Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/KC5DLtiL7BrRRURJYygU1DmWseA.mft
File: KC5DLtiL7BrRRURJYygU1DmWseA.mft (raw, json)
Hash identifier: yq8eoBklNm8YcTZ8qwCXSxh61aIeegxa5tiofCUeCdU=
Subject key identifier: BA:A2:F2:AA:75:54:3B:2D:32:15:8C:DB:AF:B0:F9:FA:2B:D0:F8:F3
Authority key identifier: 28:2E:43:2E:D8:8B:EC:1A:D1:45:44:49:63:28:14:D4:39:96:B1:E0
Certificate issuer: /CN=282e432ed88bec1ad1454449632814d43996b1e0
Certificate serial: 019A73015C6787BBB65F0701F785DDB52E3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KC5DLtiL7BrRRURJYygU1DmWseA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/KC5DLtiL7BrRRURJYygU1DmWseA.mft
Manifest number: 0D77
Signing time: Tue 11 Nov 2025 13:01:00 +0000
Manifest this update: Tue 11 Nov 2025 13:01:00 +0000
Manifest next update: Wed 12 Nov 2025 13:01:00 +0000
Files and hashes: 1: 9FnOB-XBygoB-RgBBWEsPTbvFTc.roa (hash: faK52ZKxn8mhj7q+v4KziaARqXuKQdUnupgh7Jp3IVk=)
2: KC5DLtiL7BrRRURJYygU1DmWseA.crl (hash: YJc3kpxxTjzyO76lBkSYeyWkc4BjKPBHX4CbVKbYif0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/KC5DLtiL7BrRRURJYygU1DmWseA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/KC5DLtiL7BrRRURJYygU1DmWseA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KC5DLtiL7BrRRURJYygU1DmWseA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:5c:67:87:bb:b6:5f:07:01:f7:85:dd:b5:2e:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=282e432ed88bec1ad1454449632814d43996b1e0
Validity
Not Before: Nov 11 13:01:00 2025 GMT
Not After : Nov 12 13:01:00 2025 GMT
Subject: CN=baa2f2aa75543b2d32158cdbafb0f9fa2bd0f8f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:93:81:13:22:3f:55:b1:36:1d:f9:09:cb:ca:
e0:d1:6d:ff:f5:e7:44:a2:7f:0c:42:bb:de:e4:11:
e1:2a:4a:11:f4:80:19:f1:a4:7d:ce:53:eb:f7:3c:
3d:b6:ed:b2:25:58:28:fa:7d:9f:67:02:f0:b9:aa:
e0:86:0b:9d:7a:51:f9:09:27:95:d5:4c:ea:bb:9c:
36:f8:62:30:db:4f:69:60:71:ac:43:30:12:d7:16:
00:fb:2e:34:d3:e7:82:09:2b:20:fd:05:24:99:ce:
7c:4a:0a:41:f0:e3:7a:0a:f6:80:6f:52:5a:91:95:
44:e1:d4:a9:8d:7b:e5:06:13:50:4e:af:67:2f:b7:
4c:14:ec:de:d6:13:fb:76:69:a7:2b:08:20:5b:3e:
d1:7d:fb:df:5f:0f:ae:1f:49:25:04:06:0f:df:9b:
e9:60:37:d9:86:39:e9:b6:91:c6:fe:05:6d:04:52:
60:17:be:e5:83:2e:38:6e:f0:44:28:41:93:6f:9e:
de:f4:15:95:2c:52:35:35:da:1a:15:4c:8e:18:c2:
c9:de:04:c5:a0:9c:6f:7e:bf:18:6d:34:3e:16:c9:
5b:4f:62:dc:8e:c3:81:32:42:1d:6d:1d:22:a3:26:
1b:45:be:46:92:81:26:93:84:b6:d1:8d:e4:de:19:
e8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A2:F2:AA:75:54:3B:2D:32:15:8C:DB:AF:B0:F9:FA:2B:D0:F8:F3
X509v3 Authority Key Identifier:
