Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft
File: KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft (raw, json)
Hash identifier: H1n6Je8qUiQuTFS2+3KGiUJrCyK6Qg/9Dw80k+xX0SI=
Subject key identifier: 4E:57:82:B2:25:C2:C5:46:DD:38:EC:F5:36:FF:D9:DA:34:BB:D5:B4
Authority key identifier: 28:2B:2C:B9:77:15:3B:AA:D1:DD:99:EE:C1:4C:E0:CA:46:E2:21:9F
Certificate issuer: /CN=282b2cb977153baad1dd99eec14ce0ca46e2219f
Certificate serial: 019A4D73E993317564F4A51142072B9FF8AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft
Manifest number: 08E2
Signing time: Tue 04 Nov 2025 06:00:33 +0000
Manifest this update: Tue 04 Nov 2025 06:00:33 +0000
Manifest next update: Wed 05 Nov 2025 06:00:33 +0000
Files and hashes: 1: 5v35qWKD8NjR5CYJwsa3ZCJmcaE.roa (hash: 8EnKiqZmxqaxCmZk9qwGpftXBFsMv4XGXaWZ2Oqridk=)
2: KCssuXcVO6rR3ZnuwUzgykbiIZ8.crl (hash: Nk0bBnRZM5fmiEyd/Z50Eh2jYY+YYgsK6o0HdL6vC1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:e9:93:31:75:64:f4:a5:11:42:07:2b:9f:f8:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=282b2cb977153baad1dd99eec14ce0ca46e2219f
Validity
Not Before: Nov 4 06:00:33 2025 GMT
Not After : Nov 5 06:00:33 2025 GMT
Subject: CN=4e5782b225c2c546dd38ecf536ffd9da34bbd5b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:17:14:f0:be:09:71:ee:3a:9a:43:91:24:bf:
fa:20:ca:ad:7f:f4:68:f1:8e:81:3d:89:53:94:08:
c5:e8:2d:e2:60:85:a9:b1:7d:01:f4:3c:a6:56:a2:
cf:e5:74:2f:52:96:7a:1d:de:dd:d7:24:61:0f:89:
de:50:e9:ec:9e:90:8c:a1:9c:42:7b:2c:62:e7:a6:
58:0e:cf:cf:41:71:87:4f:37:8d:d6:9d:a0:67:01:
42:f8:f5:4f:76:e3:14:c6:10:bd:f8:a6:49:c1:76:
86:54:b7:b2:75:c8:b6:c5:c5:0b:33:b4:23:e0:64:
9e:6d:c3:51:fe:65:59:89:70:46:7f:ce:4e:a8:bf:
d0:39:1b:c3:2e:69:e5:6e:84:ed:72:70:aa:af:25:
da:98:41:da:9c:4b:df:39:47:c4:1d:2f:be:8c:6c:
ef:a5:54:c7:5c:1c:d8:8f:80:55:c7:ad:a8:2e:4f:
02:a4:37:33:ba:f9:45:10:6f:86:9e:a6:0a:8e:e8:
31:f1:0d:90:0d:90:81:36:3e:a2:4a:2d:29:33:50:
68:dd:ec:75:4e:d4:33:49:2a:0c:74:a3:80:43:f2:
91:7b:00:a8:f7:d2:72:3d:38:cb:5a:df:f9:e5:57:
ed:f7:cb:86:a8:ab:4e:8e:24:4e:6e:28:e8:d2:26:
ba:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:57:82:B2:25:C2:C5:46:DD:38:EC:F5:36:FF:D9:DA:34:BB:D5:B4
X509v3 Authority Key Identifier:
keyid:28:2B:2C:B9:77:15:3B:AA:D1:DD:99:EE:C1:4C:E0:CA:46:E2:21:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:b9:a2:2a:74:72:90:6c:95:59:ca:e6:e8:47:4d:1d:7a:71:
