Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft
File: 8YUnDoMZPTJp983p2ggIse_1Uq4.mft (raw, json)
Hash identifier: CxsU83cGVB86O/RKLo/TksFD1NfOi7p3BgPclpTwTYY=
Subject key identifier: 45:C5:37:92:50:A2:BC:64:35:90:A6:F0:51:9A:DA:48:09:7E:15:CC
Authority key identifier: F1:85:27:0E:83:19:3D:32:69:F7:CD:E9:DA:08:08:B1:EF:F5:52:AE
Certificate issuer: /CN=f185270e83193d3269f7cde9da0808b1eff552ae
Certificate serial: 019A50076FAD1373443A59C624A1F82ECA6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8YUnDoMZPTJp983p2ggIse_1Uq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft
Manifest number: 068C
Signing time: Tue 04 Nov 2025 18:00:55 +0000
Manifest this update: Tue 04 Nov 2025 18:00:55 +0000
Manifest next update: Wed 05 Nov 2025 18:00:55 +0000
Files and hashes: 1: 8YUnDoMZPTJp983p2ggIse_1Uq4.crl (hash: rtfsWrEJWi7JRtLfQF9x8ihSrwAgzlHYd3CDK0HyLJU=)
2: yze2rcJ637RL8GZo48PGt4d8nY8.roa (hash: H8OFKVxMCjsZaNXr8DPY/I8jq0ZMaggP4bkjrXxk6OY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8YUnDoMZPTJp983p2ggIse_1Uq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:6f:ad:13:73:44:3a:59:c6:24:a1:f8:2e:ca:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f185270e83193d3269f7cde9da0808b1eff552ae
Validity
Not Before: Nov 4 18:00:55 2025 GMT
Not After : Nov 5 18:00:55 2025 GMT
Subject: CN=45c5379250a2bc643590a6f0519ada48097e15cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f1:40:e6:af:d4:e0:0b:ce:e9:65:01:1c:6d:
17:a1:eb:5a:5b:70:31:bd:3b:05:10:05:8f:6b:7e:
4d:1e:67:e9:dd:df:c6:d5:37:84:4e:26:84:8d:07:
76:1c:0b:fb:58:da:fe:14:f6:da:bc:a7:4e:5c:e8:
5b:0e:6c:63:47:8c:91:c8:d4:a3:b1:96:e8:ed:b6:
44:c1:a2:eb:24:d1:df:57:39:df:04:55:45:6e:a9:
25:69:2e:c0:22:b6:0c:40:3a:be:17:c4:28:c9:15:
fe:4d:ed:94:e6:53:53:bb:3f:03:6a:e3:e4:d0:a4:
e3:ba:1a:c0:1c:0e:b1:28:62:a9:d5:49:58:f6:c8:
c4:89:8f:12:72:35:59:11:f7:2f:29:be:76:f9:24:
ef:78:52:12:91:c8:19:e1:a5:b8:15:a5:6a:5e:78:
c3:59:30:28:7f:71:63:1c:03:4d:cc:32:25:d3:35:
c1:4e:00:21:17:02:3b:08:11:c6:cf:6b:3f:c5:78:
78:4c:c0:0c:0d:a0:f3:ed:77:98:c4:04:f3:b6:78:
7c:06:45:16:df:4f:c0:05:9c:6f:7e:89:fd:16:2d:
e0:9f:8f:e9:8f:6b:bc:34:9b:fe:f0:9c:e6:a8:b0:
29:55:91:e4:6e:45:af:f1:1a:9b:af:fb:ce:52:6b:
04:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:C5:37:92:50:A2:BC:64:35:90:A6:F0:51:9A:DA:48:09:7E:15:CC
X509v3 Authority Key Identifier:
keyid:F1:85:27:0E:83:19:3D:32:69:F7:CD:E9:DA:08:08:B1:EF:F5:52:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8YUnDoMZPTJp983p2ggIse_1Uq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:f5:30:c6:cc:79:a0:61:3e:6d:ff:5f:d5:a7:7a:1b:ea:6b:
02:a0:ee:fe:a3:0d:41:d4:06:8c:db:0f:72:26:80:64:c6:a4:
1e:38:ec:e6:ff:06:01:d6:b5:47:49:c6:07:5d:c8:e5:91:1f:
b3:3e:65:4f:79:7d:12:29:94:99:af:e8:fd:04:59:06:36:22:
05:81:da:62:64:66:45:f4:1c:b1:bb:79:c0:a1:f5:ae:b6:a1:
a4:1e:d5:44:8f:18:d8:c2:f7:47:1a:5a:d6:f0:f3:7d:16:16:
4f:fc:73:75:84:0b:89:87:91:56:5e:be:18:a7:ba:06:c6:4f:
8d:56:5c:3b:85:57:d7:6d:85:86:5e:cb:aa:18:41:4b:d0:7f:
ce:45:c6:64:b7:55:12:e3:af:ee:d3:25:95:74:8e:1e:2f:0a:
62:25:e9:af:7c:74:33:26:4e:c5:d5:c3:87:bb:99:01:76:3b:
9e:65:31:a7:12:8b:71:8f:72:ce:a1:61:dc:a2:76:b7:89:b1:
04:04:6c:7a:bf:2f:60:0c:2f:db:71:e3:52:ae:ff:b4:cd:8c:
2b:77:58:c7:15:ea:b4:ca:e6:a1:33:85:b7:f1:c6:3f:0c:d1:
5e:ab:fa:80:5c:c3:c5:66:74:59:e2:55:3d:05:68:4a:29:a7:
ad:4b:71:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:16:27 2025 by rpki-client