Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.mft
File: 8YCPGr745rWc1DWaa0SB_HyWMdE.mft (raw, json)
Hash identifier: V5yAfnIdaa3VtzTkB71ajA7CatYcwReGjysaUvYNrao=
Subject key identifier: B3:7A:7A:BD:81:60:16:2A:AD:6C:F4:3E:D8:F7:1E:C6:D0:CE:34:8F
Authority key identifier: F1:80:8F:1A:BE:F8:E6:B5:9C:D4:35:9A:6B:44:81:FC:7C:96:31:D1
Certificate issuer: /CN=f1808f1abef8e6b59cd4359a6b4481fc7c9631d1
Certificate serial: 019A4DE1A14BB2D8E10CFADBAB476DFAED58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 08:00:23 +0000
Manifest this update: Tue 04 Nov 2025 08:00:23 +0000
Manifest next update: Wed 05 Nov 2025 08:00:23 +0000
Files and hashes: 1: 1-pC8r9w9eHPboI6UQ9SPxm6C-JI.roa (hash: 4/hN4BZtPakrI9kWgmVlEfI4CA36mWdfywhv2fUv0zc=)
2: 8YCPGr745rWc1DWaa0SB_HyWMdE.crl (hash: L1gh+pZluU9Y1KGSkFeWfsq+i6HeZ+d5RfBSdsJEZzY=)
3: ewa-i1ZX3x5sx5ypquiCHGcdBZY.roa (hash: oyaoG9o+HMw8UbuIoU2MjdUmgeJrqz7dNC1WMoDWkeM=)
4: f3N3ZaRV0bOdlX13-KIGTXiHS-c.roa (hash: G7D6BUoaKLhAlCeuz2Rq/Eb+8hPzua6dwGFSHRCAqy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:a1:4b:b2:d8:e1:0c:fa:db:ab:47:6d:fa:ed:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1808f1abef8e6b59cd4359a6b4481fc7c9631d1
Validity
Not Before: Nov 4 08:00:23 2025 GMT
Not After : Nov 5 08:00:23 2025 GMT
Subject: CN=b37a7abd8160162aad6cf43ed8f71ec6d0ce348f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:6d:ce:00:7f:79:1d:38:c1:d4:e6:77:4c:3d:
70:48:8c:60:91:f9:a7:fe:ee:cb:5c:f4:f2:c1:b2:
04:16:18:66:83:60:24:91:13:c0:48:6d:8b:29:5f:
2b:42:31:6a:52:de:b9:f3:a3:34:6a:95:2c:64:7d:
59:d2:62:65:62:15:c6:7a:12:5f:23:7a:c5:6a:c7:
ff:48:e1:2e:f6:8e:12:bf:34:76:63:75:af:42:09:
0e:15:6f:32:fd:21:56:9d:a3:d7:46:2e:e9:3e:7a:
0e:c0:e4:c1:e3:72:e3:4e:c4:6b:f5:d2:ba:d4:f7:
2c:10:19:a9:24:1d:f0:34:84:1c:de:5a:80:f9:bb:
59:fb:20:ad:a0:7d:8e:cb:ad:fd:e1:9e:41:ec:22:
0a:01:29:0c:8a:ef:36:14:8b:d8:fe:d8:30:95:d2:
d3:0a:b1:38:7f:b8:16:68:1b:c0:f4:0e:09:f4:26:
d0:98:89:9c:7e:8a:f7:f3:64:71:a6:3a:84:ff:d0:
06:b4:77:12:5e:bd:41:6c:66:b8:81:bc:4b:3d:14:
66:18:24:93:38:c7:ca:53:5b:90:f0:63:6d:77:ce:
7e:60:58:49:55:0b:d1:5d:98:5b:94:48:46:52:c9:
64:e4:3b:b2:58:9a:c1:bd:6f:f4:1d:b9:cc:ca:ab:
c3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:7A:7A:BD:81:60:16:2A:AD:6C:F4:3E:D8:F7:1E:C6:D0:CE:34:8F
X509v3 Authority Key Identifier:
keyid:F1:80:8F:1A:BE:F8:E6:B5:9C:D4:35:9A:6B:44:81:FC:7C:96:31:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:f5:52:06:c5:06:bf:a3:8d:bf:6a:0e:7e:5b:cb:dd:c5:7a:
f0:5f:66:73:09:73:62:0d:c2:bb:4d:32:fb:e6:35:22:3f:10:
10:b5:3b:69:a0:dc:ba:5b:f2:fd:34:dc:64:15:5c:4b:01:94:
79:0b:c1:9e:7a:a1:f7:02:5c:d1:80:ad:a0:71:5d:57:4e:47:
f4:20:b1:b8:ae:d2:38:10:d5:4a:0d:2c:f4:f0:70:73:83:73:
8e:43:46:f3:00:96:36:51:71:f2:ef:59:e6:72:61:20:74:43:
18:a8:27:7f:a3:87:ad:8c:f7:c7:fc:8c:6d:fd:3e:65:96:0f:
ac:97:87:1a:3b:26:ca:1f:21:59:a1:d4:e2:04:02:38:c2:9b:
c2:97:c5:d4:41:76:26:6a:c5:25:f5:f7:49:d7:15:7c:91:67:
dc:d7:2e:46:ea:19:c5:b9:3d:b9:9b:fa:4e:05:ef:94:cd:16:
8f:c8:a8:d1:0b:b9:20:d1:56:56:aa:f1:75:bf:63:98:a7:7f:
bf:17:b5:90:f6:40:d0:ed:ad:cc:7a:bc:cf:a8:dd:e3:48:6e:
88:b5:be:7c:9c:b4:4e:de:74:8d:45:7a:28:0d:b0:95:fd:bf:
f3:84:60:a2:58:b5:0a:63:d4:22:06:6c:bb:a1:3b:11:b5:33:
2b:44:70:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:29:47 2025 by rpki-client