31:c2:3c:16:8b:8c:62:64:bd:19:dd:46:32:a1:d7:ee:22:c2:
4e:95:82:2f:e2:70:3b:49:0a:8c:36:05:80:a8:6b:b7:70:27:
2e:e7:77:c5:23:1c:40:89:52:d4:e9:4f:2e:76:91:7a:df:6d:
ef:7e:0c:2e:16:39:15:66:17:3c:9e:24:c1:a9:e9:14:b5:23:
71:39:1e:20:59:de:0d:ef:08:ed:6c:01:e8:7b:02:c8:f9:c4:
4f:fa:32:36:73:3d:73:26:dc:2a:01:5e:5f:38:c6:70:b2:3f:
d3:f6:1f:68:ad:5f:c6:6c:6a:8e:b3:d0:2e:ba:1e:75:c1:55:
0e:72:5c:f1:34:db:f3:b2:61:68:81:da:8c:11:71:84:7d:b9:
14:79:25:fb:6b:7a:7e:6e:54:9c:bd:a6:d3:b3:c8:f2:75:9f:
08:d6:45:f9:d2:ab:fd:76:5b:4e:2b:ff:f7:4d:fe:eb:23:7d:
7a:97:b5:a8:f9:17:73:e1:26:06:49:0b:4e:ec:08:9c:73:29:
32:4a:9d:97:61:f1:aa:8b:16:35:72:7d:91:98:4c:d2:69:77:
e5:51:e4:37:bb:07:1e:58:e9:e9:8b:32:99:03:7a:89:44:f8:
49:92:eb:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNc+mTMXVk9KURQgcrn/iqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4MmIyY2I5NzcxNTNiYWFkMWRkOTllZWMxNGNlMGNhNDZl
MjIxOWYwHhcNMjUxMTA0MDYwMDMzWhcNMjUxMTA1MDYwMDMzWjAzMTEwLwYDVQQD
Eyg0ZTU3ODJiMjI1YzJjNTQ2ZGQzOGVjZjUzNmZmZDlkYTM0YmJkNWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRcU8L4Jce46mkORJL/6IMqtf/Ro
8Y6BPYlTlAjF6C3iYIWpsX0B9DymVqLP5XQvUpZ6Hd7d1yRhD4neUOnsnpCMoZxC
eyxi56ZYDs/PQXGHTzeN1p2gZwFC+PVPduMUxhC9+KZJwXaGVLeydci2xcULM7Qj
4GSebcNR/mVZiXBGf85OqL/QORvDLmnlboTtcnCqryXamEHanEvfOUfEHS++jGzv
pVTHXBzYj4BVx62oLk8CpDczuvlFEG+GnqYKjugx8Q2QDZCBNj6iSi0pM1Bo3ex1
TtQzSSoMdKOAQ/KRewCo99JyPTjLWt/55Vft98uGqKtOjiRObijo0ia6SwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE5XgrIlwsVG3Tjs9Tb/2do0u9W0MB8GA1UdIwQY
MBaAFCgrLLl3FTuq0d2Z7sFM4MpG4iGfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0Nzc3VYY1ZPNnJSM1pudXdVemd5a2JpSVo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8wYjBiMzMtOThhMS00ODE4LWFkMTgt
OTVmMjdkM2U4YWJiLzEvS0Nzc3VYY1ZPNnJSM1pudXdVemd5a2JpSVo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy8wYjBiMzMtOThhMS00ODE4LWFkMTgtOTVmMjdkM2U4YWJi
LzEvS0Nzc3VYY1ZPNnJSM1pudXdVemd5a2JpSVo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAprmiKnRy
kGyVWcrm6EdNHXpxMcI8FouMYmS9Gd1GMqHX7iLCTpWCL+JwO0kKjDYFgKhrt3An
Lud3xSMcQIlS1OlPLnaRet9t734MLhY5FWYXPJ4kwanpFLUjcTkeIFneDe8I7WwB
6HsCyPnET/oyNnM9cybcKgFeXzjGcLI/0/YfaK1fxmxqjrPQLroedcFVDnJc8TTb
87JhaIHajBFxhH25FHkl+2t6fm5UnL2m07PI8nWfCNZF+dKr/XZbTiv/903+6yN9
epe1qPkXc+EmBkkLTuwInHMpMkqdl2HxqosWNXJ9kZhM0ml35VHkN7sHHljp6Ysy
mQN6iUT4SZLrbA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:55:24 2025 by rpki-client