Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft
File: KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft (raw, json)
Hash identifier: BRN29pWudAoOSHMxHjmejHuSGBrFfdwl1E6mIZ8BUUI=
Subject key identifier: 9B:04:36:42:CF:29:08:67:CF:D1:09:6C:10:FF:18:A2:2D:BB:8B:7F
Authority key identifier: 28:2B:2C:B9:77:15:3B:AA:D1:DD:99:EE:C1:4C:E0:CA:46:E2:21:9F
Certificate issuer: /CN=282b2cb977153baad1dd99eec14ce0ca46e2219f
Certificate serial: 019A4B85F9466EEC04990059EC230E437C35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft
Manifest number: 08E1
Signing time: Mon 03 Nov 2025 21:01:02 +0000
Manifest this update: Mon 03 Nov 2025 21:01:02 +0000
Manifest next update: Tue 04 Nov 2025 21:01:02 +0000
Files and hashes: 1: 5v35qWKD8NjR5CYJwsa3ZCJmcaE.roa (hash: 8EnKiqZmxqaxCmZk9qwGpftXBFsMv4XGXaWZ2Oqridk=)
2: KCssuXcVO6rR3ZnuwUzgykbiIZ8.crl (hash: EHPzGzdpqRLCaYzNtTfaU9l01f7LiTjbbguEYe0FPdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 20:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4b:85:f9:46:6e:ec:04:99:00:59:ec:23:0e:43:7c:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=282b2cb977153baad1dd99eec14ce0ca46e2219f
Validity
Not Before: Nov 3 21:01:02 2025 GMT
Not After : Nov 4 21:01:02 2025 GMT
Subject: CN=9b043642cf290867cfd1096c10ff18a22dbb8b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:86:05:d4:17:75:7b:98:5d:1f:e3:ec:de:f6:
2b:f2:01:87:e1:e6:30:0a:1c:db:d5:f6:ae:e4:be:
0b:9e:f2:41:c7:be:9c:ab:40:e3:9b:20:a9:d2:6a:
4d:af:65:a2:49:90:ad:bf:83:b9:4a:5f:10:6f:71:
01:a1:ad:28:21:c9:8d:34:86:2c:8e:e4:0d:95:22:
80:ae:fd:9c:a2:ed:d1:32:b8:04:36:62:00:1a:c2:
be:b4:25:60:68:76:c3:17:63:f6:c0:04:0d:2f:0e:
5c:79:5d:71:95:5c:e4:71:c1:85:88:70:04:f9:a5:
d0:d8:73:1e:d0:46:c5:a1:27:a2:b4:19:4d:52:85:
a7:ad:c5:f8:8c:cb:ff:15:34:4f:93:90:7a:71:0e:
a6:0c:ca:6c:4e:c5:22:54:bb:77:19:11:19:5d:20:
02:7b:d8:41:6d:81:29:de:c3:bc:4e:a8:8c:b6:56:
d1:af:e8:cd:ce:c7:59:a1:c4:b9:f7:ea:54:08:13:
f1:57:12:47:1a:5d:01:ed:b2:13:1d:89:42:6c:65:
c4:96:b3:22:17:7b:8d:51:a2:0f:63:62:b1:f5:93:
1a:0a:18:a5:d9:17:68:e5:6c:a5:43:94:ca:fa:15:
db:f8:6e:2a:61:27:66:e0:6c:b3:aa:3d:04:66:6a:
16:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:04:36:42:CF:29:08:67:CF:D1:09:6C:10:FF:18:A2:2D:BB:8B:7F
X509v3 Authority Key Identifier:
keyid:28:2B:2C:B9:77:15:3B:AA:D1:DD:99:EE:C1:4C:E0:CA:46:E2:21:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:ed:80:fc:c8:e0:57:e8:96:04:50:61:d2:7a:d6:05:a0:f7:
8d:a4:93:fd:24:29:b7:e8:9d:6a:d2:3c:f4:c7:f3:df:ad:6a:
27:32:e9:a6:0f:c7:23:65:26:f6:47:12:a1:f3:cc:1a:68:9f:
85:24:e2:15:db:34:6f:9d:1d:d0:fb:52:c0:f6:b0:02:e5:a6:
4b:f2:30:d8:d0:74:14:49:b4:28:ae:26:2d:82:97:29:51:22:
6b:aa:cc:ab:6b:26:c7:f2:3a:58:5d:85:e5:4d:d1:08:72:c3:
85:ec:96:ba:fd:f2:86:6c:4b:70:6b:08:fe:94:22:e1:e1:89:
cf:35:57:d7:da:3e:3a:e1:ee:a7:91:af:4f:52:f2:e5:58:e7:
89:0c:20:40:27:be:30:41:95:31:5c:93:1d:ac:66:56:4d:8d:
ad:f2:05:f5:46:8f:26:05:28:b3:42:63:8f:39:4f:8a:9f:e6:
ce:ff:7f:cf:d3:be:10:d0:7c:8b:27:a2:96:2a:1f:b1:09:05:
22:93:88:00:35:b2:a3:3b:f9:2b:09:72:9a:46:db:dc:16:ba:
c8:ba:5f:db:1a:1b:5a:86:be:03:d2:f3:d2:a4:fb:4c:21:50:
6d:fc:65:af:b5:66:ea:34:ba:bb:87:2d:d3:fa:06:fd:08:40:
b8:34:49:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 04:04:25 2025 by rpki-client