba69131458b/1/kuwpVHbKHZNNsE0AJE_FB5ucl0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/58394a-8cf6-4b11-becb-3ba69131458b/1/kuwpVHbKHZNNsE0AJE_FB5ucl0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:43:c4:01:83:32:ce:0c:be:94:df:06:78:34:cc:91:a3:99:
f2:66:79:6c:9c:52:89:b5:b4:60:f2:2e:fe:68:2c:d3:65:20:
61:dc:36:b0:da:59:0b:32:1a:9c:c2:4c:5c:de:d2:50:06:67:
7a:cd:cd:e5:91:ca:d2:ba:56:3d:88:92:26:bc:af:d1:f9:c6:
c5:3d:ae:a2:5e:22:37:72:99:f4:17:08:41:3b:8c:a2:65:02:
75:6d:39:85:7d:b8:e9:c4:84:03:a0:4c:50:9f:f1:d9:5c:49:
9a:71:71:de:80:ad:2e:c3:e8:42:02:a3:30:48:a8:90:69:3f:
cb:2e:d0:da:d1:7e:aa:05:4e:e8:0a:b7:c9:a0:eb:cd:c6:8d:
64:c1:60:2c:cd:7f:a6:37:6c:fa:4d:ea:a8:05:73:18:cf:16:
b6:eb:c9:8b:76:a5:a7:7f:43:c2:b1:98:42:33:be:5d:88:fc:
4d:68:89:1b:de:9c:bb:e3:82:8a:cf:7d:ea:a7:a2:bb:fd:b0:
39:ee:7d:4e:ea:a5:51:be:a1:33:e9:52:c6:97:c6:3f:03:5d:
1a:6d:79:ac:75:64:34:b3:d8:7e:2b:53:68:73:bd:ba:82:72:
bf:e9:3c:c9:7d:a1:92:c9:6f:0a:fe:b9:90:ee:8e:0b:22:2c:
6d:d1:eb:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:30 2025 by rpki-client