Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.mft
File: 8yyk3zLccfQREE-UtRrBS2Z1gks.mft (raw, json)
Hash identifier: q3LQkkcQYv/90rXUxDOrn+UEsgWSplZEJAV0GIl0eLI=
Subject key identifier: 0D:09:8E:17:40:1A:24:61:86:4B:65:6B:99:D2:95:7B:A1:32:2B:AB
Authority key identifier: F3:2C:A4:DF:32:DC:71:F4:11:10:4F:94:B5:1A:C1:4B:66:75:82:4B
Certificate issuer: /CN=f32ca4df32dc71f411104f94b51ac14b6675824b
Certificate serial: 01992255DC544D188D9993DAFFA752891470
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yyk3zLccfQREE-UtRrBS2Z1gks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.mft
Manifest number: AF
Signing time: Sun 07 Sep 2025 04:01:16 +0000
Manifest this update: Sun 07 Sep 2025 04:01:16 +0000
Manifest next update: Mon 08 Sep 2025 04:01:16 +0000
Files and hashes: 1: 8yyk3zLccfQREE-UtRrBS2Z1gks.crl (hash: Y5GPNr/0ryzm48tgFk/rPPaBwhbiHGfJtzPKNU5GDUI=)
2: AhlTJGVn8a8rsbPjwh1Of-tiZ-E.roa (hash: PvYJX4JVcBus78Efd+Q4dFc2SvUKpYf6MzmiID5icj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yyk3zLccfQREE-UtRrBS2Z1gks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:dc:54:4d:18:8d:99:93:da:ff:a7:52:89:14:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f32ca4df32dc71f411104f94b51ac14b6675824b
Validity
Not Before: Sep 7 04:01:16 2025 GMT
Not After : Sep 8 04:01:16 2025 GMT
Subject: CN=0d098e17401a2461864b656b99d2957ba1322bab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ac:5e:24:fa:58:67:a5:72:79:19:1a:6b:13:
5e:2d:ec:a7:30:ea:90:62:f1:94:01:bd:38:2c:64:
13:7a:0b:25:99:3d:49:89:26:c7:a4:0d:60:b7:09:
37:d4:73:a1:c5:0f:f1:8c:d2:84:2d:4f:e5:8b:51:
6b:00:e3:0e:87:b5:49:40:d2:92:c9:9f:57:e6:7c:
c3:4e:10:d2:1e:a0:e3:31:d8:9f:e3:be:5d:80:3f:
35:2c:2d:a2:13:49:c5:b2:5c:e4:32:63:44:c7:9a:
71:7b:39:a7:54:ab:48:5c:e0:af:d4:ad:fe:2c:2d:
40:2a:b5:07:38:8d:fb:62:2d:5f:5d:aa:f5:6b:2d:
26:76:17:a8:59:c1:02:6d:7e:5a:c2:8a:7c:08:98:
15:22:a6:61:09:57:b9:14:bf:fc:86:8b:44:3f:a3:
9f:74:6a:13:97:d0:22:bc:31:e1:17:1e:ae:a5:f7:
b5:3f:bf:63:cf:90:57:21:b7:21:f2:46:94:72:9d:
df:6a:ff:51:6f:c2:82:e4:75:ed:c6:cf:31:df:bf:
b8:f5:5b:34:07:2a:6a:70:4c:67:ba:f6:39:a7:f0:
e5:d9:9c:fb:e4:b2:66:7d:48:2d:3c:d3:cb:39:97:
ea:24:fb:fd:89:b7:80:b0:06:2e:c3:5f:e8:bc:a4:
69:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:09:8E:17:40:1A:24:61:86:4B:65:6B:99:D2:95:7B:A1:32:2B:AB
X509v3 Authority Key Identifier:
keyid:F3:2C:A4:DF:32:DC:71:F4:11:10:4F:94:B5:1A:C1:4B:66:75:82:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yyk3zLccfQREE-UtRrBS2Z1gks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:ac:5c:e7:1e:56:4a:8f:25:00:cf:b1:fd:09:2f:b2:18:ce:
