Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft
File: 8YUnDoMZPTJp983p2ggIse_1Uq4.mft (raw, json)
Hash identifier: B0HNsQcFTAgjag+PMOsI4V+oT1IT31XQmahol9ns4Eg=
Subject key identifier: AA:AD:D3:B2:18:3D:48:AA:FB:AD:5A:C9:A8:E2:63:6F:CA:15:27:D4
Authority key identifier: F1:85:27:0E:83:19:3D:32:69:F7:CD:E9:DA:08:08:B1:EF:F5:52:AE
Certificate issuer: /CN=f185270e83193d3269f7cde9da0808b1eff552ae
Certificate serial: 0199FB0F078A981F8155EED35B02C6612113
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8YUnDoMZPTJp983p2ggIse_1Uq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft
Manifest number: 0660
Signing time: Sun 19 Oct 2025 06:01:30 +0000
Manifest this update: Sun 19 Oct 2025 06:01:30 +0000
Manifest next update: Mon 20 Oct 2025 06:01:30 +0000
Files and hashes: 1: 8YUnDoMZPTJp983p2ggIse_1Uq4.crl (hash: rfIIfEwaM/EDCyulRTeXLa7UYb1xSbTe0zWd5CJFKfw=)
2: yze2rcJ637RL8GZo48PGt4d8nY8.roa (hash: H8OFKVxMCjsZaNXr8DPY/I8jq0ZMaggP4bkjrXxk6OY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8YUnDoMZPTJp983p2ggIse_1Uq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:07:8a:98:1f:81:55:ee:d3:5b:02:c6:61:21:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f185270e83193d3269f7cde9da0808b1eff552ae
Validity
Not Before: Oct 19 06:01:30 2025 GMT
Not After : Oct 20 06:01:30 2025 GMT
Subject: CN=aaadd3b2183d48aafbad5ac9a8e2636fca1527d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e3:90:f2:63:fc:28:fa:e6:51:30:3d:d2:c9:
81:eb:12:5b:83:bd:db:a8:12:97:f8:bd:17:72:eb:
d1:bb:9e:e6:3d:fa:c8:b5:58:dd:7e:b9:26:e9:31:
5e:25:50:48:3c:0e:c8:4c:af:06:14:de:75:4d:51:
90:d7:8b:ef:ad:3c:53:95:a5:fd:bf:74:df:7c:b9:
d8:7a:ab:10:0f:03:c8:97:d3:e4:9b:91:b1:23:0f:
a4:d3:27:d6:e4:aa:07:da:50:ed:8e:b9:49:33:e5:
6c:fb:d2:8a:46:79:bf:91:c9:97:c2:90:83:d7:4c:
8c:21:8f:dd:97:88:ca:28:b4:a9:de:0a:c5:16:83:
fc:5f:66:d0:e1:f5:a9:46:f8:e3:d3:1f:66:87:e7:
0a:3f:02:18:fe:3d:65:d1:a0:e6:9b:12:ac:c8:36:
fe:9b:53:58:f7:41:b8:8d:6b:d4:46:fd:92:7f:4e:
42:b7:97:ab:aa:67:8b:a5:d1:56:86:c7:7c:57:11:
a3:5a:21:ed:10:8e:3b:a5:a0:72:b3:54:8e:f0:47:
bf:ac:a4:90:ed:e5:69:03:b3:9b:9f:84:7b:47:aa:
ec:1b:55:74:e8:9b:c3:67:4a:3e:5f:34:bc:41:20:
d1:9d:f4:28:de:c2:09:82:12:63:0f:de:26:f5:00:
8b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:AD:D3:B2:18:3D:48:AA:FB:AD:5A:C9:A8:E2:63:6F:CA:15:27:D4
X509v3 Authority Key Identifier:
keyid:F1:85:27:0E:83:19:3D:32:69:F7:CD:E9:DA:08:08:B1:EF:F5:52:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8YUnDoMZPTJp983p2ggIse_1Uq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:9a:1f:05:cc:57:d6:35:22:b3:f6:e1:82:6b:21:f1:3d:34:
25:f7:d1:c5:b8:60:1a:a3:7f:75:f1:70:2c:0d:f7:0c:c8:bf:
1d:13:5e:05:49:8f:af:02:9f:9e:bb:54:01:c3:56:b1:1f:a5:
92:22:99:7f:cf:aa:2d:e9:7d:8e:71:6d:3e:08:a5:0c:b8:76:
a2:a8:4a:a4:53:ac:e5:76:50:cb:cb:50:43:29:e0:be:9a:72:
b2:42:c7:3f:90:76:c4:95:b1:ac:32:3e:eb:20:4d:9c:f0:ce:
dc:0f:1c:35:e9:b9:a9:a9:3c:85:54:d5:11:8b:83:42:73:1c:
05:a2:1f:4a:05:52:fa:56:4a:b9:47:70:91:d7:68:09:31:d3:
8c:7d:24:c6:14:cf:cf:d8:1a:75:47:df:d1:f5:42:44:4e:36:
e0:47:38:f1:49:fb:ef:fc:a3:fa:61:58:f2:8c:55:c1:66:4e:
2d:65:0c:4a:b4:bf:3d:55:cb:39:5b:3b:a0:48:8c:e3:60:30:
cf:e7:c8:a6:19:6d:ea:53:03:61:10:8f:56:ef:96:2d:e5:e1:
f2:53:d7:7c:1f:04:08:ee:96:c3:ab:6e:30:7b:c9:58:b6:68:
5e:a9:1d:32:c5:0d:0f:07:be:6e:ea:6f:e0:b5:7e:f8:04:55:
78:7e:23:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:17 2025 by rpki-client