Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft
File: KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft (raw, json)
Hash identifier: eLs46N28sldT6xfy7KXxrWK30ZDSKC0Cr8BtN+76F2U=
Subject key identifier: F2:1E:4B:B3:50:5A:80:0E:6F:FE:0E:39:30:77:14:94:60:16:46:11
Authority key identifier: 28:2B:2C:B9:77:15:3B:AA:D1:DD:99:EE:C1:4C:E0:CA:46:E2:21:9F
Certificate issuer: /CN=282b2cb977153baad1dd99eec14ce0ca46e2219f
Certificate serial: 0199FC58E85869DBD3B849886FD36D5181C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft
Manifest number: 08B8
Signing time: Sun 19 Oct 2025 12:01:49 +0000
Manifest this update: Sun 19 Oct 2025 12:01:49 +0000
Manifest next update: Mon 20 Oct 2025 12:01:49 +0000
Files and hashes: 1: 5v35qWKD8NjR5CYJwsa3ZCJmcaE.roa (hash: 8EnKiqZmxqaxCmZk9qwGpftXBFsMv4XGXaWZ2Oqridk=)
2: KCssuXcVO6rR3ZnuwUzgykbiIZ8.crl (hash: zLZRXPDMfM2iyakbVoKA7BDf4C5FJ01p7iyiUSkseGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:e8:58:69:db:d3:b8:49:88:6f:d3:6d:51:81:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=282b2cb977153baad1dd99eec14ce0ca46e2219f
Validity
Not Before: Oct 19 12:01:49 2025 GMT
Not After : Oct 20 12:01:49 2025 GMT
Subject: CN=f21e4bb3505a800e6ffe0e393077149460164611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c1:1c:9b:5e:48:27:45:50:1b:e1:1e:a9:7e:
19:90:f5:ce:75:ce:22:35:27:05:7d:12:b3:32:e9:
02:e8:aa:91:a6:44:78:58:d4:6f:94:f7:32:7d:27:
89:67:49:83:fa:5f:7a:9b:aa:03:21:c1:e7:14:3d:
6c:b9:4b:f7:a4:3b:a9:52:d9:b3:18:f1:78:d2:a4:
bd:dc:82:fc:f1:f7:46:2b:8a:78:22:df:fc:d1:a7:
c3:ba:e7:a7:fa:89:a4:3e:df:d0:f5:b6:89:09:e0:
81:ae:68:13:03:2c:e7:20:da:67:7a:d9:fb:11:65:
cd:d8:bc:13:c9:57:0d:f8:78:7f:40:15:5a:9b:c1:
09:7c:a4:92:1d:2f:0c:5a:c2:72:ad:78:af:5a:88:
a2:e3:aa:a2:75:fa:b3:30:8a:17:20:d5:90:ec:f7:
d8:87:08:28:98:c0:12:a3:2a:d1:ce:55:d0:48:f1:
16:e8:41:70:c1:8a:74:1b:88:c2:23:18:d8:49:96:
21:0f:ce:eb:59:26:1f:c7:12:a0:9d:ec:dd:bd:eb:
a0:74:81:9e:46:cc:5f:72:35:d2:2a:8b:b2:ef:dc:
3e:cf:21:a6:f7:d7:aa:8a:f6:32:89:3f:32:bd:f4:
32:c8:1d:e3:9c:76:aa:34:f4:db:ea:9f:df:ed:b1:
5a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:1E:4B:B3:50:5A:80:0E:6F:FE:0E:39:30:77:14:94:60:16:46:11
X509v3 Authority Key Identifier:
keyid:28:2B:2C:B9:77:15:3B:AA:D1:DD:99:EE:C1:4C:E0:CA:46:E2:21:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:ba:20:0b:0f:b7:47:e2:e7:9a:19:ff:db:36:1c:e9:b3:70:
9f:77:95:25:ff:05:bb:75:cb:51:76:ed:b9:8b:f9:6b:16:8d:
f6:dd:8f:5f:9a:05:93:ed:3f:9c:d8:1c:14:9d:7e:2f:9b:ab:
cd:06:63:7a:f6:40:2a:7e:86:3c:12:7e:e5:e7:9d:bc:86:31:
23:10:10:60:f6:a9:0e:94:4d:ac:25:65:29:20:a4:a8:71:b8:
4e:ed:1d:33:ca:d3:45:e8:44:79:7f:47:0d:7a:58:2c:4a:f9:
f5:23:db:39:3c:f3:c8:04:d7:58:d1:e6:f3:37:cf:83:12:bc:
3e:1d:89:ef:08:d0:fe:40:ab:bd:fe:85:24:96:dd:bb:14:cf:
a9:25:bb:68:83:62:aa:de:5c:4d:33:79:37:1d:3d:31:bb:10:
44:00:5e:85:18:ed:19:8f:a3:4f:b8:34:66:4f:01:cf:f0:29:
3e:3e:9b:08:27:74:56:3b:b1:11:6d:03:a4:8d:14:52:1c:06:
96:0e:d5:f1:8b:d2:a7:45:be:c8:b9:18:81:07:ec:bd:6c:73:
a8:bb:35:41:c7:03:71:06:68:e8:ce:69:3f:6f:8a:e2:22:b1:
37:f0:99:fa:36:4d:2d:92:79:7e:5a:a4:67:7c:5f:f2:3a:e9:
24:d2:7c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:07:44 2025 by rpki-client