Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.mft
File: 8YCPGr745rWc1DWaa0SB_HyWMdE.mft (raw, json)
Hash identifier: N2eC1DHitd+OmOdUUH+n/sZKOB4vyusbtNDZSVN7X2c=
Subject key identifier: B9:DA:2E:EE:CD:44:83:43:33:D6:6A:44:89:97:7E:6A:4C:63:1D:B5
Authority key identifier: F1:80:8F:1A:BE:F8:E6:B5:9C:D4:35:9A:6B:44:81:FC:7C:96:31:D1
Certificate issuer: /CN=f1808f1abef8e6b59cd4359a6b4481fc7c9631d1
Certificate serial: 019A00A3890BE9138B4B25E57C9C7D7F4267
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.mft
Manifest number: 16E6
Signing time: Mon 20 Oct 2025 08:01:48 +0000
Manifest this update: Mon 20 Oct 2025 08:01:48 +0000
Manifest next update: Tue 21 Oct 2025 08:01:48 +0000
Files and hashes: 1: 1-pC8r9w9eHPboI6UQ9SPxm6C-JI.roa (hash: 4/hN4BZtPakrI9kWgmVlEfI4CA36mWdfywhv2fUv0zc=)
2: 8YCPGr745rWc1DWaa0SB_HyWMdE.crl (hash: LGP7W8Xgo2+3vvkMYTKPK0pXeoNkZtXBqIc2NvXuGY8=)
3: ewa-i1ZX3x5sx5ypquiCHGcdBZY.roa (hash: oyaoG9o+HMw8UbuIoU2MjdUmgeJrqz7dNC1WMoDWkeM=)
4: f3N3ZaRV0bOdlX13-KIGTXiHS-c.roa (hash: G7D6BUoaKLhAlCeuz2Rq/Eb+8hPzua6dwGFSHRCAqy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a3:89:0b:e9:13:8b:4b:25:e5:7c:9c:7d:7f:42:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1808f1abef8e6b59cd4359a6b4481fc7c9631d1
Validity
Not Before: Oct 20 08:01:48 2025 GMT
Not After : Oct 21 08:01:48 2025 GMT
Subject: CN=b9da2eeecd44834333d66a4489977e6a4c631db5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:83:1e:71:f5:b0:bc:ce:77:e6:5c:63:81:af:
1f:63:0b:21:2b:b5:7c:a7:5f:23:7f:08:b6:5e:4f:
dd:06:9e:4c:35:a0:ab:0b:80:ea:b9:8f:13:32:ec:
c8:43:d3:78:d1:d9:34:3f:c6:26:db:5f:3c:72:1e:
17:48:79:8f:76:a2:b4:52:b2:21:39:ba:31:32:dc:
37:f1:09:0e:3e:e9:ce:83:8b:6f:ab:31:aa:80:b3:
2c:21:c2:08:4c:9c:61:54:74:ec:d6:9e:84:d3:5e:
2d:61:24:29:d2:f5:cf:de:77:69:bc:d3:c8:26:f1:
9f:8d:23:a5:51:9c:2d:23:9c:fe:57:ed:ab:96:fb:
19:b6:a8:40:5a:2d:cb:91:77:8b:5e:06:08:67:a9:
4c:42:df:44:56:b4:52:4d:aa:3f:0e:5b:2f:cb:58:
1e:7a:5a:fa:b3:58:bc:58:ec:10:01:93:80:8f:db:
96:80:7a:3a:10:9f:94:3e:02:ca:6f:06:17:77:92:
91:48:fa:f7:f4:29:59:0c:10:7f:54:ea:c5:8f:b3:
ba:a5:09:13:9c:67:bb:10:6a:fc:64:ba:36:aa:08:
85:26:63:21:b4:8c:35:14:cc:cd:1a:77:1d:5b:80:
3e:0c:f6:28:ee:4b:63:c6:38:ed:2e:c5:c0:a5:ee:
38:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:DA:2E:EE:CD:44:83:43:33:D6:6A:44:89:97:7E:6A:4C:63:1D:B5
X509v3 Authority Key Identifier:
keyid:F1:80:8F:1A:BE:F8:E6:B5:9C:D4:35:9A:6B:44:81:FC:7C:96:31:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:19:ba:c0:6b:2c:9c:3f:99:de:65:2d:26:0e:de:72:05:21:
9c:af:04:d6:ce:9c:97:dc:31:a5:5e:19:9f:3b:38:e1:66:e5:
1e:3c:00:c6:bd:61:ce:0e:b0:65:1d:4d:b9:f3:72:0e:24:6a:
d5:a5:de:09:04:79:88:9f:a9:dc:af:d0:02:87:a8:7a:f3:c2:
ca:01:c4:30:01:7d:80:b0:47:e1:0b:98:61:03:8f:08:d0:e8:
e0:f6:1e:e1:14:9b:0a:0b:c6:16:b0:9a:43:2f:d3:0d:a7:6d:
6d:b1:f7:ce:a7:be:68:e8:6b:13:f6:f7:42:41:79:34:cf:cd:
05:9e:5c:6a:40:3d:46:45:21:cd:b7:21:ad:f5:78:54:09:be:
1b:be:e9:ca:6b:1d:d8:c4:c9:2a:58:51:ea:47:64:2b:19:7e:
f5:39:43:74:67:7c:28:0b:63:f2:62:1b:1f:2a:75:9c:68:6d:
07:30:72:bf:61:0e:93:5f:a7:0e:98:00:40:64:00:37:10:e9:
5f:94:5b:2e:f3:c1:c9:4f:6e:d0:03:40:71:36:98:10:5e:7c:
9e:0b:b5:ae:bf:40:6f:e7:7d:f6:61:d7:67:38:bc:ea:b1:d8:
b0:31:ef:c7:1c:e0:33:45:9e:3d:09:c4:eb:ad:30:25:25:7b:
97:07:25:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:40:53 2025 by rpki-client