Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft
File: 8YUnDoMZPTJp983p2ggIse_1Uq4.mft (raw, json)
Hash identifier: egVlFaqAe+4jJfxuAJefrfebMwjk9gzWTPtLVmAOJhk=
Subject key identifier: 9A:E4:FB:6C:BF:5C:A4:0B:80:CC:C3:2B:5A:DD:2B:29:A4:BE:FA:B9
Authority key identifier: F1:85:27:0E:83:19:3D:32:69:F7:CD:E9:DA:08:08:B1:EF:F5:52:AE
Certificate issuer: /CN=f185270e83193d3269f7cde9da0808b1eff552ae
Certificate serial: 0198560EA6D99EAC79C0CEA5282F86FB1889
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8YUnDoMZPTJp983p2ggIse_1Uq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft
Manifest number: 0586
Signing time: Tue 29 Jul 2025 12:00:57 +0000
Manifest this update: Tue 29 Jul 2025 12:00:57 +0000
Manifest next update: Wed 30 Jul 2025 12:00:57 +0000
Files and hashes: 1: 8YUnDoMZPTJp983p2ggIse_1Uq4.crl (hash: OJBcTzwQ3wVslyTrpoL/0CiQDN4KU227dTJ/Y5tiuC4=)
2: yze2rcJ637RL8GZo48PGt4d8nY8.roa (hash: H8OFKVxMCjsZaNXr8DPY/I8jq0ZMaggP4bkjrXxk6OY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8YUnDoMZPTJp983p2ggIse_1Uq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 12:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:56:0e:a6:d9:9e:ac:79:c0:ce:a5:28:2f:86:fb:18:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f185270e83193d3269f7cde9da0808b1eff552ae
Validity
Not Before: Jul 29 12:00:57 2025 GMT
Not After : Jul 30 12:00:57 2025 GMT
Subject: CN=9ae4fb6cbf5ca40b80ccc32b5add2b29a4befab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:00:d7:c4:87:0d:a6:3a:56:c2:78:c3:87:d7:
99:14:67:87:be:e7:8d:dc:67:a6:5e:cf:9d:80:41:
14:f5:36:16:b3:7a:9f:d0:57:40:16:8e:e7:fe:53:
4e:a9:4c:15:40:be:bd:21:73:c4:88:53:ad:ad:76:
99:ff:9e:3e:e3:08:71:8b:eb:21:9a:e2:0b:e0:f6:
b0:04:7d:87:5e:46:0b:3e:8c:81:b1:d4:e8:13:de:
37:7c:d6:a6:47:ff:49:1c:e5:1c:e9:e6:cb:e0:77:
be:2a:fa:4b:06:e1:61:1d:e7:9a:0f:d1:82:9a:a0:
bb:bc:e3:bc:a4:4f:f1:95:22:9d:70:76:fe:53:58:
5c:e1:06:a0:f1:42:39:25:c4:ee:c9:b3:0e:19:15:
a1:1c:b4:2a:6e:60:86:8e:9a:9a:a3:fc:c8:00:e4:
3a:81:0f:f9:17:59:82:7f:bb:b3:c2:81:5c:60:5f:
cd:50:08:2a:34:6d:ab:77:79:cf:c1:79:33:9e:67:
43:f0:a1:e5:1e:ba:55:33:f5:10:10:dc:ec:a2:2a:
75:19:8a:28:fd:f0:40:ce:8d:0d:d0:fb:e3:3e:c7:
76:13:ab:39:87:10:75:4e:0f:72:c4:32:48:e6:15:
12:93:77:68:c0:ac:a2:b4:b7:73:41:30:81:1a:87:
12:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E4:FB:6C:BF:5C:A4:0B:80:CC:C3:2B:5A:DD:2B:29:A4:BE:FA:B9
X509v3 Authority Key Identifier:
keyid:F1:85:27:0E:83:19:3D:32:69:F7:CD:E9:DA:08:08:B1:EF:F5:52:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8YUnDoMZPTJp983p2ggIse_1Uq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:5c:45:ac:b0:6a:c7:1f:ff:5b:33:35:a6:28:c0:c2:cc:97:
ae:7f:03:a0:19:b0:04:97:28:e7:93:83:21:61:ba:32:ec:c5:
c5:d1:75:52:3e:09:eb:7c:4f:c9:0a:95:22:2d:69:c5:a5:d7:
7c:d8:01:6e:3c:af:e5:b0:3f:31:e6:59:84:28:50:61:ac:a7:
4d:29:31:68:39:47:04:32:79:c6:2f:f4:ee:0b:ec:6e:cf:51:
c3:37:2d:11:6b:a0:bc:8e:91:3e:c3:3d:90:b2:ec:7c:7d:3c:
21:6e:20:8f:45:89:98:91:fd:c2:4b:36:6f:ee:69:d0:68:a3:
de:f6:18:bb:5e:5c:8d:2a:45:71:f5:f2:f8:49:2c:e1:bb:77:
0c:3d:a7:37:b7:db:9d:32:24:73:d8:7b:08:5d:a4:06:42:d0:
3d:6c:4a:0b:63:bf:0b:ba:d8:9c:e6:eb:46:84:cd:b1:e7:01:
e7:fe:19:e9:ec:51:b9:83:11:57:51:68:4d:a2:d5:25:6f:71:
71:0e:f5:f5:30:60:49:7f:95:27:dc:c4:f6:09:3f:e8:2d:34:
9b:14:25:f0:3c:66:bc:ad:14:cd:bb:b1:c9:6a:cb:70:35:55:
10:30:0c:81:eb:e6:28:42:88:16:9c:04:cd:d8:73:c9:49:48:
58:a6:7d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 18:58:43 2025 by rpki-client