Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/a3d3bb-aa98-4ced-80a6-2673707fd8e5/1/y8Zg8DJNjLG2E3ednoMON9UuqrM.mft
File: y8Zg8DJNjLG2E3ednoMON9UuqrM.mft (raw, json)
Hash identifier: cb67z9AnffrWkj7R/5iKvmcOSWotjg0lWxV8LtQ90FY=
Subject key identifier: C8:F3:4D:4F:04:50:D8:A9:9F:B8:1A:13:CC:E7:C5:A8:69:F3:BF:36
Authority key identifier: CB:C6:60:F0:32:4D:8C:B1:B6:13:77:9D:9E:83:0E:37:D5:2E:AA:B3
Certificate issuer: /CN=cbc660f0324d8cb1b613779d9e830e37d52eaab3
Certificate serial: 019921B179C99D0349AEA0E98EA72DEC31F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y8Zg8DJNjLG2E3ednoMON9UuqrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/a3d3bb-aa98-4ced-80a6-2673707fd8e5/1/y8Zg8DJNjLG2E3ednoMON9UuqrM.mft
Manifest number: 04D3
Signing time: Sun 07 Sep 2025 01:01:43 +0000
Manifest this update: Sun 07 Sep 2025 01:01:43 +0000
Manifest next update: Mon 08 Sep 2025 01:01:43 +0000
Files and hashes: 1: y8Zg8DJNjLG2E3ednoMON9UuqrM.crl (hash: Hjd6ER7/fe8yVlK+SDNzHNGEvuGBoJ+3vo4ZZWBCVfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/a3d3bb-aa98-4ced-80a6-2673707fd8e5/1/y8Zg8DJNjLG2E3ednoMON9UuqrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/a3d3bb-aa98-4ced-80a6-2673707fd8e5/1/y8Zg8DJNjLG2E3ednoMON9UuqrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/y8Zg8DJNjLG2E3ednoMON9UuqrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:79:c9:9d:03:49:ae:a0:e9:8e:a7:2d:ec:31:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbc660f0324d8cb1b613779d9e830e37d52eaab3
Validity
Not Before: Sep 7 01:01:43 2025 GMT
Not After : Sep 8 01:01:43 2025 GMT
Subject: CN=c8f34d4f0450d8a99fb81a13cce7c5a869f3bf36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:db:cd:22:82:57:07:3e:38:19:1e:bb:1f:d0:
bb:80:d0:45:e7:71:72:8d:d7:ed:24:47:11:b4:3a:
aa:0c:b7:ca:c9:eb:9b:b3:d2:fb:87:84:b4:45:19:
0c:93:98:bb:c7:46:8b:a8:43:b3:c9:55:3f:ea:9c:
32:d7:0f:db:cd:86:6c:22:be:0b:5b:82:6b:ef:37:
c8:03:fc:0d:77:e3:f6:a4:f3:ec:c9:de:a0:4a:f7:
8c:fc:eb:53:4f:cb:79:19:57:fd:8e:61:44:5a:b1:
88:bf:1d:96:42:20:62:d4:f1:6e:42:5d:73:94:1e:
d1:b4:35:c5:9b:73:47:df:ad:24:4c:27:27:50:5d:
d6:60:6c:1d:81:6d:0a:c8:c8:73:7a:ea:22:b9:20:
87:bf:62:bb:a2:06:96:e9:f3:b4:a4:ac:51:a9:8d:
37:72:bc:8d:29:2e:eb:51:f6:57:f0:8b:3b:d7:09:
e6:77:b7:e1:ab:ce:39:6e:0e:7d:c6:a6:a5:5c:6d:
ec:d7:af:6e:4f:28:02:4b:b6:a7:ad:27:9c:86:1a:
fc:7b:dc:10:52:e8:4e:03:5b:c6:a0:01:a7:8d:ca:
de:93:32:88:6f:09:6f:9f:4f:f7:ba:27:c0:7a:7c:
ea:b6:46:d8:6e:5f:61:15:11:10:f9:61:f6:a1:12:
e5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:F3:4D:4F:04:50:D8:A9:9F:B8:1A:13:CC:E7:C5:A8:69:F3:BF:36
X509v3 Authority Key Identifier:
keyid:CB:C6:60:F0:32:4D:8C:B1:B6:13:77:9D:9E:83:0E:37:D5:2E:AA:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y8Zg8DJNjLG2E3ednoMON9UuqrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a3d3bb-aa98-4ced-80a6-2673707fd8e5/1/y8Zg8DJNjLG2E3ednoMON9UuqrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a3d3bb-aa98-4ced-80a6-2673707fd8e5/1/y8Zg8DJNjLG2E3ednoMON9UuqrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:e3:dc:f3:39:59:7a:d3:66:ef:20:78:04:1f:72:0a:6b:a2:
0d:4a:92:c6:88:77:b0:36:cf:09:8a:23:d3:95:58:5e:65:f6:
78:47:62:8b:d5:d0:1e:29:f4:ce:76:fd:f0:38:6b:b4:02:55:
31:8a:46:4b:6e:4c:44:73:06:52:4a:d0:e5:d8:cd:c9:8d:43:
cb:2d:e6:ec:99:cb:4c:f1:7c:e6:48:b9:09:d3:c2:d1:85:b3:
f9:3c:18:21:e5:07:79:40:cf:d4:48:b4:0b:ea:38:5b:36:86:
eb:7d:84:3f:58:8d:9f:39:1a:97:82:15:43:df:d4:7c:4a:69:
50:d9:bd:b9:f1:0c:19:8e:ac:b4:c7:8e:2f:f7:e8:4f:70:92:
89:cc:1d:ba:61:a3:1c:05:2d:e8:77:62:a2:4d:dd:64:4e:e8:
a5:74:12:0c:8c:b1:56:87:83:29:18:37:f1:9c:4b:e0:d1:9b:
1f:c2:22:d2:8f:35:b4:fd:4b:e3:90:eb:2e:0b:97:d3:85:cd:
e1:1a:c1:aa:32:1e:eb:b4:28:7d:b0:bd:8b:d1:5e:a3:f6:34:
b7:74:5e:75:d0:97:83:76:6e:a9:37:5d:1b:ff:26:96:17:d6:
46:65:38:6c:6a:bf:39:8d:6e:10:21:0d:b7:d7:03:20:05:3b:
dc:d5:c1:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:12:16 2025 by rpki-client