Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.mft
File: 8yyk3zLccfQREE-UtRrBS2Z1gks.mft (raw, json)
Hash identifier: 2liez5Arrh673zao4U+FBHgz4zMES+P4OIzc0j4eq4Y=
Subject key identifier: D3:56:58:CC:F0:1B:DA:9D:3B:DC:89:61:33:0C:8F:E5:84:00:56:CF
Authority key identifier: F3:2C:A4:DF:32:DC:71:F4:11:10:4F:94:B5:1A:C1:4B:66:75:82:4B
Certificate issuer: /CN=f32ca4df32dc71f411104f94b51ac14b6675824b
Certificate serial: 019A232E88F404E806B20A728C3E66B1E594
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yyk3zLccfQREE-UtRrBS2Z1gks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.mft
Manifest number: 0134
Signing time: Mon 27 Oct 2025 01:00:43 +0000
Manifest this update: Mon 27 Oct 2025 01:00:43 +0000
Manifest next update: Tue 28 Oct 2025 01:00:43 +0000
Files and hashes: 1: 8yyk3zLccfQREE-UtRrBS2Z1gks.crl (hash: lrZhZF+HoRavgnGIsJPbtFIo9Voxfg8GM1jNe5FIVyg=)
2: AhlTJGVn8a8rsbPjwh1Of-tiZ-E.roa (hash: PvYJX4JVcBus78Efd+Q4dFc2SvUKpYf6MzmiID5icj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yyk3zLccfQREE-UtRrBS2Z1gks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:2e:88:f4:04:e8:06:b2:0a:72:8c:3e:66:b1:e5:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f32ca4df32dc71f411104f94b51ac14b6675824b
Validity
Not Before: Oct 27 01:00:43 2025 GMT
Not After : Oct 28 01:00:43 2025 GMT
Subject: CN=d35658ccf01bda9d3bdc8961330c8fe5840056cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3f:6d:c6:3a:2a:bf:44:56:20:69:7e:33:bc:
b5:fd:3d:d1:81:1a:44:79:4d:83:d1:b3:bb:0c:2c:
c3:40:7d:c0:ae:42:5e:1c:65:fb:9c:33:79:9d:9f:
d0:c3:65:dd:99:12:d8:58:85:ad:1f:c0:cc:48:ba:
c3:cd:f0:3e:41:f1:9a:06:92:45:4d:fb:d7:d9:f7:
67:4d:5e:f6:6a:41:63:e1:8f:a8:4f:9f:47:1a:34:
41:74:97:e6:97:3c:68:40:b1:69:c8:52:df:d8:09:
ec:8a:7a:d5:f4:9d:0f:0c:42:c6:95:97:99:b8:d1:
56:b3:0e:98:a6:42:14:8d:4c:32:5c:df:79:5e:e4:
e9:51:64:36:b5:0a:79:30:3b:44:2d:37:e3:91:e7:
76:bc:a2:e2:49:76:59:8c:3e:86:b6:6c:06:14:0b:
ea:ef:07:94:e0:c5:8e:10:41:a4:a6:67:d7:39:25:
2a:c8:cd:c1:16:93:eb:54:16:9e:9f:6c:0c:c4:b9:
fc:90:c6:b7:6b:52:09:eb:9d:b6:1c:54:a2:e8:a5:
0d:3f:9d:81:84:d5:a7:e2:e3:ec:33:cd:28:02:60:
ef:0f:9d:b9:1a:79:c4:8e:8c:d2:03:4c:f2:44:dd:
8a:47:22:a0:6a:25:32:03:e5:12:d6:b2:e4:ac:77:
b3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:56:58:CC:F0:1B:DA:9D:3B:DC:89:61:33:0C:8F:E5:84:00:56:CF
X509v3 Authority Key Identifier:
keyid:F3:2C:A4:DF:32:DC:71:F4:11:10:4F:94:B5:1A:C1:4B:66:75:82:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yyk3zLccfQREE-UtRrBS2Z1gks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:47:54:29:51:25:36:9d:e0:d1:41:c0:ee:cf:39:c9:91:28:
