Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft
File: KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft (raw, json)
Hash identifier: +w6entqnlom8+7P55ufx1l0pJyY9g5znSbi1XZqIf8o=
Subject key identifier: A3:C3:49:CF:B8:B9:77:FE:A5:D1:46:9B:3F:AC:17:52:9C:FF:CA:63
Authority key identifier: 28:2B:2C:B9:77:15:3B:AA:D1:DD:99:EE:C1:4C:E0:CA:46:E2:21:9F
Certificate issuer: /CN=282b2cb977153baad1dd99eec14ce0ca46e2219f
Certificate serial: 01975E39077D1E4FFF6B4DF161719BFEEB40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft
Manifest number: 075D
Signing time: Wed 11 Jun 2025 09:01:25 +0000
Manifest this update: Wed 11 Jun 2025 09:01:25 +0000
Manifest next update: Thu 12 Jun 2025 09:01:25 +0000
Files and hashes: 1: 5v35qWKD8NjR5CYJwsa3ZCJmcaE.roa (hash: 8EnKiqZmxqaxCmZk9qwGpftXBFsMv4XGXaWZ2Oqridk=)
2: KCssuXcVO6rR3ZnuwUzgykbiIZ8.crl (hash: UrVkd4oXmOpJCiye/JL/NTeVN+cB/1xUtluoe1wINMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:39:07:7d:1e:4f:ff:6b:4d:f1:61:71:9b:fe:eb:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=282b2cb977153baad1dd99eec14ce0ca46e2219f
Validity
Not Before: Jun 11 09:01:25 2025 GMT
Not After : Jun 12 09:01:25 2025 GMT
Subject: CN=a3c349cfb8b977fea5d1469b3fac17529cffca63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8b:e0:7e:3b:b9:7b:56:25:cb:90:fb:45:7a:
d7:66:f2:2e:8a:e9:49:56:10:fa:01:69:d1:4a:dc:
0b:0e:17:e5:32:ff:8f:a0:90:1d:4d:15:06:01:50:
0f:e7:5f:4a:41:62:27:6f:a6:bd:ac:d3:92:63:f3:
8a:b7:67:80:4c:dc:3e:a8:5d:61:9f:0e:9a:7c:ad:
75:e7:9a:e8:60:aa:fa:9e:76:92:e5:62:44:e4:05:
5d:79:54:6f:31:5f:57:e8:f6:18:6f:a0:b9:8f:bc:
99:ac:af:3e:7b:23:cc:23:b9:db:af:77:6f:d7:a3:
49:d6:15:30:c5:ae:bd:11:e4:d1:89:7f:bc:bd:0e:
b0:19:1d:9b:90:6a:11:e3:6f:79:f7:b0:9f:95:07:
f8:46:e0:9b:d7:df:ec:d8:6d:b9:22:f9:29:8b:9c:
27:4d:53:48:7b:67:8a:e6:04:8c:19:d2:98:39:ac:
f1:de:ef:bd:d9:aa:b1:56:06:52:9b:65:cc:34:ed:
8d:11:d4:54:47:73:5b:1c:eb:0f:3b:dd:dd:6a:8a:
43:60:cb:f0:7a:4c:a9:4b:7c:a0:a8:8d:6b:fd:dd:
be:95:08:54:a7:91:e6:6f:7d:11:65:84:75:a0:01:
ae:87:f3:be:96:02:c2:be:38:6e:24:c6:d6:e8:25:
21:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:C3:49:CF:B8:B9:77:FE:A5:D1:46:9B:3F:AC:17:52:9C:FF:CA:63
X509v3 Authority Key Identifier:
keyid:28:2B:2C:B9:77:15:3B:AA:D1:DD:99:EE:C1:4C:E0:CA:46:E2:21:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:4a:ad:ee:bc:26:60:ae:3d:89:18:c0:e4:23:f4:4d:76:15:
