Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft
File: 8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft (raw, json)
Hash identifier: egR8LTw9Or8pfQubhfQwiOhDMwT0Z3kBbtVsLVDOpsU=
Subject key identifier: D5:82:9B:0E:6F:2A:6C:CE:46:3B:EF:77:28:CD:87:D4:78:80:83:67
Authority key identifier: F1:4A:63:18:B2:ED:6D:0C:82:34:F9:82:08:F8:8D:E0:E9:D4:69:8E
Certificate issuer: /CN=f14a6318b2ed6d0c8234f98208f88de0e9d4698e
Certificate serial: 01984DAFCB2709CEA6D6C3BECE81205A1A2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UpjGLLtbQyCNPmCCPiN4OnUaY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft
Manifest number: 108F
Signing time: Sun 27 Jul 2025 21:00:23 +0000
Manifest this update: Sun 27 Jul 2025 21:00:23 +0000
Manifest next update: Mon 28 Jul 2025 21:00:23 +0000
Files and hashes: 1: 8UpjGLLtbQyCNPmCCPiN4OnUaY4.crl (hash: MyPPX3k1e896/RiUVcc2D4JBc/TFOO66utIJc2Z1J6c=)
2: HEjVBYhRooI93fkmZsfGrrmmosQ.roa (hash: 4FmqxtW6POL9+QvLglepn8JIFD+UHvfa+cN2eKjIrrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8UpjGLLtbQyCNPmCCPiN4OnUaY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 18:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4d:af:cb:27:09:ce:a6:d6:c3:be:ce:81:20:5a:1a:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f14a6318b2ed6d0c8234f98208f88de0e9d4698e
Validity
Not Before: Jul 27 21:00:23 2025 GMT
Not After : Jul 28 21:00:23 2025 GMT
Subject: CN=d5829b0e6f2a6cce463bef7728cd87d478808367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:74:06:f4:03:1e:4e:cc:a1:7b:b0:01:c9:18:
4f:fb:28:40:6b:56:1b:75:54:b3:b7:56:1b:cc:2b:
d7:ea:5a:99:e6:6d:a8:5d:34:6f:ed:14:39:3d:1b:
9f:40:2e:10:ba:e2:05:eb:74:c2:12:75:e8:cb:64:
41:f8:66:cc:ad:81:05:1b:00:ce:02:05:15:8b:cb:
25:3e:4e:81:38:f5:fd:d2:b3:a3:61:a1:55:49:a0:
d1:85:24:e0:36:64:8a:88:66:cf:d9:ad:97:25:0f:
3b:f7:9c:1c:c2:ec:1c:b9:cf:83:0e:eb:94:64:95:
8a:61:9b:cd:2a:b8:26:2f:04:06:67:3b:21:86:29:
f8:db:cd:86:20:0f:2b:fd:05:b8:5e:a9:be:e9:c6:
14:98:3f:49:e8:fb:97:a3:3f:cd:f8:d6:4d:ce:7c:
a3:d3:19:a0:42:67:63:7c:9f:83:ba:ea:f0:c5:aa:
d1:0d:df:42:ed:1c:9a:08:f9:e2:73:fe:5c:08:d2:
d9:89:db:77:04:75:fb:c3:74:d8:78:42:cd:6e:2e:
e7:8f:1a:d1:23:b8:7d:6f:08:2f:65:10:f0:26:9b:
d6:ab:6c:b9:70:11:54:ce:c9:47:2c:27:e0:06:1a:
77:77:a4:3d:96:12:30:19:7b:8d:a4:8f:37:f8:58:
4d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:82:9B:0E:6F:2A:6C:CE:46:3B:EF:77:28:CD:87:D4:78:80:83:67
X509v3 Authority Key Identifier:
keyid:F1:4A:63:18:B2:ED:6D:0C:82:34:F9:82:08:F8:8D:E0:E9:D4:69:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UpjGLLtbQyCNPmCCPiN4OnUaY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:5a:9d:d5:7f:e4:c0:75:b4:a9:af:13:90:8f:13:c8:8c:9e:
4a:8d:44:c2:b9:17:8b:e0:87:f4:f0:87:69:bf:07:d5:e7:64:
ea:18:f2:7b:1f:e7:62:fb:ec:61:0c:ca:ce:79:eb:01:80:75:
3e:5e:f6:7e:f3:14:ae:9d:d6:04:d7:2f:55:9d:36:5c:02:4c:
45:82:71:42:22:15:50:26:62:de:b4:23:95:bf:4e:db:b6:d8:
a5:e1:06:68:2f:a5:be:e1:6a:00:d9:55:9d:44:1e:cc:92:fc:
a1:77:8b:1a:84:95:15:ea:32:16:83:81:ef:12:a2:b9:17:ab:
6f:f5:bb:1b:68:01:63:b3:a7:ee:37:ae:74:df:57:82:97:84:
52:9a:58:90:85:c3:27:83:1f:ab:fd:f7:3f:6a:84:13:22:d2:
f6:0f:70:30:13:c1:d4:ad:09:36:34:74:28:58:6c:27:bc:dd:
0f:b2:f4:4c:1e:2e:33:33:13:d8:76:7e:89:2d:d2:85:a5:82:
95:d0:b0:dd:64:d9:ba:02:59:a2:aa:a1:03:20:43:37:19:3a:
20:bd:cd:7a:ab:aa:a9:9b:c2:e4:53:cf:0b:aa:fa:0f:c7:1b:
c2:d5:87:3d:e2:19:b4:12:62:c9:69:61:fc:84:75:6a:fe:00:
68:dd:b6:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 01:53:52 2025 by rpki-client