e6:9f:22:ca:1a:50:9a:b8:67:ad:33:76:c2:37:55:dd:ac:73:
c8:70:9c:3e:cb:4d:f3:c7:2a:41:dd:50:fc:12:a7:a7:84:7c:
b9:88:09:f2:a8:c3:c6:96:f7:10:08:01:54:06:93:0c:ae:54:
ac:46:4d:e2:fa:8e:ea:f0:28:e7:da:2a:a6:b7:1e:fb:a6:f4:
ee:e8:68:12:29:05:9f:0e:ad:ef:f1:60:fb:24:12:c3:82:89:
0f:60:18:72:72:92:37:a5:ff:78:0c:aa:e5:68:54:a7:fa:81:
8d:23:03:c5:56:56:f0:ea:5d:5e:7e:4b:29:ef:c7:cb:12:ca:
58:85:dc:93:66:23:a1:0c:e1:e3:85:95:ea:a5:62:d3:b7:4d:
cc:6b:b9:89:f8:1c:09:73:8b:3c:a4:9d:cf:b9:2c:a4:e6:b0:
7f:42:6d:39:ba:21:e7:50:02:dd:3b:e0:94:ff:32:4e:f2:92:
05:e8:92:ad:aa:83:ea:3e:3b:b4:02:58:60:65:93:8f:ca:d2:
8e:43:d6:bc:09:1d:f6:dc:2b:34:54:38:00:b4:72:88:9c:4a:
1f:7f:f4:6b:c1:c5:b0:c3:85:3a:68:46:eb:87:01:96:1e:97:
67:36:1d:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZojLoj0BOgGsgpyjD5mseWUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzMmNhNGRmMzJkYzcxZjQxMTEwNGY5NGI1MWFjMTRiNjY3
NTgyNGIwHhcNMjUxMDI3MDEwMDQzWhcNMjUxMDI4MDEwMDQzWjAzMTEwLwYDVQQD
EyhkMzU2NThjY2YwMWJkYTlkM2JkYzg5NjEzMzBjOGZlNTg0MDA1NmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqj9txjoqv0RWIGl+M7y1/T3RgRpE
eU2D0bO7DCzDQH3ArkJeHGX7nDN5nZ/Qw2XdmRLYWIWtH8DMSLrDzfA+QfGaBpJF
TfvX2fdnTV72akFj4Y+oT59HGjRBdJfmlzxoQLFpyFLf2AnsinrV9J0PDELGlZeZ
uNFWsw6YpkIUjUwyXN95XuTpUWQ2tQp5MDtELTfjked2vKLiSXZZjD6GtmwGFAvq
7weU4MWOEEGkpmfXOSUqyM3BFpPrVBaen2wMxLn8kMa3a1IJ6522HFSi6KUNP52B
hNWn4uPsM80oAmDvD525GnnEjozSA0zyRN2KRyKgaiUyA+US1rLkrHezdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNNWWMzwG9qdO9yJYTMMj+WEAFbPMB8GA1UdIwQY
MBaAFPMspN8y3HH0ERBPlLUawUtmdYJLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHl5azN6TGNjZlFSRUUtVXRSckJTMloxZ2tzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS80ZWRiZWMtZmZlYS00MDYyLTg5Y2It
NjU2NjAwYzllNDQwLzEvOHl5azN6TGNjZlFSRUUtVXRSckJTMloxZ2tzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS80ZWRiZWMtZmZlYS00MDYyLTg5Y2ItNjU2NjAwYzllNDQw
LzEvOHl5azN6TGNjZlFSRUUtVXRSckJTMloxZ2tzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXkdUKVEl
Np3g0UHA7s85yZEo5p8iyhpQmrhnrTN2wjdV3axzyHCcPstN88cqQd1Q/BKnp4R8
uYgJ8qjDxpb3EAgBVAaTDK5UrEZN4vqO6vAo59oqprce+6b07uhoEikFnw6t7/Fg
+yQSw4KJD2AYcnKSN6X/eAyq5WhUp/qBjSMDxVZW8OpdXn5LKe/HyxLKWIXck2Yj
oQzh44WV6qVi07dNzGu5ifgcCXOLPKSdz7kspOawf0JtOboh51AC3TvglP8yTvKS
BeiSraqD6j47tAJYYGWTj8rSjkPWvAkd9twrNFQ4ALRyiJxKH3/0a8HFsMOFOmhG
64cBlh6XZzYdVw==
-----END CERTIFICATE-----
Generated at Mon Oct 27 04:03:59 2025 by rpki-client