keyid:28:2E:43:2E:D8:8B:EC:1A:D1:45:44:49:63:28:14:D4:39:96:B1:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KC5DLtiL7BrRRURJYygU1DmWseA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/KC5DLtiL7BrRRURJYygU1DmWseA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/c60f08-b24b-4dc4-a27c-fc0aa72e8ead/1/KC5DLtiL7BrRRURJYygU1DmWseA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:13:57:e8:ec:f1:c8:05:9f:8d:61:2a:a3:ad:5d:19:1e:51:
fb:26:55:3c:5b:98:0d:f3:28:6c:84:87:f0:60:4c:0f:fa:bd:
aa:42:85:1b:e9:50:74:8f:70:95:fa:ae:c4:6d:42:6d:54:05:
24:f7:1f:0b:ab:b0:a9:d7:84:1e:92:d3:00:3d:da:6f:5e:97:
63:fb:7f:1c:76:76:ae:b7:63:df:30:96:5b:bd:d0:0c:5d:9e:
32:34:89:e2:65:31:bb:9f:b5:57:41:8a:29:ca:8f:31:3c:85:
f1:29:b5:00:76:cb:f7:84:40:2c:42:fb:38:c6:5c:bc:cc:cf:
59:10:47:38:20:7a:29:5a:a7:38:11:63:57:89:b8:92:9f:c1:
e7:de:70:45:ab:c8:e1:e2:e7:91:53:53:e0:03:46:6f:3a:07:
1d:8f:00:8e:fc:ab:ac:bd:3d:ee:66:91:81:44:c9:e3:b5:51:
a7:a2:43:0e:98:22:60:aa:3e:15:7c:bb:a0:be:cc:d8:5e:f3:
fc:7d:32:ad:d6:50:34:3c:64:c0:3a:1d:71:17:32:98:41:06:
00:17:fd:bc:ce:52:ee:a7:d7:ed:7d:37:bc:03:f5:00:67:50:
32:4d:0b:ae:92:29:8a:fa:9a:03:cb:c7:41:bc:10:53:d5:42:
2d:df:96:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzAVxnh7u2XwcB94XdtS47MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4MmU0MzJlZDg4YmVjMWFkMTQ1NDQ0OTYzMjgxNGQ0Mzk5
NmIxZTAwHhcNMjUxMTExMTMwMTAwWhcNMjUxMTEyMTMwMTAwWjAzMTEwLwYDVQQD
EyhiYWEyZjJhYTc1NTQzYjJkMzIxNThjZGJhZmIwZjlmYTJiZDBmOGYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05OBEyI/VbE2HfkJy8rg0W3/9edE
on8MQrve5BHhKkoR9IAZ8aR9zlPr9zw9tu2yJVgo+n2fZwLwuarghgudelH5CSeV
1Uzqu5w2+GIw209pYHGsQzAS1xYA+y400+eCCSsg/QUkmc58SgpB8ON6CvaAb1Ja
kZVE4dSpjXvlBhNQTq9nL7dMFOze1hP7dmmnKwggWz7RffvfXw+uH0klBAYP35vp
YDfZhjnptpHG/gVtBFJgF77lgy44bvBEKEGTb57e9BWVLFI1NdoaFUyOGMLJ3gTF
oJxvfr8YbTQ+FslbT2LcjsOBMkIdbR0ioyYbRb5GkoEmk4S20Y3k3hnoOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLqi8qp1VDstMhWM26+w+for0PjzMB8GA1UdIwQY
MBaAFCguQy7Yi+wa0UVESWMoFNQ5lrHgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0M1REx0aUw3QnJSUlVSSll5Z1UxRG1Xc2VBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9jNjBmMDgtYjI0Yi00ZGM0LWEyN2Mt
ZmMwYWE3MmU4ZWFkLzEvS0M1REx0aUw3QnJSUlVSSll5Z1UxRG1Xc2VBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9jNjBmMDgtYjI0Yi00ZGM0LWEyN2MtZmMwYWE3MmU4ZWFk
LzEvS0M1REx0aUw3QnJSUlVSSll5Z1UxRG1Xc2VBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjRNX6Ozx
yAWfjWEqo61dGR5R+yZVPFuYDfMobISH8GBMD/q9qkKFG+lQdI9wlfquxG1CbVQF
JPcfC6uwqdeEHpLTAD3ab16XY/t/HHZ2rrdj3zCWW73QDF2eMjSJ4mUxu5+1V0GK
KcqPMTyF8Sm1AHbL94RALEL7OMZcvMzPWRBHOCB6KVqnOBFjV4m4kp/B595wRavI
4eLnkVNT4ANGbzoHHY8AjvyrrL097maRgUTJ47VRp6JDDpgiYKo+FXy7oL7M2F7z
/H0yrdZQNDxkwDodcRcymEEGABf9vM5S7qfX7X03vAP1AGdQMk0LrpIpivqaA8vH
QbwQU9VCLd+WYw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:31:12 2025 by rpki-client