Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/KC5DLtiL7BrRRURJYygU1DmWseA.mft
File: KC5DLtiL7BrRRURJYygU1DmWseA.mft (raw, json)
Hash identifier: xUa756s6wj4pbUaU2lgqUStka2zjR4I4E1GxRKVgazw=
Subject key identifier: 8B:2F:D1:F4:CC:24:47:D3:AD:C2:80:20:FD:AC:42:F3:81:E7:41:FA
Authority key identifier: 28:2E:43:2E:D8:8B:EC:1A:D1:45:44:49:63:28:14:D4:39:96:B1:E0
Certificate issuer: /CN=282e432ed88bec1ad1454449632814d43996b1e0
Certificate serial: 019A4E4F4178EB65BE4E25D3C893E9976B29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KC5DLtiL7BrRRURJYygU1DmWseA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/KC5DLtiL7BrRRURJYygU1DmWseA.mft
Manifest number: 0D64
Signing time: Tue 04 Nov 2025 10:00:08 +0000
Manifest this update: Tue 04 Nov 2025 10:00:08 +0000
Manifest next update: Wed 05 Nov 2025 10:00:08 +0000
Files and hashes: 1: 9FnOB-XBygoB-RgBBWEsPTbvFTc.roa (hash: faK52ZKxn8mhj7q+v4KziaARqXuKQdUnupgh7Jp3IVk=)
2: KC5DLtiL7BrRRURJYygU1DmWseA.crl (hash: 5+ZODufvSgeUaQQUc1UscBWaZcRRwJVx5ilwfCMUBjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/KC5DLtiL7BrRRURJYygU1DmWseA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/KC5DLtiL7BrRRURJYygU1DmWseA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KC5DLtiL7BrRRURJYygU1DmWseA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:41:78:eb:65:be:4e:25:d3:c8:93:e9:97:6b:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=282e432ed88bec1ad1454449632814d43996b1e0
Validity
Not Before: Nov 4 10:00:08 2025 GMT
Not After : Nov 5 10:00:08 2025 GMT
Subject: CN=8b2fd1f4cc2447d3adc28020fdac42f381e741fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d2:75:d6:64:cc:6c:77:8d:41:c3:d3:6e:c0:
c3:7e:aa:55:d2:c2:7a:c8:6a:28:c2:20:41:6c:32:
7d:79:62:8a:c4:6d:1e:ad:d2:e3:4e:26:c3:70:f8:
1e:ff:bd:33:c3:a6:30:c0:42:c5:3f:02:0b:0f:66:
2b:cc:6a:ab:01:79:3e:f7:a0:4d:e4:b9:86:67:cf:
b6:ce:b4:18:91:07:8b:85:d4:e3:aa:71:02:cb:e1:
82:51:eb:62:0d:5b:2f:b1:de:17:60:88:0a:b3:02:
d0:5e:8c:f5:c2:c1:5c:4d:19:cb:c9:e6:28:af:60:
d7:a3:9f:7a:4a:c5:a1:d4:6a:5a:17:d4:c8:1a:f3:
d4:62:82:bf:21:b8:1b:2d:cb:96:d8:db:e5:83:4d:
fc:4f:1e:5b:4c:a8:16:36:e5:6a:62:75:a3:db:2f:
fd:43:32:1c:56:22:3c:76:13:85:5f:67:c5:29:30:
49:83:dc:60:80:e4:df:0f:71:d5:29:4c:29:71:4f:
5b:11:e1:2a:e4:05:7b:97:d4:6f:fd:f6:2b:e0:7f:
9b:e2:23:69:78:14:33:d3:b1:9c:3a:41:8c:05:c1:
6b:7f:6b:aa:6b:b3:a8:36:57:6e:78:68:06:19:07:
b9:9a:7a:1f:55:8c:a9:c8:59:3a:46:4b:29:44:31:
33:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:2F:D1:F4:CC:24:47:D3:AD:C2:80:20:FD:AC:42:F3:81:E7:41:FA
X509v3 Authority Key Identifier:
