Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft
File: 8yvpggYKQ3NNCtEmrUbaLzlcne8.mft (raw, json)
Hash identifier: GqhklJGQO88NOzdJNPCz7CtC1+J2rmSbJ55p/s29Tmc=
Subject key identifier: E8:08:67:F1:5B:ED:4C:79:41:6B:5C:08:B8:71:73:47:27:8F:60:C7
Authority key identifier: F3:2B:E9:82:06:0A:43:73:4D:0A:D1:26:AD:46:DA:2F:39:5C:9D:EF
Certificate issuer: /CN=f32be982060a43734d0ad126ad46da2f395c9def
Certificate serial: 0199C4C56BD524F0D5A1E00BAA587C3D8791
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yvpggYKQ3NNCtEmrUbaLzlcne8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft
Manifest number: 16CC
Signing time: Wed 08 Oct 2025 17:01:36 +0000
Manifest this update: Wed 08 Oct 2025 17:01:36 +0000
Manifest next update: Thu 09 Oct 2025 17:01:36 +0000
Files and hashes: 1: 8yvpggYKQ3NNCtEmrUbaLzlcne8.crl (hash: uhwulfbV4rjwCG0VuHtkYRwC3CALqnvtjDDoA/Nv2ys=)
2: _ez--C0KRSwSRmH4lyGu5zUk1HU.roa (hash: KFrEJZmjOcmfSBpY7GDcoqxz0mSObldiNHL67FlKf8w=)
3: bHl4gP55LgKhhE_L1xho4xppPEo.roa (hash: rqcbN4+Al2DH9m3ppJi1E488vxtH8t3M86sJsdVuXgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yvpggYKQ3NNCtEmrUbaLzlcne8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:c5:6b:d5:24:f0:d5:a1:e0:0b:aa:58:7c:3d:87:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f32be982060a43734d0ad126ad46da2f395c9def
Validity
Not Before: Oct 8 17:01:36 2025 GMT
Not After : Oct 9 17:01:36 2025 GMT
Subject: CN=e80867f15bed4c79416b5c08b8717347278f60c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:01:c5:3a:9c:ca:89:65:85:a6:16:cd:8b:e9:
77:bc:7e:01:42:6e:5f:09:bc:59:7c:7f:a6:1a:f5:
8c:4e:dd:09:ef:47:ad:75:85:a2:93:18:98:ef:37:
a7:44:21:4c:82:ec:b0:81:f5:65:52:d8:d6:75:bb:
dd:0a:66:ad:3d:4f:9f:db:50:09:86:8b:43:13:18:
cc:94:20:f1:51:bc:15:01:2d:d7:5b:de:5e:f7:8c:
5f:ed:ae:51:29:8e:f3:8f:a0:b4:b6:a0:05:cc:3b:
9b:f8:4f:05:0a:93:92:43:1d:79:22:5c:7d:e4:1f:
d7:45:6a:c1:d9:61:32:1b:98:35:a4:81:89:d6:28:
2b:04:1a:aa:0f:8a:a9:4d:a8:0b:e8:b9:23:2a:06:
45:10:20:46:ad:c9:28:99:29:05:db:50:d6:f7:13:
20:c0:46:f7:55:37:c7:84:cd:8d:19:93:23:28:c0:
f8:51:b7:d1:59:c4:7b:c8:9c:0d:71:35:06:ab:5c:
f0:db:2f:be:c0:71:42:a6:65:cd:bc:1c:18:af:dd:
56:f7:6a:20:34:f9:4c:ac:46:71:85:90:8a:24:74:
a9:af:87:5e:f0:59:af:d4:19:e3:7a:c5:f8:6d:b8:
fc:af:73:34:dc:f7:75:11:ac:e7:8b:b0:04:b7:d3:
bd:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:08:67:F1:5B:ED:4C:79:41:6B:5C:08:B8:71:73:47:27:8F:60:C7
X509v3 Authority Key Identifier:
keyid:F3:2B:E9:82:06:0A:43:73:4D:0A:D1:26:AD:46:DA:2F:39:5C:9D:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yvpggYKQ3NNCtEmrUbaLzlcne8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:85:77:25:5c:9b:50:95:5d:ae:ad:b9:9e:c9:10:2e:54:e5:
1e:d3:56:cd:39:73:58:89:d7:6f:b2:18:1e:42:be:db:b7:64:
0f:35:02:85:d0:28:b5:7d:f1:f5:4d:14:9d:38:f6:0a:70:cf:
d8:1a:07:e8:77:07:35:e7:96:99:d6:1a:f0:4c:52:60:2c:cc:
ed:d8:2e:52:a4:08:3b:21:7d:eb:3a:ae:0a:67:06:22:ed:33:
f5:66:36:85:ea:ea:4e:dd:8b:55:d1:8b:3b:1c:29:3b:4a:3c:
95:98:80:7d:b6:5a:da:17:a8:28:76:00:38:2b:2a:f7:86:b9:
2d:6e:5c:ff:e4:1b:0f:76:03:52:34:0f:83:f6:b1:63:50:88:
38:aa:f5:12:fd:e1:08:cb:f7:7c:57:d7:7d:5e:3b:b9:cc:24:
5c:9b:5b:72:7a:54:6d:c5:b4:5c:03:da:11:cb:40:f4:c7:a6:
4e:23:bb:f7:2b:d6:4f:64:c0:ea:70:48:b7:ac:54:02:8d:90:
72:82:cb:ce:58:7b:07:0d:04:63:57:a8:5b:60:3d:f4:ad:6b:
7d:15:d1:79:83:51:09:a3:54:e0:7f:fd:89:ce:f7:20:a0:38:
35:b6:74:a4:37:10:ce:1f:48:96:6a:8a:65:78:b4:f8:20:53:
23:b6:75:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:27:13 2025 by rpki-client