Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/a3d3bb-aa98-4ced-80a6-2673707fd8e5/1/y8Zg8DJNjLG2E3ednoMON9UuqrM.mft
File: y8Zg8DJNjLG2E3ednoMON9UuqrM.mft (raw, json)
Hash identifier: iwvpGaoZhC/ZIymLvKCoKYg/TYBsMTcdnv2/P71QlMs=
Subject key identifier: 26:59:8B:70:8D:02:58:9C:74:DA:48:D6:15:29:A2:9C:04:33:26:A2
Authority key identifier: CB:C6:60:F0:32:4D:8C:B1:B6:13:77:9D:9E:83:0E:37:D5:2E:AA:B3
Certificate issuer: /CN=cbc660f0324d8cb1b613779d9e830e37d52eaab3
Certificate serial: 0199FBEA7418334ABE8AC0DAF0A4A7EC2F94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y8Zg8DJNjLG2E3ednoMON9UuqrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/a3d3bb-aa98-4ced-80a6-2673707fd8e5/1/y8Zg8DJNjLG2E3ednoMON9UuqrM.mft
Manifest number: 0544
Signing time: Sun 19 Oct 2025 10:01:10 +0000
Manifest this update: Sun 19 Oct 2025 10:01:10 +0000
Manifest next update: Mon 20 Oct 2025 10:01:10 +0000
Files and hashes: 1: y8Zg8DJNjLG2E3ednoMON9UuqrM.crl (hash: jaGCfwcEcFN9sURtY7NtvQHA61cIZQnuzfnZ3x3ZOOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/a3d3bb-aa98-4ced-80a6-2673707fd8e5/1/y8Zg8DJNjLG2E3ednoMON9UuqrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/a3d3bb-aa98-4ced-80a6-2673707fd8e5/1/y8Zg8DJNjLG2E3ednoMON9UuqrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/y8Zg8DJNjLG2E3ednoMON9UuqrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:74:18:33:4a:be:8a:c0:da:f0:a4:a7:ec:2f:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbc660f0324d8cb1b613779d9e830e37d52eaab3
Validity
Not Before: Oct 19 10:01:10 2025 GMT
Not After : Oct 20 10:01:10 2025 GMT
Subject: CN=26598b708d02589c74da48d61529a29c043326a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:bd:9f:c2:5e:52:07:30:dc:9c:56:7f:6c:9c:
34:67:bd:58:ce:03:c8:5b:10:dd:a8:13:ba:8a:e4:
5d:68:dc:5f:f6:d4:d1:b3:61:50:30:71:e2:4d:82:
25:f1:e2:c4:8e:c6:e3:04:47:e3:ff:fb:20:b6:a4:
87:ca:af:e9:52:e6:1e:4b:10:88:16:21:f7:fe:c3:
1c:a2:36:d1:da:34:3e:54:72:65:ad:cf:d5:da:c1:
36:0c:af:8b:8a:df:a9:55:62:b6:8d:0d:73:e4:5c:
67:9e:d9:d4:f9:b7:4c:de:37:7f:89:0b:60:c2:4c:
45:c8:7e:cc:fa:56:55:c4:54:2f:c3:a6:a1:1a:be:
2b:31:40:a1:8c:89:3e:14:e5:8a:b5:f6:7b:80:13:
e5:51:37:bc:f3:77:ae:18:61:40:a0:c1:66:35:ea:
f8:6e:4d:5c:b4:4a:8a:32:ff:bf:f8:62:94:99:9b:
58:15:19:d6:3f:7e:f7:01:9f:54:2b:38:84:15:2d:
88:39:78:8c:26:d1:96:87:63:43:6b:cb:54:51:1f:
f4:c2:aa:a6:a2:61:68:a3:13:74:dd:7a:9a:45:ac:
b7:2a:86:01:52:00:50:87:fa:9c:2f:ca:90:e5:5c:
57:7c:5b:ec:02:25:f5:70:12:16:f3:90:04:27:91:
b4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:59:8B:70:8D:02:58:9C:74:DA:48:D6:15:29:A2:9C:04:33:26:A2
X509v3 Authority Key Identifier:
keyid:CB:C6:60:F0:32:4D:8C:B1:B6:13:77:9D:9E:83:0E:37:D5:2E:AA:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y8Zg8DJNjLG2E3ednoMON9UuqrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a3d3bb-aa98-4ced-80a6-2673707fd8e5/1/y8Zg8DJNjLG2E3ednoMON9UuqrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a3d3bb-aa98-4ced-80a6-2673707fd8e5/1/y8Zg8DJNjLG2E3ednoMON9UuqrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:00:25:8a:d9:fc:4c:4f:b1:59:70:ef:e8:35:cb:80:20:4f:
41:82:bf:e8:0e:b5:2d:4f:95:73:21:77:b2:f6:30:ad:81:c0:
a3:4f:d0:2e:e3:90:b5:8a:3a:62:18:ac:11:fc:54:7a:ae:94:
16:2b:e9:75:a1:7a:d7:86:b0:dd:50:61:ac:bd:85:ba:2b:23:
1d:dd:ab:3e:f9:29:cf:38:de:85:f6:e0:8d:d7:76:b9:9d:df:
80:dc:6d:f7:14:6c:53:a8:6e:19:b6:9a:94:e8:5c:ed:2e:a2:
ee:19:4d:f1:c4:77:3c:23:ae:80:4b:5a:23:c9:17:6a:a7:96:
77:f3:c0:ad:3c:01:d1:09:0b:e0:a5:64:d7:b4:83:d4:f2:44:
5d:bd:11:39:bb:6a:24:6a:6d:03:d2:60:25:be:18:48:12:66:
45:99:54:94:60:b2:9b:17:83:5d:92:c0:9f:9a:a0:fb:89:23:
79:b1:dc:3d:15:4a:ee:8a:72:ae:1f:a4:98:a0:76:e7:b1:87:
7b:15:89:75:ca:7f:b3:e3:dd:39:b9:10:04:07:7d:ea:ba:f5:
37:0a:ab:32:f2:38:7b:a9:3a:39:03:07:6b:0d:21:b9:22:22:
4c:d7:e1:ab:fe:dd:ba:2c:97:ca:c6:a9:ec:5f:6d:36:f7:3a:
21:69:ff:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:42:58 2025 by rpki-client