Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.mft
File: KUtbu-F0Z0duIoKIgiGIffVJ9Lk.mft (raw, json)
Hash identifier: 9W62tgVaLQyLLbHGpIo4QJvQ0hPBPUu3SB72xzrXGik=
Subject key identifier: DA:F8:FF:12:9E:3D:AB:29:3F:3C:AE:EB:4C:87:1C:0C:2E:6D:9D:00
Authority key identifier: 29:4B:5B:BB:E1:74:67:47:6E:22:82:88:82:21:88:7D:F5:49:F4:B9
Certificate issuer: /CN=294b5bbbe17467476e2282888221887df549f4b9
Certificate serial: 019A71B854D778275F221104E40B04C949C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.mft
Manifest number: 16B0
Signing time: Tue 11 Nov 2025 07:01:37 +0000
Manifest this update: Tue 11 Nov 2025 07:01:37 +0000
Manifest next update: Wed 12 Nov 2025 07:01:37 +0000
Files and hashes: 1: HJiIfDvFo_sDLMJ5OE82mYFpyHQ.roa (hash: P459lfA3vTZFDKOU1GovB2qolTUez89TIhHTMpHxZQo=)
2: KUtbu-F0Z0duIoKIgiGIffVJ9Lk.crl (hash: YB6D7evSu8NAI/z7y4GbrJmggGC+CtKHLDacdnjQuQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.mft
rsync://rpki.ripe.net/repository/DEFAULT/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:54:d7:78:27:5f:22:11:04:e4:0b:04:c9:49:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=294b5bbbe17467476e2282888221887df549f4b9
Validity
Not Before: Nov 11 07:01:37 2025 GMT
Not After : Nov 12 07:01:37 2025 GMT
Subject: CN=daf8ff129e3dab293f3caeeb4c871c0c2e6d9d00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4b:10:75:e0:bf:64:f8:5a:62:ea:ab:03:35:
47:30:1c:ee:18:fd:55:17:e6:6b:7d:89:7f:46:11:
d7:f9:cf:5a:29:e7:65:4c:f6:23:9e:f6:d0:08:50:
b6:d5:b0:e6:84:75:ac:a6:d4:9a:3f:ff:95:1f:69:
d6:ce:5a:2d:8a:19:c9:66:fa:b9:5c:23:2b:cf:9c:
32:f3:b3:66:e7:ea:32:c3:d2:f4:12:a9:c5:71:1f:
50:56:61:5e:96:98:9a:b9:31:f3:df:de:f7:66:fa:
c7:e9:ad:d3:74:f6:c7:27:f5:47:20:ef:93:9f:72:
05:4c:26:46:b7:da:e2:37:48:1c:e9:fc:27:ab:f6:
6d:09:58:81:d2:d8:73:e3:e2:45:4d:bc:18:15:1b:
67:f6:db:38:9b:ba:4a:24:68:87:f6:e3:12:eb:a4:
cb:a0:73:46:11:a5:eb:ec:93:9b:3a:fc:d8:72:9f:
53:23:b5:4b:3d:1e:74:3e:1c:48:94:ad:f2:f5:a9:
a6:bd:bf:71:ab:7a:0d:d9:e7:90:7b:4f:bf:bf:e6:
0a:df:ee:f3:1d:c0:07:1c:1c:8d:f0:08:55:54:fa:
74:22:7a:66:f6:1b:3d:00:32:cb:2a:c0:b7:36:a9:
a0:ca:0f:02:de:cb:04:b1:68:bf:c4:4c:14:61:0e:
eb:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F8:FF:12:9E:3D:AB:29:3F:3C:AE:EB:4C:87:1C:0C:2E:6D:9D:00
X509v3 Authority Key Identifier:
keyid:29:4B:5B:BB:E1:74:67:47:6E:22:82:88:82:21:88:7D:F5:49:F4:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:40:01:10:34:a0:17:5c:50:75:46:68:8a:fc:be:1d:ee:bf:
0c:9d:40:b0:66:c5:72:59:a6:b2:49:96:86:8f:4f:25:d8:3e:
62:42:02:3b:d6:18:e0:ef:44:86:cf:42:0c:de:de:fd:59:f2:
50:c0:4d:f4:ff:f6:bf:18:a4:5a:9f:fb:e2:de:c9:0e:3c:7f:
25:85:84:87:2f:c4:df:e4:b3:48:b4:9b:bc:ec:3f:47:1c:e3:
21:8a:a6:8c:be:d6:3b:fe:5e:62:b8:58:74:b6:71:4d:81:3f:
b6:4a:ac:58:54:f8:83:98:a6:60:9d:4b:8d:eb:6f:64:69:b1:
dd:21:83:d4:e2:42:4a:b6:34:58:4b:0d:7a:65:bf:14:54:a9:
15:6c:d9:df:52:71:76:18:22:40:60:37:9e:f7:b4:0d:31:f4:
23:89:e1:a0:6b:f4:ee:61:d9:36:db:d7:cd:f8:5e:19:59:a5:
0d:5a:c4:5a:35:86:b1:e7:7d:51:f9:54:73:8f:63:b1:7c:57:
6a:25:84:6c:d4:80:ad:9f:6f:50:5a:5a:b7:73:0e:7e:92:28:
76:0e:7a:f8:d1:a3:a6:c1:33:6c:d0:36:02:be:6d:99:8b:13:
b4:5e:7a:8d:ae:a3:8b:e3:71:ff:29:46:f7:7e:a3:af:08:9c:
26:da:f7:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:53 2025 by rpki-client