Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.mft
File: 8Uebg8Ug14REXCSCi6tjPw1wLPM.mft (raw, json)
Hash identifier: EwCSHxhuTNb3mCmtzATpV92KuheVtbpWTrjZPDyx4GQ=
Subject key identifier: 96:0B:73:A3:7C:2C:8D:84:91:07:71:82:E1:59:8B:A0:4D:20:0C:57
Authority key identifier: F1:47:9B:83:C5:20:D7:84:44:5C:24:82:8B:AB:63:3F:0D:70:2C:F3
Certificate issuer: /CN=f1479b83c520d784445c24828bab633f0d702cf3
Certificate serial: 019849D37A46188EE180DA04439212A436C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Uebg8Ug14REXCSCi6tjPw1wLPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.mft
Manifest number: 1631
Signing time: Sun 27 Jul 2025 03:00:52 +0000
Manifest this update: Sun 27 Jul 2025 03:00:52 +0000
Manifest next update: Mon 28 Jul 2025 03:00:52 +0000
Files and hashes: 1: 8Uebg8Ug14REXCSCi6tjPw1wLPM.crl (hash: KAMDhckZmTJ7TH/9BCBfWgvBlRW6Hw2+aZHPfNhWTkg=)
2: TQKhSi8Awccw4XCNSJ1aruVNLAk.roa (hash: sIBHk/GyN9LYf2GBmbzqMybhc4XcRHVc+6LBWV3OWQY=)
3: UzzaZe2IBnqaAlUC3PzUQU79vek.roa (hash: 0lOgrSdqev4Q++AWXwQLula9bZznJKXyC0Jsns6HfWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Uebg8Ug14REXCSCi6tjPw1wLPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:7a:46:18:8e:e1:80:da:04:43:92:12:a4:36:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1479b83c520d784445c24828bab633f0d702cf3
Validity
Not Before: Jul 27 03:00:52 2025 GMT
Not After : Jul 28 03:00:52 2025 GMT
Subject: CN=960b73a37c2c8d8491077182e1598ba04d200c57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:99:dc:46:78:71:c6:4a:a1:6b:d8:09:c2:37:
de:b8:05:01:56:94:a9:49:c0:d1:24:13:e3:d3:df:
2e:6c:a2:0e:f3:ee:68:57:ea:68:c5:19:e7:18:04:
47:1e:4a:ea:63:11:58:58:5b:5b:01:5a:26:06:43:
80:d9:ec:2f:87:f0:c7:6a:0b:84:07:f5:5a:2c:06:
08:92:39:1b:fd:5d:7f:ec:34:d8:61:d6:47:8f:b2:
1e:2a:44:ea:71:45:8b:14:52:2d:6e:6b:23:fd:7c:
d5:4d:45:c3:6a:4e:5a:1c:38:40:63:a4:df:0d:98:
7d:15:15:f0:4c:e8:e0:a9:eb:c0:9b:f8:7c:ad:d3:
11:24:8e:50:d4:db:6b:fc:cf:c3:cc:f2:9b:40:35:
d9:56:00:90:f8:85:74:9d:68:e3:85:91:90:1d:65:
6d:2b:6f:17:92:6b:d8:22:01:c0:3d:b2:e4:e7:e1:
64:e4:4d:c7:66:13:45:05:13:2d:bb:4e:7e:28:72:
56:e4:73:dd:63:13:e4:ed:e3:e8:7b:68:1b:9d:c0:
ee:49:61:60:fd:29:73:3b:5c:7e:4e:21:74:5c:d2:
18:d8:bb:30:ea:ce:cb:67:df:c1:ba:a4:f0:c0:55:
69:ba:a4:ee:3a:44:ec:c2:5b:ba:c2:90:ce:60:42:
f8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:0B:73:A3:7C:2C:8D:84:91:07:71:82:E1:59:8B:A0:4D:20:0C:57
X509v3 Authority Key Identifier:
keyid:F1:47:9B:83:C5:20:D7:84:44:5C:24:82:8B:AB:63:3F:0D:70:2C:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Uebg8Ug14REXCSCi6tjPw1wLPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:86:90:28:11:bd:3c:ca:d8:cb:f5:33:5f:0d:87:2f:e2:5c:
e0:b3:b6:84:05:f1:2f:df:3a:e5:36:3f:09:9c:e6:3b:c7:d2:
f6:79:94:90:52:b5:91:78:ca:28:84:7a:00:5c:10:87:45:bb:
07:2a:6c:75:cd:e7:43:4c:49:c7:36:38:90:b4:0b:3f:99:86:
86:94:53:0f:1a:6f:2d:ed:cd:7f:30:8f:cb:08:1c:6b:23:f4:
c8:df:4f:6e:54:66:2b:c8:59:3b:8f:12:9e:06:42:ec:e2:db:
22:27:d5:53:eb:ed:b3:9c:ab:d1:76:f7:54:6a:5a:26:97:a0:
d7:ef:c7:f1:1b:2f:57:95:d2:e4:02:f7:5e:b4:ad:2c:cc:14:
b7:b3:d1:01:ac:be:bf:cb:d1:d3:f2:c9:b4:58:05:07:06:5f:
9e:d2:49:a3:f0:35:8d:22:60:f4:ca:ca:a0:25:8d:28:c4:d2:
5a:47:3f:c4:99:f5:10:5b:01:a6:90:11:28:5a:c2:ee:9f:fb:
bc:c4:89:51:d5:92:e4:d7:49:1f:1a:54:be:e6:0b:a0:10:16:
92:9f:68:fd:1b:2b:47:09:d1:1f:f6:7f:93:bd:ad:0f:6e:96:
64:2e:c4:9d:e3:69:08:e2:7a:b9:d2:63:a9:fe:fc:61:62:4d:
1e:ee:8c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:07:24 2025 by rpki-client