keyid:28:2E:43:2E:D8:8B:EC:1A:D1:45:44:49:63:28:14:D4:39:96:B1:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KC5DLtiL7BrRRURJYygU1DmWseA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/KC5DLtiL7BrRRURJYygU1DmWseA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/KC5DLtiL7BrRRURJYygU1DmWseA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:5d:9f:8f:52:d5:ec:6e:86:5f:b9:e8:3b:2f:5a:80:ca:ed:
5e:61:e2:92:b9:d6:d5:ef:2a:28:d8:ce:d9:c1:43:4a:a1:26:
7a:a4:77:89:64:e2:ae:4a:71:bd:81:6a:f3:8f:ae:ac:a0:1e:
73:36:71:6d:36:8f:01:93:66:36:6d:39:30:28:3e:87:4a:4e:
91:51:d0:7e:0e:0d:b8:05:15:78:94:3b:e1:70:2d:4c:99:ef:
fb:5c:df:06:d5:c3:b7:2e:82:68:44:1e:b7:03:87:4a:2a:c1:
52:5e:19:b8:5e:27:89:a3:18:ef:aa:be:a6:25:0b:ad:8a:48:
a7:fb:48:f1:aa:6f:19:14:44:99:1b:54:98:65:1b:ee:a8:f4:
89:f0:c2:fe:8b:80:6e:11:17:21:44:16:6e:b2:d7:b0:1d:8f:
3e:7d:13:d5:c2:76:96:d8:dd:e2:59:7c:47:67:0e:d6:12:7a:
52:ec:11:0c:5f:1a:7a:9c:47:58:aa:b6:5c:20:cc:41:ac:96:
2d:6c:95:d6:d0:80:74:7d:4f:ff:36:17:9f:82:b1:61:af:b3:
43:7d:ab:73:b0:c2:a9:89:aa:a9:e4:f2:40:03:9f:70:d3:58:
24:eb:fe:36:3f:7a:fd:7a:93:17:58:b3:c2:7e:59:be:28:c3:
3f:21:34:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOT0F462W+TiXTyJPpl2spMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4MmU0MzJlZDg4YmVjMWFkMTQ1NDQ0OTYzMjgxNGQ0Mzk5
NmIxZTAwHhcNMjUxMTA0MTAwMDA4WhcNMjUxMTA1MTAwMDA4WjAzMTEwLwYDVQQD
Eyg4YjJmZDFmNGNjMjQ0N2QzYWRjMjgwMjBmZGFjNDJmMzgxZTc0MWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtJ11mTMbHeNQcPTbsDDfqpV0sJ6
yGoowiBBbDJ9eWKKxG0erdLjTibDcPge/70zw6YwwELFPwILD2YrzGqrAXk+96BN
5LmGZ8+2zrQYkQeLhdTjqnECy+GCUetiDVsvsd4XYIgKswLQXoz1wsFcTRnLyeYo
r2DXo596SsWh1GpaF9TIGvPUYoK/IbgbLcuW2Nvlg038Tx5bTKgWNuVqYnWj2y/9
QzIcViI8dhOFX2fFKTBJg9xggOTfD3HVKUwpcU9bEeEq5AV7l9Rv/fYr4H+b4iNp
eBQz07GcOkGMBcFrf2uqa7OoNldueGgGGQe5mnofVYypyFk6RkspRDEzFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIsv0fTMJEfTrcKAIP2sQvOB50H6MB8GA1UdIwQY
MBaAFCguQy7Yi+wa0UVESWMoFNQ5lrHgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0M1REx0aUw3QnJSUlVSSll5Z1UxRG1Xc2VBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9jNjBmMDgtYjI0Yi00ZGM0LWEyN2Mt
ZmMwYWE3MmU4ZWFkLzEvS0M1REx0aUw3QnJSUlVSSll5Z1UxRG1Xc2VBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9jNjBmMDgtYjI0Yi00ZGM0LWEyN2MtZmMwYWE3MmU4ZWFk
LzEvS0M1REx0aUw3QnJSUlVSSll5Z1UxRG1Xc2VBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQF2fj1LV
7G6GX7noOy9agMrtXmHikrnW1e8qKNjO2cFDSqEmeqR3iWTirkpxvYFq84+urKAe
czZxbTaPAZNmNm05MCg+h0pOkVHQfg4NuAUVeJQ74XAtTJnv+1zfBtXDty6CaEQe
twOHSirBUl4ZuF4niaMY76q+piULrYpIp/tI8apvGRREmRtUmGUb7qj0ifDC/ouA
bhEXIUQWbrLXsB2PPn0T1cJ2ltjd4ll8R2cO1hJ6UuwRDF8aepxHWKq2XCDMQayW
LWyV1tCAdH1P/zYXn4KxYa+zQ32rc7DCqYmqqeTyQAOfcNNYJOv+Nj96/XqTF1iz
wn5ZvijDPyE0vw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:11:27 2025 by rpki-client