Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft
File: 8yvpggYKQ3NNCtEmrUbaLzlcne8.mft (raw, json)
Hash identifier: /rBN+J+Qjhr/MIztGTeVez0cNqI4IV4boNnaGbUsoU8=
Subject key identifier: 9A:5C:95:B9:CE:83:CB:53:9B:02:6E:09:98:91:61:93:E1:40:6E:56
Authority key identifier: F3:2B:E9:82:06:0A:43:73:4D:0A:D1:26:AD:46:DA:2F:39:5C:9D:EF
Certificate issuer: /CN=f32be982060a43734d0ad126ad46da2f395c9def
Certificate serial: 0199FCC69A1A70578D6CDD0BBEBDE4E5E413
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yvpggYKQ3NNCtEmrUbaLzlcne8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft
Manifest number: 16E9
Signing time: Sun 19 Oct 2025 14:01:37 +0000
Manifest this update: Sun 19 Oct 2025 14:01:37 +0000
Manifest next update: Mon 20 Oct 2025 14:01:37 +0000
Files and hashes: 1: 8yvpggYKQ3NNCtEmrUbaLzlcne8.crl (hash: U16NDupeCAx2cPtiv5KxJU/qixuTYXBMUT2wU4WVLRc=)
2: _ez--C0KRSwSRmH4lyGu5zUk1HU.roa (hash: KFrEJZmjOcmfSBpY7GDcoqxz0mSObldiNHL67FlKf8w=)
3: bHl4gP55LgKhhE_L1xho4xppPEo.roa (hash: rqcbN4+Al2DH9m3ppJi1E488vxtH8t3M86sJsdVuXgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yvpggYKQ3NNCtEmrUbaLzlcne8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:9a:1a:70:57:8d:6c:dd:0b:be:bd:e4:e5:e4:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f32be982060a43734d0ad126ad46da2f395c9def
Validity
Not Before: Oct 19 14:01:37 2025 GMT
Not After : Oct 20 14:01:37 2025 GMT
Subject: CN=9a5c95b9ce83cb539b026e0998916193e1406e56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5b:22:63:2c:c8:5f:7a:92:a7:84:33:98:16:
f0:14:4c:8e:85:8f:f2:92:4c:43:92:17:9d:0c:b6:
bc:27:2d:08:f9:bd:d2:08:95:92:1c:b3:51:72:04:
71:f1:13:01:48:f7:f2:65:b5:1a:f4:21:7b:5f:fb:
50:7c:6f:2e:65:f0:1e:41:1d:2b:98:7f:d0:e1:12:
87:c1:c4:bf:70:5a:da:7c:de:99:7f:f0:9f:82:5d:
bd:aa:31:31:67:9e:c5:84:b0:21:5f:4a:06:bd:95:
5b:c5:d2:14:36:f1:c1:26:e4:6d:6e:c4:b1:f2:72:
81:52:c6:d6:0a:f0:d2:55:85:50:b7:d5:d0:16:f1:
4e:2e:10:54:8e:d2:da:8c:e1:42:b8:41:68:0c:75:
3e:e8:71:63:48:7a:89:44:ba:cf:f9:0b:84:b4:11:
8d:22:4d:f1:41:d0:76:86:a2:3f:ad:36:72:85:c1:
5b:2f:3d:c7:2e:01:1a:3d:0c:6f:41:e3:3b:a1:ec:
04:7d:26:40:d6:8f:6f:d8:56:b2:3d:1b:7d:17:ed:
27:45:14:7c:fa:d7:46:fe:ac:0b:bb:24:b9:89:11:
9b:86:f5:78:66:0e:d5:59:d5:c4:97:2b:11:3c:ed:
20:33:df:0e:7f:80:fc:bc:99:11:38:d0:0a:44:72:
ba:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:5C:95:B9:CE:83:CB:53:9B:02:6E:09:98:91:61:93:E1:40:6E:56
X509v3 Authority Key Identifier:
keyid:F3:2B:E9:82:06:0A:43:73:4D:0A:D1:26:AD:46:DA:2F:39:5C:9D:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yvpggYKQ3NNCtEmrUbaLzlcne8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:25:6a:6a:77:06:3a:c9:5b:ba:2a:13:4d:c4:68:f7:76:3d:
cb:df:1d:1d:b5:ce:72:07:fb:b5:c3:94:53:d0:a6:48:29:e4:
32:87:e7:8f:22:a1:88:6f:e4:8b:e9:4c:c6:d0:e6:4d:32:82:
f4:85:52:61:c5:26:a8:ae:92:b0:6d:ec:4a:d6:49:b2:81:13:
cc:fa:86:20:c8:4f:2f:0b:46:2a:ce:c7:af:c6:67:6d:46:f1:
bf:35:30:0e:3b:bc:7d:2e:92:f3:85:e3:c7:3b:23:00:93:46:
a9:c7:60:e4:9f:9b:54:91:59:22:f0:9a:0a:13:65:8e:0b:af:
7d:a1:b6:88:f0:ae:4c:25:d1:a8:7e:f7:dc:8a:d0:9d:e3:9b:
6b:81:98:2f:6c:7a:53:09:93:48:5a:4a:74:83:84:48:7f:9c:
ac:c9:99:89:8c:3d:42:f8:a4:58:7e:7a:d9:04:55:b7:37:0f:
c1:42:e1:4f:29:7c:ba:5f:e0:9a:24:3e:06:14:e1:45:64:84:
72:70:bb:04:26:cd:2a:77:02:fc:c1:e7:5b:7e:eb:d6:64:49:
84:80:44:9b:22:88:49:98:e1:8e:bb:49:fa:5d:23:3a:ad:25:
f7:72:a4:5c:73:a0:33:de:82:66:8f:bc:5a:2d:bb:c9:d0:46:
8d:46:6d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:02:45 2025 by rpki-client