Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/a3d3bb-aa98-4ced-80a6-2673707fd8e5/1/y8Zg8DJNjLG2E3ednoMON9UuqrM.mft
File: y8Zg8DJNjLG2E3ednoMON9UuqrM.mft (raw, json)
Hash identifier: SBvP20fygBQ7668h8yoRnasRZS8wOTi+hg/tRhQ8GyU=
Subject key identifier: 3D:C7:89:05:C5:6D:65:82:47:F3:75:D9:20:AB:FE:1E:82:A4:D9:43
Authority key identifier: CB:C6:60:F0:32:4D:8C:B1:B6:13:77:9D:9E:83:0E:37:D5:2E:AA:B3
Certificate issuer: /CN=cbc660f0324d8cb1b613779d9e830e37d52eaab3
Certificate serial: 019A26672166A3D48CFA5A354CACF9CFBBDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y8Zg8DJNjLG2E3ednoMON9UuqrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/a3d3bb-aa98-4ced-80a6-2673707fd8e5/1/y8Zg8DJNjLG2E3ednoMON9UuqrM.mft
Manifest number: 055A
Signing time: Mon 27 Oct 2025 16:01:24 +0000
Manifest this update: Mon 27 Oct 2025 16:01:24 +0000
Manifest next update: Tue 28 Oct 2025 16:01:24 +0000
Files and hashes: 1: y8Zg8DJNjLG2E3ednoMON9UuqrM.crl (hash: ZgW0WyE1eeqQuwSgCidVXPyMDhvz482I2IbL7h18ZlQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/a3d3bb-aa98-4ced-80a6-2673707fd8e5/1/y8Zg8DJNjLG2E3ednoMON9UuqrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/a3d3bb-aa98-4ced-80a6-2673707fd8e5/1/y8Zg8DJNjLG2E3ednoMON9UuqrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/y8Zg8DJNjLG2E3ednoMON9UuqrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 16:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:67:21:66:a3:d4:8c:fa:5a:35:4c:ac:f9:cf:bb:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbc660f0324d8cb1b613779d9e830e37d52eaab3
Validity
Not Before: Oct 27 16:01:24 2025 GMT
Not After : Oct 28 16:01:24 2025 GMT
Subject: CN=3dc78905c56d658247f375d920abfe1e82a4d943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:12:ee:ba:56:0d:bd:8e:5b:82:8c:c5:a9:75:
c9:cf:0d:04:5b:9d:bc:2a:a5:97:42:b1:e4:9f:c2:
71:6e:69:92:68:6f:fa:67:ef:06:12:c8:50:ba:cd:
42:08:da:00:70:f2:17:2a:69:a8:52:04:03:3b:e8:
f2:a5:86:84:45:13:f8:83:24:35:b8:81:2f:b8:e3:
35:e3:c4:f5:55:21:e3:01:d6:0f:21:fb:8f:87:1f:
e0:f4:d6:2b:13:7e:c5:21:d9:6e:ee:e5:e8:95:9c:
94:f4:d3:04:71:ee:1b:58:6a:67:7d:2f:58:dd:62:
f2:5e:9d:62:8d:4d:bf:d6:1a:29:94:a6:d0:15:f9:
0b:40:8f:6f:60:29:6d:d6:6e:6e:c4:7f:6c:4a:62:
6d:4b:21:1a:ae:50:f7:91:6b:48:47:40:51:eb:1f:
ab:27:cd:08:91:5f:40:a5:6d:18:3a:6d:74:ba:ac:
e1:56:65:13:29:12:ff:d6:44:c3:3d:8d:d0:93:c7:
3d:07:51:f7:75:99:02:4c:e7:f5:c0:dd:40:25:c0:
74:59:ce:6b:e1:d6:41:2d:53:d2:08:21:58:87:04:
7d:c9:4c:9c:17:1a:ad:1c:58:3f:60:8f:bb:ae:4c:
49:f9:ac:1a:0c:69:18:e5:7e:69:53:60:49:73:16:
70:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C7:89:05:C5:6D:65:82:47:F3:75:D9:20:AB:FE:1E:82:A4:D9:43
X509v3 Authority Key Identifier:
keyid:CB:C6:60:F0:32:4D:8C:B1:B6:13:77:9D:9E:83:0E:37:D5:2E:AA:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y8Zg8DJNjLG2E3ednoMON9UuqrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a3d3bb-aa98-4ced-80a6-2673707fd8e5/1/y8Zg8DJNjLG2E3ednoMON9UuqrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a3d3bb-aa98-4ced-80a6-2673707fd8e5/1/y8Zg8DJNjLG2E3ednoMON9UuqrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:d6:7a:21:d3:bb:62:32:b8:14:c1:5f:9b:1c:14:12:92:d1:
95:f4:1f:50:d6:2d:5a:cb:65:df:54:f8:78:cf:aa:20:e7:31:
b7:58:49:73:34:a9:55:27:d3:f8:7f:e7:83:03:43:27:d2:5c:
be:63:c9:44:a7:9f:92:01:e8:39:e6:f0:0a:48:bf:8f:96:cf:
ef:31:0a:03:4c:81:a5:ac:8e:65:8c:51:2e:b4:c2:73:a2:83:
f7:5c:92:f8:c4:a5:25:2a:36:dd:5d:1e:c6:37:33:ea:8e:83:
e9:0c:43:66:19:1d:03:d4:99:f8:a7:af:8f:ba:97:f2:c3:16:
ad:4d:9d:d2:76:e8:01:cc:00:d3:29:66:72:ba:cc:9a:0b:9e:
27:e9:31:0d:bb:e9:74:7c:f2:0e:0f:f1:40:31:60:4f:67:f0:
4a:04:42:bb:9a:54:3e:4c:d7:0f:6d:c3:62:ea:05:90:44:aa:
7d:c4:ff:ac:74:49:f4:1a:88:ce:60:9a:db:77:cd:a4:01:31:
6b:ee:a2:43:27:73:6e:e4:ed:dd:e4:ee:ab:bb:50:fc:8d:5f:
15:76:16:9a:1a:bf:c8:6c:fe:32:48:91:08:f0:df:55:3f:00:
56:ab:ca:66:ad:31:5d:2f:51:ed:fc:bb:f3:1b:64:98:d7:8f:
8d:6b:9b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 02:24:43 2025 by rpki-client