Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.mft
File: 8yyk3zLccfQREE-UtRrBS2Z1gks.mft (raw, json)
Hash identifier: 8lqHzJEogrkqX0U9IVeMRge/zJ2aT2lmIR8qeafZw9Q=
Subject key identifier: 43:B8:03:23:D2:EB:F4:03:55:D8:84:90:5D:A8:1D:B6:B7:A2:BF:CC
Authority key identifier: F3:2C:A4:DF:32:DC:71:F4:11:10:4F:94:B5:1A:C1:4B:66:75:82:4B
Certificate issuer: /CN=f32ca4df32dc71f411104f94b51ac14b6675824b
Certificate serial: 0198D51611635D2D435F5ABA307719C69BA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yyk3zLccfQREE-UtRrBS2Z1gks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.mft
Manifest number: 87
Signing time: Sat 23 Aug 2025 04:00:49 +0000
Manifest this update: Sat 23 Aug 2025 04:00:49 +0000
Manifest next update: Sun 24 Aug 2025 04:00:49 +0000
Files and hashes: 1: 8yyk3zLccfQREE-UtRrBS2Z1gks.crl (hash: 6REsWPHNCU25kvJTPPkEP8QgWy/61NJIeQeRHUAK2Y0=)
2: AhlTJGVn8a8rsbPjwh1Of-tiZ-E.roa (hash: PvYJX4JVcBus78Efd+Q4dFc2SvUKpYf6MzmiID5icj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yyk3zLccfQREE-UtRrBS2Z1gks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:11:63:5d:2d:43:5f:5a:ba:30:77:19:c6:9b:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f32ca4df32dc71f411104f94b51ac14b6675824b
Validity
Not Before: Aug 23 04:00:49 2025 GMT
Not After : Aug 24 04:00:49 2025 GMT
Subject: CN=43b80323d2ebf40355d884905da81db6b7a2bfcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:dd:5e:32:bd:64:ae:04:c2:9a:3a:8a:a6:47:
fa:3a:ac:25:a3:8d:48:7c:4a:b1:9f:76:85:e4:6e:
42:0c:3c:63:24:79:57:4b:ee:60:48:bd:0a:d1:d4:
60:a5:cd:9b:37:f2:1a:7d:17:69:98:eb:05:7a:a3:
71:b2:a2:9e:b6:11:c7:d9:fb:66:02:03:2a:9f:28:
58:51:b8:eb:55:f5:39:57:ed:ab:a7:69:04:a9:b4:
de:46:38:42:72:89:bd:f1:37:42:e5:30:17:f4:e3:
01:99:0f:20:57:f3:7f:4c:c5:55:61:65:75:5d:c5:
d3:2e:75:af:cd:0c:9f:58:e8:15:96:09:fb:3f:d9:
b5:df:84:b0:19:dd:f8:5c:ad:02:78:69:70:84:09:
5e:23:4c:59:3c:0b:63:ea:fe:a4:ba:a9:a4:cc:a8:
6b:bd:b2:00:04:90:49:3b:33:5e:61:88:48:32:5b:
92:be:ac:05:b2:6d:cb:e7:85:3a:3b:9b:8f:2b:0d:
4f:1b:d7:67:73:06:fe:5f:7d:b8:0c:40:2e:fe:44:
13:6f:20:64:6c:f0:a5:55:63:73:ea:ea:c7:57:fe:
c6:c6:90:a5:68:1c:69:8b:03:92:17:fc:02:c9:de:
bd:5e:bc:6d:c3:70:f5:8e:35:cb:e8:a8:bf:db:fa:
47:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B8:03:23:D2:EB:F4:03:55:D8:84:90:5D:A8:1D:B6:B7:A2:BF:CC
X509v3 Authority Key Identifier:
keyid:F3:2C:A4:DF:32:DC:71:F4:11:10:4F:94:B5:1A:C1:4B:66:75:82:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yyk3zLccfQREE-UtRrBS2Z1gks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:a2:66:4f:b4:0b:81:cd:4b:70:d6:1a:c8:bc:ab:ec:64:7a:
76:03:dc:e9:6e:c4:01:61:6f:01:8a:40:e6:28:51:78:06:c7:
22:e6:72:59:72:be:9a:b0:d2:00:87:65:3f:26:1b:ed:4a:bb:
a0:bb:25:3e:6d:97:78:e5:f4:ae:0a:50:9c:8a:97:a6:3f:9f:
6f:4a:55:b3:39:0a:41:71:1b:d0:bf:86:04:0b:58:ce:0a:23:
49:81:0a:3d:58:f8:22:d5:fc:59:f9:96:9e:d7:e7:a3:38:84:
76:83:b0:22:37:01:e7:46:84:f3:e3:92:27:d0:2e:eb:63:dd:
03:c3:35:f6:63:60:24:ff:4b:e7:7f:a5:e6:d2:d8:a4:70:30:
2e:d6:5f:30:ee:e4:d6:55:ba:90:e8:62:ca:82:1c:a5:64:7f:
da:be:1b:52:a8:2a:11:0a:35:17:e5:5b:84:c1:cb:6d:ab:55:
fb:42:a8:15:54:52:f1:4d:31:87:24:86:04:9b:64:db:e7:56:
21:52:a0:4a:69:34:43:21:3b:54:67:41:98:12:e6:75:3c:36:
ca:65:5f:2b:7e:36:14:e5:c3:1a:76:ff:a8:35:01:f7:4d:27:
88:df:3f:ca:21:e8:de:c4:af:cd:42:86:42:b8:f2:5a:cc:e6:
85:64:ff:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:06 2025 by rpki-client