95:5c:31:09:49:70:50:ac:a0:9a:19:7f:0e:58:3e:eb:6a:5c:
17:88:a0:e4:ec:14:a8:23:c5:b6:d5:e0:84:08:5d:5a:10:5c:
b7:18:b0:aa:1c:0a:1e:e2:c1:26:89:2c:ff:f5:93:f1:0e:01:
54:8e:4a:28:5e:d0:28:fc:64:fe:c4:e5:13:d8:cd:6e:2e:98:
1f:a4:a2:85:e5:09:dc:9e:e9:41:9f:c2:9c:6d:a7:16:51:36:
3b:de:ce:13:70:59:1f:c5:46:24:2f:31:4d:d4:98:a5:85:57:
0e:5f:c9:95:41:c4:d9:66:ee:ca:1a:9b:01:9e:ec:61:6c:47:
a3:ee:29:e0:a0:ac:80:f7:85:b5:e1:3b:74:a8:11:6c:54:ee:
5a:03:89:81:6f:0e:d8:91:8f:0a:f9:7e:99:c9:ba:ce:56:fb:
a9:55:53:2a:22:dd:d2:78:66:14:09:47:31:2f:e3:fe:da:f2:
f0:c3:27:89:d7:15:f6:12:ed:6d:ec:f0:f6:14:34:31:7a:b3:
91:f5:8f:55:a1:5c:67:41:4b:45:29:be:f2:81:ac:52:46:bb:
15:ac:fc:af:c4:77:37:ab:fe:7a:e5:f2:45:b7:37:8b:e0:25:
e0:24:46:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiVdxUTRiNmZPa/6dSiRRwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzMmNhNGRmMzJkYzcxZjQxMTEwNGY5NGI1MWFjMTRiNjY3
NTgyNGIwHhcNMjUwOTA3MDQwMTE2WhcNMjUwOTA4MDQwMTE2WjAzMTEwLwYDVQQD
EygwZDA5OGUxNzQwMWEyNDYxODY0YjY1NmI5OWQyOTU3YmExMzIyYmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6xeJPpYZ6VyeRkaaxNeLeynMOqQ
YvGUAb04LGQTegslmT1JiSbHpA1gtwk31HOhxQ/xjNKELU/li1FrAOMOh7VJQNKS
yZ9X5nzDThDSHqDjMdif475dgD81LC2iE0nFslzkMmNEx5pxezmnVKtIXOCv1K3+
LC1AKrUHOI37Yi1fXar1ay0mdheoWcECbX5awop8CJgVIqZhCVe5FL/8hotEP6Of
dGoTl9AivDHhFx6upfe1P79jz5BXIbch8kaUcp3fav9Rb8KC5HXtxs8x37+49Vs0
BypqcExnuvY5p/Dl2Zz75LJmfUgtPNPLOZfqJPv9ibeAsAYuw1/ovKRpRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA0JjhdAGiRhhktla5nSlXuhMiurMB8GA1UdIwQY
MBaAFPMspN8y3HH0ERBPlLUawUtmdYJLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHl5azN6TGNjZlFSRUUtVXRSckJTMloxZ2tzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS80ZWRiZWMtZmZlYS00MDYyLTg5Y2It
NjU2NjAwYzllNDQwLzEvOHl5azN6TGNjZlFSRUUtVXRSckJTMloxZ2tzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS80ZWRiZWMtZmZlYS00MDYyLTg5Y2ItNjU2NjAwYzllNDQw
LzEvOHl5azN6TGNjZlFSRUUtVXRSckJTMloxZ2tzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAqxc5x5W
So8lAM+x/QkvshjOlVwxCUlwUKygmhl/Dlg+62pcF4ig5OwUqCPFttXghAhdWhBc
txiwqhwKHuLBJoks//WT8Q4BVI5KKF7QKPxk/sTlE9jNbi6YH6SiheUJ3J7pQZ/C
nG2nFlE2O97OE3BZH8VGJC8xTdSYpYVXDl/JlUHE2WbuyhqbAZ7sYWxHo+4p4KCs
gPeFteE7dKgRbFTuWgOJgW8O2JGPCvl+mcm6zlb7qVVTKiLd0nhmFAlHMS/j/try
8MMnidcV9hLtbezw9hQ0MXqzkfWPVaFcZ0FLRSm+8oGsUka7Faz8r8R3N6v+euXy
Rbc3i+Al4CRGrA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:46:08 2025 by rpki-client