Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft
File: 8UPRPHu9KqFfVnfBOawzyGeHnyw.mft (raw, json)
Hash identifier: ILtmVsg+iuFUXl50FSKKkgXr1mwHheonU/HgXTM8DVo=
Subject key identifier: D4:3D:B0:F1:AA:A8:49:FE:89:61:F4:32:3F:F1:42:21:CC:FF:D5:CE
Authority key identifier: F1:43:D1:3C:7B:BD:2A:A1:5F:56:77:C1:39:AC:33:C8:67:87:9F:2C
Certificate issuer: /CN=f143d13c7bbd2aa15f5677c139ac33c867879f2c
Certificate serial: 0198451A9E6068237C7D354B7DCF22C52BB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UPRPHu9KqFfVnfBOawzyGeHnyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft
Manifest number: 064F
Signing time: Sat 26 Jul 2025 05:00:28 +0000
Manifest this update: Sat 26 Jul 2025 05:00:28 +0000
Manifest next update: Sun 27 Jul 2025 05:00:28 +0000
Files and hashes: 1: 8UPRPHu9KqFfVnfBOawzyGeHnyw.crl (hash: 8zAjTv4nrGOKhDD9AKg1oehRhfa/OVNllhsFvB5sT/U=)
2: UMmv-WY7B5qYJViInJvlNV476mE.roa (hash: jHHOgpNZRXbrpDROEuRDFCxUXMl5uaCZV9NM+NW4eXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8UPRPHu9KqFfVnfBOawzyGeHnyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:1a:9e:60:68:23:7c:7d:35:4b:7d:cf:22:c5:2b:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f143d13c7bbd2aa15f5677c139ac33c867879f2c
Validity
Not Before: Jul 26 05:00:28 2025 GMT
Not After : Jul 27 05:00:28 2025 GMT
Subject: CN=d43db0f1aaa849fe8961f4323ff14221ccffd5ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d7:e2:7c:12:c5:a9:73:4a:94:f6:0b:1d:98:
2f:f3:62:01:22:d2:49:b0:f2:2d:d3:ce:5c:03:8d:
21:c1:cf:c2:bb:66:ff:02:e1:a1:e0:b2:e4:af:5f:
0f:37:0e:8d:c5:5b:a9:54:31:6e:5a:27:f9:bf:de:
8a:07:06:6d:86:12:78:bd:b4:2f:cf:da:7c:d4:21:
61:f3:1c:30:45:62:52:8a:a3:cf:be:96:17:df:02:
3f:7e:3f:00:a8:eb:b0:67:82:a0:38:96:0f:85:97:
38:62:98:32:fd:c4:c3:e3:ca:cc:8c:cf:9c:4f:e4:
ed:d5:e4:6f:20:ee:55:f4:86:1a:78:1a:30:14:b1:
e8:c7:40:3a:a1:93:6c:26:72:ed:fd:b6:37:16:65:
7c:c4:24:7a:7a:a3:29:ab:d6:d8:93:30:91:41:11:
be:36:e2:1a:fd:de:d1:91:4f:9e:ab:91:7f:81:d1:
96:88:b6:0c:0a:03:e2:37:09:b5:52:b9:b5:94:b9:
7c:6f:6b:19:5f:e5:3d:01:25:73:ae:98:44:63:91:
28:76:37:3c:9b:f8:33:af:9a:ea:76:51:e0:f9:7a:
26:d3:88:2e:d5:95:ac:3f:fc:f0:c1:31:e0:6d:da:
8c:74:4f:2d:55:dd:5a:05:8e:ac:87:0a:85:0e:77:
47:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:3D:B0:F1:AA:A8:49:FE:89:61:F4:32:3F:F1:42:21:CC:FF:D5:CE
X509v3 Authority Key Identifier:
keyid:F1:43:D1:3C:7B:BD:2A:A1:5F:56:77:C1:39:AC:33:C8:67:87:9F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UPRPHu9KqFfVnfBOawzyGeHnyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:11:ac:84:fb:06:c2:4f:e7:36:53:83:64:82:3a:a4:5a:8b:
09:da:98:fe:43:7a:a4:43:b0:ca:65:4c:c9:ea:bb:a4:25:34:
7e:70:64:6b:0f:79:f2:5e:61:87:5b:f7:de:be:00:45:c8:48:
03:fb:39:52:ea:32:8d:65:f4:a6:6f:25:3b:bf:8d:15:c7:eb:
30:d6:70:f4:c6:dc:c8:ca:3b:cd:a5:19:4a:d7:73:09:16:62:
51:4e:06:b3:d1:7c:fc:39:48:a5:95:23:c0:84:65:07:68:22:
7c:94:8e:ed:dd:41:d1:07:d8:31:d4:53:81:04:b9:96:90:b3:
21:3c:4c:21:81:16:e1:2b:8c:5f:ed:7b:bb:74:d0:54:89:9f:
8b:b1:b2:6a:c9:6a:e5:c7:ea:92:73:ca:f5:09:90:32:a1:9b:
6c:ea:40:75:c8:e4:7c:ab:00:6b:24:8a:63:6c:a0:ce:73:ab:
55:68:74:37:18:af:67:08:37:12:89:38:01:06:88:7d:6f:92:
57:db:fc:20:be:2e:17:8e:18:ae:7f:64:ff:51:7a:81:ca:86:
52:7d:f8:1d:3d:74:a6:e3:5d:08:53:7b:3f:35:f7:43:43:ed:
f0:61:62:bb:64:4e:0f:bc:d4:d1:ca:75:63:c6:6e:71:29:2e:
17:ad:82:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:39:01 2025 by rpki-client