Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.mft
File: KUv7SsSIYBHwbZ3E79RVMyZO14g.mft (raw, json)
Hash identifier: PB90MGg5p9rCiglRO9QXYSJpROljGJH/Eabm3w6rREc=
Subject key identifier: BB:48:77:8B:9C:1C:41:F4:BB:D8:BA:D9:D6:91:DC:60:95:4A:AD:73
Authority key identifier: 29:4B:FB:4A:C4:88:60:11:F0:6D:9D:C4:EF:D4:55:33:26:4E:D7:88
Certificate issuer: /CN=294bfb4ac4886011f06d9dc4efd45533264ed788
Certificate serial: 01992330D78A866F097725E122E392284093
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUv7SsSIYBHwbZ3E79RVMyZO14g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.mft
Manifest number: 106B
Signing time: Sun 07 Sep 2025 08:00:27 +0000
Manifest this update: Sun 07 Sep 2025 08:00:27 +0000
Manifest next update: Mon 08 Sep 2025 08:00:27 +0000
Files and hashes: 1: KUv7SsSIYBHwbZ3E79RVMyZO14g.crl (hash: frpNkh3cbO8Cr0o61Lqt1/L88f/aO1N60QnpEHhCFbE=)
2: vUzTxQRZNE5WBxRpFY_1BvR6nb8.roa (hash: 4IGQdOA0rNIT3SYgWTgAAmM5+gTsF90wOn17b+OWr8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.mft
rsync://rpki.ripe.net/repository/DEFAULT/KUv7SsSIYBHwbZ3E79RVMyZO14g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:30:d7:8a:86:6f:09:77:25:e1:22:e3:92:28:40:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=294bfb4ac4886011f06d9dc4efd45533264ed788
Validity
Not Before: Sep 7 08:00:27 2025 GMT
Not After : Sep 8 08:00:27 2025 GMT
Subject: CN=bb48778b9c1c41f4bbd8bad9d691dc60954aad73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d6:be:fb:85:16:87:58:3d:1e:90:36:33:6f:
e9:cf:11:71:2c:8b:b7:96:d6:98:c5:84:0d:fa:2b:
c6:3a:ff:b0:35:6d:cf:bd:7c:04:07:c9:24:2e:fa:
a4:4d:48:1e:c2:18:83:28:7b:68:ab:34:e6:2d:36:
85:9c:40:11:4f:71:ab:c1:7f:4d:f9:d5:af:a9:b4:
11:1c:91:67:67:0c:9a:80:6b:d0:f0:3d:ff:f5:ea:
6c:21:c8:97:52:2f:e5:62:e8:28:5d:c0:fc:52:46:
9c:2e:3c:1e:80:ed:9c:07:dd:ed:0e:54:36:ae:50:
20:1e:1c:79:1d:a1:b9:a2:ff:87:c4:e9:53:b5:82:
17:f0:69:0f:f4:d3:ec:5f:f1:42:10:bc:2d:47:1e:
b7:62:89:e3:73:d6:00:0c:89:a7:90:80:35:28:d0:
1b:a6:53:72:44:50:96:2b:5a:7d:3f:90:0a:bd:0d:
d0:5c:d8:6c:2d:df:ea:56:c7:24:ca:97:37:5b:79:
6f:ba:36:67:72:b8:a2:ff:81:30:03:a3:bb:ab:9b:
7b:c8:13:b8:5f:62:ee:a5:11:01:e2:37:98:04:53:
b3:ff:1f:dd:3a:3a:85:aa:8a:0e:a6:3d:c7:ad:14:
65:a5:23:f1:a3:df:7e:d1:5b:d9:76:71:55:73:b8:
8e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:48:77:8B:9C:1C:41:F4:BB:D8:BA:D9:D6:91:DC:60:95:4A:AD:73
X509v3 Authority Key Identifier:
keyid:29:4B:FB:4A:C4:88:60:11:F0:6D:9D:C4:EF:D4:55:33:26:4E:D7:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUv7SsSIYBHwbZ3E79RVMyZO14g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:bb:a1:3f:54:4b:97:1d:0c:a6:e1:63:7f:0b:ce:6e:89:e2:
79:71:7d:33:33:9f:93:38:ca:fd:3d:ee:e4:0f:61:0e:42:4d:
60:a3:ab:e8:e6:db:e6:f8:68:ef:6c:ce:fa:34:cc:17:da:1a:
af:24:7d:7d:5a:a8:e4:13:d5:4b:a2:bb:bc:30:ec:32:ee:61:
d8:e8:7b:12:4f:5e:39:2b:30:84:3f:76:60:83:f3:2f:1b:eb:
05:1e:43:5c:8a:ae:42:86:99:cd:9c:e8:80:17:d4:26:57:98:
d2:18:6f:d4:bf:81:37:7a:28:6c:29:da:ba:a4:75:a4:83:53:
c5:c4:b9:54:5c:62:96:a3:2e:93:1a:ab:a3:56:a1:f9:52:98:
e5:f2:ce:21:7e:77:53:4e:5a:31:15:6f:37:e3:0f:54:bc:c2:
bb:ac:ba:08:32:a8:d7:dc:d4:b2:e5:de:03:61:89:32:c0:54:
56:bf:c9:a9:29:03:7d:ea:11:4f:c0:96:88:86:d2:1c:ad:9b:
5e:17:a7:76:3f:34:fe:3a:71:4f:ba:b0:bc:1e:5c:83:70:2e:
e8:3d:7d:d8:a5:ec:53:1a:25:bd:df:66:ed:fb:de:93:48:e5:
ec:0e:88:81:e6:40:1d:f5:8a:7a:5e:89:b3:e8:75:df:ec:76:
78:5d:01:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:30 2025 by rpki-client