Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft
File: 8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft (raw, json)
Hash identifier: 4osZjt2/l7o9UrzKgZDfLSXghyTIb4ohyp5gqlyLcfY=
Subject key identifier: B8:F5:10:1D:E6:CB:5E:15:A7:A9:B5:AD:A9:7B:17:E9:DB:3D:14:52
Authority key identifier: F1:4A:63:18:B2:ED:6D:0C:82:34:F9:82:08:F8:8D:E0:E9:D4:69:8E
Certificate issuer: /CN=f14a6318b2ed6d0c8234f98208f88de0e9d4698e
Certificate serial: 0199C5A043BF4F7534F48FF93F72525C3090
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UpjGLLtbQyCNPmCCPiN4OnUaY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft
Manifest number: 1152
Signing time: Wed 08 Oct 2025 21:00:38 +0000
Manifest this update: Wed 08 Oct 2025 21:00:38 +0000
Manifest next update: Thu 09 Oct 2025 21:00:38 +0000
Files and hashes: 1: 8UpjGLLtbQyCNPmCCPiN4OnUaY4.crl (hash: LJ5Qge+CIyGQ6YHEcG/63yhfwPTMhU5OJFvcF3fFt2o=)
2: VJ4tqhsbAxvbZbMk4UpOcvURbX8.roa (hash: rFhoSBbOl1/XJywdO7kEvMzIk6v7w1dBiBMHnGzvKJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8UpjGLLtbQyCNPmCCPiN4OnUaY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c5:a0:43:bf:4f:75:34:f4:8f:f9:3f:72:52:5c:30:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f14a6318b2ed6d0c8234f98208f88de0e9d4698e
Validity
Not Before: Oct 8 21:00:38 2025 GMT
Not After : Oct 9 21:00:38 2025 GMT
Subject: CN=b8f5101de6cb5e15a7a9b5ada97b17e9db3d1452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:17:1c:4c:b4:76:3a:db:e9:54:7a:af:0c:1c:
0b:b0:a0:22:f7:32:4b:5c:62:e9:2d:7a:9e:61:c2:
20:45:e8:92:d8:4d:c1:58:5f:26:00:c5:4e:29:c3:
4f:c6:ea:d0:75:83:9b:38:8b:1b:a2:89:4f:8c:d4:
a4:39:ca:e8:08:e4:8c:f1:fb:30:58:e6:21:10:a4:
80:aa:27:75:0c:0e:1e:5f:cd:e3:22:79:06:ee:e7:
e6:a0:65:b7:ea:8c:1e:32:59:30:7c:54:7c:34:91:
b6:8c:4a:a0:a4:de:30:c3:d5:6b:de:79:ae:9b:22:
ce:3c:1c:d3:dc:44:ff:3e:ba:2f:58:8b:57:ea:dc:
f9:59:ba:d8:6c:93:16:06:b2:5d:e8:3f:fb:53:76:
11:3a:35:37:16:03:2f:4e:49:c3:0a:b2:a5:c4:97:
28:c7:ef:f7:fd:cf:88:c6:05:9b:b7:ed:9d:42:07:
0d:be:83:9a:61:c9:5e:d8:d7:65:da:ed:23:b3:97:
bd:34:05:3f:ae:56:0a:75:ca:e2:7b:e2:5e:06:b5:
3b:65:2e:15:fa:17:e1:b7:09:40:a9:99:29:56:39:
07:14:1e:59:63:46:70:e4:94:57:b0:50:89:f2:d7:
67:7a:cd:84:ab:b3:56:12:24:99:10:96:d2:1d:18:
b2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F5:10:1D:E6:CB:5E:15:A7:A9:B5:AD:A9:7B:17:E9:DB:3D:14:52
X509v3 Authority Key Identifier:
keyid:F1:4A:63:18:B2:ED:6D:0C:82:34:F9:82:08:F8:8D:E0:E9:D4:69:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UpjGLLtbQyCNPmCCPiN4OnUaY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:11:2c:a1:95:36:16:ff:3d:cd:09:41:f1:a0:38:37:40:75:
1f:6b:89:35:9a:08:6b:9d:e7:12:1c:36:59:51:67:0f:d0:6b:
a6:35:df:49:a0:fe:8a:30:50:bc:ed:38:a7:54:a1:ab:bc:7c:
72:62:95:ce:e8:86:8d:92:e6:ef:93:b1:7e:50:54:9b:9d:c1:
72:11:81:8e:31:d1:6b:03:12:da:72:74:6f:00:34:b3:5e:3f:
bf:36:3c:9c:79:38:89:e7:d6:e5:80:c2:84:e9:6c:84:cc:85:
c1:0d:02:f4:d5:b5:92:af:dd:fd:74:85:98:74:cc:2f:15:32:
f5:f2:bf:54:87:f3:89:a5:6b:f7:71:fa:32:29:79:b3:34:6f:
ae:3b:4e:a9:79:19:4b:ef:fb:98:88:b5:ab:4a:2f:8f:60:8c:
8b:3c:36:0e:d9:9b:64:e3:cb:64:ad:f7:74:98:cd:23:fa:e7:
05:55:20:4d:fd:ac:45:12:f2:dc:39:bf:14:ec:39:a3:17:b7:
b9:9f:31:91:e4:34:30:5b:97:d8:ba:e2:67:a9:32:60:dd:3c:
6d:1b:c3:d6:0b:16:80:c0:0c:23:b0:95:7a:b0:57:dc:6b:65:
c9:30:b4:61:32:c7:ac:d5:46:53:ee:e0:2a:29:11:fd:fe:04:
03:56:33:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZnFoEO/T3U09I/5P3JSXDCQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxNGE2MzE4YjJlZDZkMGM4MjM0Zjk4MjA4Zjg4ZGUwZTlk
NDY5OGUwHhcNMjUxMDA4MjEwMDM4WhcNMjUxMDA5MjEwMDM4WjAzMTEwLwYDVQQD
EyhiOGY1MTAxZGU2Y2I1ZTE1YTdhOWI1YWRhOTdiMTdlOWRiM2QxNDUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhccTLR2OtvpVHqvDBwLsKAi9zJL
XGLpLXqeYcIgReiS2E3BWF8mAMVOKcNPxurQdYObOIsboolPjNSkOcroCOSM8fsw
WOYhEKSAqid1DA4eX83jInkG7ufmoGW36oweMlkwfFR8NJG2jEqgpN4ww9Vr3nmu
myLOPBzT3ET/ProvWItX6tz5WbrYbJMWBrJd6D/7U3YROjU3FgMvTknDCrKlxJco
x+/3/c+IxgWbt+2dQgcNvoOaYcle2Ndl2u0js5e9NAU/rlYKdcrie+JeBrU7ZS4V
+hfhtwlAqZkpVjkHFB5ZY0Zw5JRXsFCJ8tdnes2Eq7NWEiSZEJbSHRiypwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLj1EB3my14Vp6m1ral7F+nbPRRSMB8GA1UdIwQY
MBaAFPFKYxiy7W0MgjT5ggj4jeDp1GmOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFVwakdMTHRiUXlDTlBtQ0NQaU40T25VYVk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8zMzU3OTctOWIyMS00YzUwLWIwNDQt
Yzg2ZWQ0ODYyNTAxLzEvOFVwakdMTHRiUXlDTlBtQ0NQaU40T25VYVk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy8zMzU3OTctOWIyMS00YzUwLWIwNDQtYzg2ZWQ0ODYyNTAx
LzEvOFVwakdMTHRiUXlDTlBtQ0NQaU40T25VYVk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoREsoZU2
Fv89zQlB8aA4N0B1H2uJNZoIa53nEhw2WVFnD9BrpjXfSaD+ijBQvO04p1Shq7x8
cmKVzuiGjZLm75OxflBUm53BchGBjjHRawMS2nJ0bwA0s14/vzY8nHk4iefW5YDC
hOlshMyFwQ0C9NW1kq/d/XSFmHTMLxUy9fK/VIfziaVr93H6Mil5szRvrjtOqXkZ
S+/7mIi1q0ovj2CMizw2DtmbZOPLZK33dJjNI/rnBVUgTf2sRRLy3Dm/FOw5oxe3
uZ8xkeQ0MFuX2LriZ6kyYN08bRvD1gsWgMAMI7CVerBX3GtlyTC0YTLHrNVGU+7g
KikR/f4EA1YzvQ==
-----END CERTIFICATE-----
Generated at Thu Oct 9 01:01:09 2025 by rpki-client