Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/2f6652-7466-4a16-83da-c1f1a0e497cc/1/KUJPgsfIL8VJlTLlpmUadPYpxao.mft
File: KUJPgsfIL8VJlTLlpmUadPYpxao.mft (raw, json)
Hash identifier: GeMgLQ2/cn4DeTEHH/buVfk4DyKwklfTwONTQanzm/4=
Subject key identifier: C4:11:D5:BD:DC:58:CE:E3:D3:2A:C2:58:79:40:65:F2:6B:79:26:17
Authority key identifier: 29:42:4F:82:C7:C8:2F:C5:49:95:32:E5:A6:65:1A:74:F6:29:C5:AA
Certificate issuer: /CN=29424f82c7c82fc5499532e5a6651a74f629c5aa
Certificate serial: 019921B1B427E8F0EDD91830177425FA1FFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUJPgsfIL8VJlTLlpmUadPYpxao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/2f6652-7466-4a16-83da-c1f1a0e497cc/1/KUJPgsfIL8VJlTLlpmUadPYpxao.mft
Manifest number: 0A4A
Signing time: Sun 07 Sep 2025 01:01:58 +0000
Manifest this update: Sun 07 Sep 2025 01:01:58 +0000
Manifest next update: Mon 08 Sep 2025 01:01:58 +0000
Files and hashes: 1: E7pOFVTH8vD5FpCiYaR8AAvSF9c.roa (hash: QknCCRzW2QumFMETOVNE4NTQsXWLabVtKWWfI6cIov4=)
2: KUJPgsfIL8VJlTLlpmUadPYpxao.crl (hash: RaRLrqvi83MqO2EYjs1i3WfAgl1jyz0iA5D6aVXMqGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/2f6652-7466-4a16-83da-c1f1a0e497cc/1/KUJPgsfIL8VJlTLlpmUadPYpxao.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/2f6652-7466-4a16-83da-c1f1a0e497cc/1/KUJPgsfIL8VJlTLlpmUadPYpxao.mft
rsync://rpki.ripe.net/repository/DEFAULT/KUJPgsfIL8VJlTLlpmUadPYpxao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:b4:27:e8:f0:ed:d9:18:30:17:74:25:fa:1f:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29424f82c7c82fc5499532e5a6651a74f629c5aa
Validity
Not Before: Sep 7 01:01:58 2025 GMT
Not After : Sep 8 01:01:58 2025 GMT
Subject: CN=c411d5bddc58cee3d32ac258794065f26b792617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b5:3b:94:14:49:23:95:56:0e:c2:01:8d:3b:
70:00:00:44:a3:2a:75:c3:61:57:59:2a:93:89:74:
4e:d1:65:15:fb:56:32:d7:b4:12:7b:61:50:50:ac:
e8:64:76:7e:48:ba:62:89:02:15:89:86:93:86:7d:
7d:de:b9:cf:fa:6b:5d:fa:0a:79:68:2a:6a:08:e9:
5e:2d:b4:3e:f6:c6:10:8d:09:a9:64:27:45:f6:b3:
14:ce:6d:7d:a9:12:38:06:ee:2f:d5:87:93:95:a1:
01:6d:53:eb:54:e4:2f:60:3a:41:2e:e4:9a:1b:4b:
77:17:8a:0a:1e:33:47:3f:97:c7:5a:70:92:d7:90:
3c:06:a7:fc:ff:c3:c7:ad:eb:cc:45:96:65:53:f4:
6d:9f:02:79:1c:df:81:15:fe:88:8b:c4:8e:9c:58:
3c:e7:ee:9c:47:97:bf:b1:f9:7c:68:11:b1:f0:44:
86:9a:7e:da:07:a3:f2:6e:10:f1:81:99:59:85:80:
a1:f8:95:eb:ef:e6:27:e2:f0:b8:e2:97:59:ec:3d:
88:3f:06:95:5b:06:9f:84:b2:f4:75:df:5f:f2:49:
34:9f:ee:13:d6:58:82:81:7b:bf:cc:41:b3:4d:af:
fa:0b:af:81:bb:b5:95:4c:4e:d3:74:ce:26:8d:57:
fe:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:11:D5:BD:DC:58:CE:E3:D3:2A:C2:58:79:40:65:F2:6B:79:26:17
X509v3 Authority Key Identifier:
keyid:29:42:4F:82:C7:C8:2F:C5:49:95:32:E5:A6:65:1A:74:F6:29:C5:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUJPgsfIL8VJlTLlpmUadPYpxao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/2f6652-7466-4a16-83da-c1f1a0e497cc/1/KUJPgsfIL8VJlTLlpmUadPYpxao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/2f6652-7466-4a16-83da-c1f1a0e497cc/1/KUJPgsfIL8VJlTLlpmUadPYpxao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:76:ae:cb:dc:39:0b:5d:b0:cb:fa:bf:b3:8c:3b:5c:ba:3d:
f2:ed:59:ea:ae:44:98:dc:c6:e6:19:22:28:8d:e5:4d:c3:c9:
d7:cb:eb:97:03:4f:f0:f6:53:91:2f:d6:66:8c:1e:f5:f8:b3:
8f:86:83:60:1d:82:f2:9a:fa:4f:79:1e:3a:09:6f:18:0d:fe:
9e:10:15:56:c5:ec:da:b8:45:a4:0d:1d:3d:9e:f6:52:e2:1e:
b6:49:31:d8:44:b2:86:d9:bc:3b:b2:10:17:61:b7:84:16:40:
c8:f7:65:a9:b8:02:0e:9f:ee:31:ce:04:24:4c:4a:63:99:6b:
a1:22:09:8c:c7:0d:80:48:78:13:4e:2e:f3:fe:4d:4c:ae:4f:
b6:81:0d:30:0b:ae:28:90:59:36:07:2e:50:c8:d0:72:5b:24:
0e:2e:3f:c9:34:76:c9:3a:56:76:31:27:46:64:82:df:2f:68:
63:4a:72:0e:e3:43:f3:f8:25:67:8d:16:e9:1e:1c:b6:2f:ed:
9c:9d:72:2a:8c:56:8c:ff:d9:c1:55:be:ae:77:86:8e:be:67:
35:d7:d9:a5:2b:a3:00:e8:4a:aa:e8:eb:d6:3b:62:c1:d5:8f:
3d:9e:d5:82:a4:5d:4d:cf:6e:e9:7e:b7:b7:5c:78:f8:77:27:
1e:ab:9e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:53:58 2025 by rpki-client