Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.mft
File: 8yyk3zLccfQREE-UtRrBS2Z1gks.mft (raw, json)
Hash identifier: L+HX5LsLvWB0fekXWa7na0VvMv+dLkOSgPyMsy014nc=
Subject key identifier: A1:27:E3:6F:ED:AC:38:A1:A4:B4:29:A2:59:21:0C:70:F0:89:4D:5D
Authority key identifier: F3:2C:A4:DF:32:DC:71:F4:11:10:4F:94:B5:1A:C1:4B:66:75:82:4B
Certificate issuer: /CN=f32ca4df32dc71f411104f94b51ac14b6675824b
Certificate serial: 0199FAA11E14FF32260FC0B07C204E47962A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yyk3zLccfQREE-UtRrBS2Z1gks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.mft
Manifest number: 011F
Signing time: Sun 19 Oct 2025 04:01:26 +0000
Manifest this update: Sun 19 Oct 2025 04:01:26 +0000
Manifest next update: Mon 20 Oct 2025 04:01:26 +0000
Files and hashes: 1: 8yyk3zLccfQREE-UtRrBS2Z1gks.crl (hash: Stu1A9u7UnqDcxjQGHf2FW/qB+A2W/hXe8ofIyNPrAc=)
2: AhlTJGVn8a8rsbPjwh1Of-tiZ-E.roa (hash: PvYJX4JVcBus78Efd+Q4dFc2SvUKpYf6MzmiID5icj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yyk3zLccfQREE-UtRrBS2Z1gks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a1:1e:14:ff:32:26:0f:c0:b0:7c:20:4e:47:96:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f32ca4df32dc71f411104f94b51ac14b6675824b
Validity
Not Before: Oct 19 04:01:26 2025 GMT
Not After : Oct 20 04:01:26 2025 GMT
Subject: CN=a127e36fedac38a1a4b429a259210c70f0894d5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ad:ea:80:43:88:09:d3:d0:4b:85:fc:10:6c:
57:20:b5:d8:3f:94:2c:01:04:0c:fd:54:c4:9a:4f:
c3:ae:be:11:6b:bb:32:ea:8d:42:21:14:b1:2b:98:
86:6a:04:99:f6:d2:3a:d6:d2:00:1d:3a:cb:bc:23:
ad:27:38:cf:e6:62:7f:c0:b3:11:93:76:a6:1c:46:
8b:96:42:60:d7:4c:bb:8e:ef:93:81:86:9a:90:ad:
d8:1e:60:51:58:d9:85:fd:d2:96:99:ce:94:de:b0:
e6:61:ee:36:a9:c3:46:2e:a8:20:b5:12:ad:66:06:
e2:49:a0:66:c8:11:04:b3:95:df:25:86:ea:95:02:
c6:e9:c3:db:bb:8f:2a:cd:ba:15:7e:8a:63:56:7a:
67:56:78:a5:f7:1c:07:9e:4f:3f:ac:67:eb:1b:c4:
27:2f:68:a9:38:86:f3:2c:99:01:10:2a:9e:6f:88:
fe:15:c5:35:85:07:31:fb:fb:f0:ed:19:db:61:53:
47:2d:67:0b:45:4e:d9:db:d6:e3:88:d0:1d:2f:59:
51:c3:a4:9d:ae:b7:9a:54:c5:d5:91:9a:f2:b3:f1:
ae:24:96:6c:64:89:34:e3:8a:9d:af:13:6c:ac:e2:
99:d8:3c:39:a5:cb:89:64:df:65:c3:a6:0b:af:21:
ce:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:27:E3:6F:ED:AC:38:A1:A4:B4:29:A2:59:21:0C:70:F0:89:4D:5D
X509v3 Authority Key Identifier:
keyid:F3:2C:A4:DF:32:DC:71:F4:11:10:4F:94:B5:1A:C1:4B:66:75:82:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yyk3zLccfQREE-UtRrBS2Z1gks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:ec:c4:63:1c:5f:b3:d6:05:59:59:91:97:e4:37:68:bf:ab:
09:31:b7:10:a1:34:6d:6e:f4:c7:bd:89:b1:95:a7:ca:35:80:
db:f1:8f:46:56:06:0e:d3:ea:79:b6:b3:55:68:f6:fd:5f:ef:
7e:9c:91:55:de:2b:64:45:92:3c:ca:74:ab:e5:16:02:7f:c9:
8a:32:9b:46:0f:2d:fb:19:bb:40:4c:5d:ca:c3:84:43:00:65:
f2:4f:6c:6e:46:7d:15:df:14:3f:b5:d4:89:0b:58:d2:a7:d3:
bc:81:f5:fd:17:86:ee:b4:d3:44:39:b5:0b:3e:e5:c4:e5:36:
00:d2:c4:83:8a:ea:05:ec:7a:18:87:de:4a:14:a1:f4:1b:6f:
4f:d5:34:36:0b:fc:65:7b:3f:04:d8:28:c5:63:63:3b:de:9d:
72:e7:1b:e8:50:4c:a3:c3:6b:de:65:56:1d:44:d1:cf:91:e5:
08:a3:3a:1a:da:93:97:78:d4:e1:6f:1f:e9:91:d5:4e:fa:59:
6f:c2:a8:cd:06:93:55:a0:52:7c:88:71:79:1b:6f:b0:64:a4:
df:d6:08:66:54:df:a1:ae:2f:17:47:d4:39:41:af:65:d7:47:
2d:44:40:d3:cf:d5:88:1f:6d:f2:f3:29:34:c7:6e:c7:ba:57:
c0:0e:6e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:57:37 2025 by rpki-client