9c:2e:e0:54:dd:9b:75:9d:5f:be:a7:ef:72:47:96:c2:36:6b:
17:48:5f:32:0f:9f:80:71:36:25:05:97:b1:8e:a1:12:0a:ea:
bf:ee:7e:41:80:37:17:3c:2a:ac:de:4b:33:5c:c3:92:43:f4:
a3:56:34:45:59:ce:26:c8:7f:29:d1:36:b9:34:50:d2:dd:25:
e9:c4:77:3e:0f:9c:17:4c:7a:a3:16:c2:c9:f5:42:93:fc:03:
a9:b1:1f:54:06:da:0f:17:4e:ec:12:b7:c7:30:b7:7e:13:f0:
e4:a7:c0:df:30:dd:15:66:86:ed:43:56:79:f5:15:c6:e2:72:
9a:d2:db:7a:b6:50:72:0b:bf:9a:87:4a:72:32:3c:ff:f0:fe:
f2:32:d0:f0:16:88:d0:05:f5:f9:a4:4a:cb:98:ea:ec:6d:c7:
44:03:e7:59:ed:18:50:22:1f:0a:fe:fa:34:52:5f:e9:3d:b9:
90:27:f0:69:aa:19:4c:4d:6c:cb:e3:8f:97:4e:b7:07:6e:eb:
18:f5:8b:73:ea:12:3e:9e:15:8e:ed:af:57:05:06:4c:74:83:
3e:ef:b8:88:60:fd:84:1a:36:5c:17:81:89:69:a7:8f:0e:33:
e6:09:8e:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdeOQd9Hk//a03xYXGb/utAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4MmIyY2I5NzcxNTNiYWFkMWRkOTllZWMxNGNlMGNhNDZl
MjIxOWYwHhcNMjUwNjExMDkwMTI1WhcNMjUwNjEyMDkwMTI1WjAzMTEwLwYDVQQD
EyhhM2MzNDljZmI4Yjk3N2ZlYTVkMTQ2OWIzZmFjMTc1MjljZmZjYTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYvgfju5e1Yly5D7RXrXZvIuiulJ
VhD6AWnRStwLDhflMv+PoJAdTRUGAVAP519KQWInb6a9rNOSY/OKt2eATNw+qF1h
nw6afK1155roYKr6nnaS5WJE5AVdeVRvMV9X6PYYb6C5j7yZrK8+eyPMI7nbr3dv
16NJ1hUwxa69EeTRiX+8vQ6wGR2bkGoR429597CflQf4RuCb19/s2G25Ivkpi5wn
TVNIe2eK5gSMGdKYOazx3u+92aqxVgZSm2XMNO2NEdRUR3NbHOsPO93daopDYMvw
ekypS3ygqI1r/d2+lQhUp5Hmb30RZYR1oAGuh/O+lgLCvjhuJMbW6CUhBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKPDSc+4uXf+pdFGmz+sF1Kc/8pjMB8GA1UdIwQY
MBaAFCgrLLl3FTuq0d2Z7sFM4MpG4iGfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0Nzc3VYY1ZPNnJSM1pudXdVemd5a2JpSVo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8wYjBiMzMtOThhMS00ODE4LWFkMTgt
OTVmMjdkM2U4YWJiLzEvS0Nzc3VYY1ZPNnJSM1pudXdVemd5a2JpSVo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy8wYjBiMzMtOThhMS00ODE4LWFkMTgtOTVmMjdkM2U4YWJi
LzEvS0Nzc3VYY1ZPNnJSM1pudXdVemd5a2JpSVo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM0qt7rwm
YK49iRjA5CP0TXYVnC7gVN2bdZ1fvqfvckeWwjZrF0hfMg+fgHE2JQWXsY6hEgrq
v+5+QYA3FzwqrN5LM1zDkkP0o1Y0RVnOJsh/KdE2uTRQ0t0l6cR3Pg+cF0x6oxbC
yfVCk/wDqbEfVAbaDxdO7BK3xzC3fhPw5KfA3zDdFWaG7UNWefUVxuJymtLberZQ
cgu/modKcjI8//D+8jLQ8BaI0AX1+aRKy5jq7G3HRAPnWe0YUCIfCv76NFJf6T25
kCfwaaoZTE1sy+OPl063B27rGPWLc+oSPp4Vju2vVwUGTHSDPu+4iGD9hBo2XBeB
iWmnjw4z5gmOvg==
-----END CERTIFICATE-----
Generated at Wed Jun 11 11:58:22 2025 by rpki-client