Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft
File: 8YUnDoMZPTJp983p2ggIse_1Uq4.mft (raw, json)
Hash identifier: 5SJin0RuLUNxq7XkfLR6akWg9K9Iu7AQMR0FBXhfBP8=
Subject key identifier: AD:57:97:F0:5F:3E:E8:A0:BA:77:56:4B:17:6E:C6:5C:03:E9:89:B2
Authority key identifier: F1:85:27:0E:83:19:3D:32:69:F7:CD:E9:DA:08:08:B1:EF:F5:52:AE
Certificate issuer: /CN=f185270e83193d3269f7cde9da0808b1eff552ae
Certificate serial: 019A2779216AA725991E93542B900139F190
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8YUnDoMZPTJp983p2ggIse_1Uq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft
Manifest number: 0677
Signing time: Mon 27 Oct 2025 21:00:41 +0000
Manifest this update: Mon 27 Oct 2025 21:00:41 +0000
Manifest next update: Tue 28 Oct 2025 21:00:41 +0000
Files and hashes: 1: 8YUnDoMZPTJp983p2ggIse_1Uq4.crl (hash: Kr+Bv40fvmOPjJokmsPhCSfPoz5gAejdHZ//mIXYM04=)
2: yze2rcJ637RL8GZo48PGt4d8nY8.roa (hash: H8OFKVxMCjsZaNXr8DPY/I8jq0ZMaggP4bkjrXxk6OY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8YUnDoMZPTJp983p2ggIse_1Uq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:27:79:21:6a:a7:25:99:1e:93:54:2b:90:01:39:f1:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f185270e83193d3269f7cde9da0808b1eff552ae
Validity
Not Before: Oct 27 21:00:41 2025 GMT
Not After : Oct 28 21:00:41 2025 GMT
Subject: CN=ad5797f05f3ee8a0ba77564b176ec65c03e989b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7d:9f:ba:e5:68:61:c5:c6:b9:45:19:af:ec:
df:2a:26:8b:b3:78:02:df:d3:5e:18:35:78:5c:b0:
44:0e:28:45:90:c1:ac:3d:5c:4c:ae:91:06:56:84:
ae:d0:5b:00:99:20:d5:a0:7a:b4:a6:88:9a:cf:76:
df:e5:d7:bd:8c:44:64:5d:57:9f:04:c1:b5:fc:3d:
d6:2d:3b:c4:46:0b:b0:02:23:db:89:22:b7:fb:1b:
22:49:e1:7c:f3:2c:35:e9:61:c9:24:f6:ad:80:a8:
18:dc:5d:bd:b8:ac:74:de:06:6a:e8:d2:aa:8a:e1:
80:05:a5:31:46:85:89:e9:7d:85:5d:9a:8b:96:1b:
a3:e9:2f:19:49:67:b3:0f:49:e9:aa:a1:17:74:17:
4d:fb:f0:55:63:f7:49:0b:6c:f5:ea:cd:b0:ba:6b:
b7:d8:10:3e:20:58:22:0c:9d:fa:63:63:7a:59:50:
c0:3a:70:e9:d1:39:9d:99:5e:de:14:20:ca:62:63:
37:db:e6:f0:16:27:25:96:1f:9d:ec:1f:e5:f6:0d:
e3:e8:9a:d9:27:b2:be:ef:08:b1:4e:68:8c:5c:fc:
91:cf:19:c3:45:f4:b2:92:87:b4:79:f1:c3:e5:35:
ff:eb:b1:36:30:f2:07:f7:fc:67:e2:bf:26:d2:e7:
63:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:57:97:F0:5F:3E:E8:A0:BA:77:56:4B:17:6E:C6:5C:03:E9:89:B2
X509v3 Authority Key Identifier:
keyid:F1:85:27:0E:83:19:3D:32:69:F7:CD:E9:DA:08:08:B1:EF:F5:52:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8YUnDoMZPTJp983p2ggIse_1Uq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:ba:ad:bd:a6:93:73:ff:35:1a:ea:9d:a3:cd:d0:88:c0:42:
44:64:ea:b6:c7:74:91:b6:a0:b1:5b:ff:0f:b6:ae:e1:e8:26:
78:b3:7a:9d:9a:12:87:af:e4:02:51:25:70:2c:43:02:bd:ee:
58:21:6a:a1:91:d6:29:2d:ab:e0:88:b9:64:29:96:65:92:b9:
8f:5a:a2:b2:1a:61:f0:14:03:a7:64:3e:e6:f9:4b:1b:62:2a:
27:01:fd:0d:f1:43:f6:36:16:3b:40:bb:51:2c:d9:cd:b7:ac:
ea:ac:66:62:ed:48:74:a4:54:b8:e9:c4:0d:17:34:a1:04:dd:
d6:74:0b:e1:67:07:f8:6f:99:8c:1c:b4:66:85:e2:9e:22:f3:
83:b2:49:49:56:86:5a:2a:bc:5a:fc:af:92:e5:fa:ec:0c:4f:
5f:47:bc:2a:75:a6:21:1e:4e:30:7f:f7:19:98:42:17:dd:9b:
7d:91:18:a0:08:d2:58:c0:a5:24:6a:a5:0b:cd:9b:d2:f8:4f:
ab:32:4d:e9:90:04:36:ab:5b:25:e0:b3:a5:c3:ce:f2:36:c3:
e2:99:a2:0e:e9:34:4f:15:3c:78:21:b1:5f:5f:f5:fb:30:0f:
b7:4a:e0:33:47:6f:31:28:53:25:29:8d:b9:9a:0c:ff:a7:5c:
5a:e4:7e:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoneSFqpyWZHpNUK5ABOfGQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxODUyNzBlODMxOTNkMzI2OWY3Y2RlOWRhMDgwOGIxZWZm
NTUyYWUwHhcNMjUxMDI3MjEwMDQxWhcNMjUxMDI4MjEwMDQxWjAzMTEwLwYDVQQD
EyhhZDU3OTdmMDVmM2VlOGEwYmE3NzU2NGIxNzZlYzY1YzAzZTk4OWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArH2fuuVoYcXGuUUZr+zfKiaLs3gC
39NeGDV4XLBEDihFkMGsPVxMrpEGVoSu0FsAmSDVoHq0poiaz3bf5de9jERkXVef
BMG1/D3WLTvERguwAiPbiSK3+xsiSeF88yw16WHJJPatgKgY3F29uKx03gZq6NKq
iuGABaUxRoWJ6X2FXZqLlhuj6S8ZSWezD0npqqEXdBdN+/BVY/dJC2z16s2wumu3
2BA+IFgiDJ36Y2N6WVDAOnDp0TmdmV7eFCDKYmM32+bwFicllh+d7B/l9g3j6JrZ
J7K+7wixTmiMXPyRzxnDRfSykoe0efHD5TX/67E2MPIH9/xn4r8m0udjZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK1Xl/BfPuigundWSxduxlwD6YmyMB8GA1UdIwQY
MBaAFPGFJw6DGT0yaffN6doICLHv9VKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFlVbkRvTVpQVEpwOTgzcDJnZ0lzZV8xVXE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9kOGRlNmItNzUwZS00MTUwLTliZTgt
ZmVmOTZlOTVhYmEwLzEvOFlVbkRvTVpQVEpwOTgzcDJnZ0lzZV8xVXE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9kOGRlNmItNzUwZS00MTUwLTliZTgtZmVmOTZlOTVhYmEw
LzEvOFlVbkRvTVpQVEpwOTgzcDJnZ0lzZV8xVXE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAErqtvaaT
c/81Guqdo83QiMBCRGTqtsd0kbagsVv/D7au4egmeLN6nZoSh6/kAlElcCxDAr3u
WCFqoZHWKS2r4Ii5ZCmWZZK5j1qishph8BQDp2Q+5vlLG2IqJwH9DfFD9jYWO0C7
USzZzbes6qxmYu1IdKRUuOnEDRc0oQTd1nQL4WcH+G+ZjBy0ZoXiniLzg7JJSVaG
Wiq8WvyvkuX67AxPX0e8KnWmIR5OMH/3GZhCF92bfZEYoAjSWMClJGqlC82b0vhP
qzJN6ZAENqtbJeCzpcPO8jbD4pmiDuk0TxU8eCGxX1/1+zAPt0rgM0dvMShTJSmN
uZoM/6dcWuR+JQ==
-----END CERTIFICATE-----
Generated at Mon Oct 27 23:38:52 2025 by rpki-client