Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft
File: 8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft (raw, json)
Hash identifier: DiuMvce/NIpMdrsHBjdUPOHEY3/nkEHbZj2KO70bn3s=
Subject key identifier: AB:2D:D4:4B:E6:05:84:2D:FD:E7:36:29:E3:68:A9:12:9B:A8:B1:A6
Authority key identifier: F1:4A:63:18:B2:ED:6D:0C:82:34:F9:82:08:F8:8D:E0:E9:D4:69:8E
Certificate issuer: /CN=f14a6318b2ed6d0c8234f98208f88de0e9d4698e
Certificate serial: 0197499ED8E02852CAEE3EB1C23EE3149438
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UpjGLLtbQyCNPmCCPiN4OnUaY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft
Manifest number: 1008
Signing time: Sat 07 Jun 2025 09:00:36 +0000
Manifest this update: Sat 07 Jun 2025 09:00:36 +0000
Manifest next update: Sun 08 Jun 2025 09:00:36 +0000
Files and hashes: 1: 8UpjGLLtbQyCNPmCCPiN4OnUaY4.crl (hash: 2jBV+dLQxR6EYQ5GD1E/yuJr65YEVyKIWePFX6W5U0I=)
2: iZ5p5MN0N4aCqnIjU0jjwKvIZns.roa (hash: DtCRo0LBdqkJmTlhbB6eN/7hU3EdBp5G+2hoRmL97Vc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8UpjGLLtbQyCNPmCCPiN4OnUaY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9e:d8:e0:28:52:ca:ee:3e:b1:c2:3e:e3:14:94:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f14a6318b2ed6d0c8234f98208f88de0e9d4698e
Validity
Not Before: Jun 7 09:00:36 2025 GMT
Not After : Jun 8 09:00:36 2025 GMT
Subject: CN=ab2dd44be605842dfde73629e368a9129ba8b1a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b0:f2:77:71:50:6b:ef:8c:c6:e2:a4:d5:94:
20:2c:3b:08:64:01:74:60:9e:27:a0:e9:32:d4:b4:
16:9d:aa:4f:42:ab:57:f8:51:9e:2d:71:4a:77:56:
ca:f5:b9:43:b6:2a:15:bc:ec:d7:e3:2d:94:1b:9a:
80:48:2f:2e:4d:fc:b8:d2:e6:fd:c4:f4:bc:d1:e9:
e9:b6:b9:53:1b:93:e7:9a:86:20:22:00:1f:10:d2:
d3:14:6a:69:7d:e6:f4:db:7a:0c:17:e6:b6:2f:b1:
92:cd:de:f6:1b:43:bb:39:8e:e2:7a:91:4d:e1:53:
a9:8d:51:5f:ca:01:d9:de:c9:cb:d6:5c:a6:97:77:
f5:59:85:16:ea:be:91:28:9e:5b:e2:7c:fb:8c:17:
73:b5:93:97:f6:3f:1c:9c:52:1d:b8:7d:25:2b:58:
31:28:fc:63:07:59:4a:bf:c3:e9:61:f9:0b:15:cc:
44:1e:a8:40:ea:f4:91:3b:ad:78:aa:70:63:98:38:
b9:35:48:a4:9d:52:56:d1:0a:83:0d:c1:72:4d:b8:
2e:49:5d:47:ab:ae:7f:04:ef:7b:60:52:22:dd:5d:
55:81:32:04:5a:27:57:95:f6:7a:4a:86:78:98:d2:
08:2a:e0:e0:6e:bd:3f:e6:fc:13:40:66:da:ea:f7:
63:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:2D:D4:4B:E6:05:84:2D:FD:E7:36:29:E3:68:A9:12:9B:A8:B1:A6
X509v3 Authority Key Identifier:
keyid:F1:4A:63:18:B2:ED:6D:0C:82:34:F9:82:08:F8:8D:E0:E9:D4:69:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UpjGLLtbQyCNPmCCPiN4OnUaY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:f7:fa:1b:9c:bb:7d:58:8b:7b:61:ea:dc:59:ad:26:d9:b6:
82:6c:d6:95:82:f3:cd:9d:e8:ba:5f:b4:17:cc:5c:d5:46:85:
46:e2:74:00:36:9f:3b:77:ad:34:2c:6b:5e:44:e8:9d:6a:29:
ed:5b:ac:c7:12:e2:64:27:19:fe:cf:7f:13:2c:ec:d1:f5:d7:
4d:bc:67:6f:7f:c2:ac:f4:02:80:81:18:b0:6f:9e:09:63:f7:
f7:02:0f:b6:49:95:45:58:62:e0:bf:4f:44:0a:c0:d9:20:5c:
6a:c7:c0:48:b2:0a:c4:cd:22:82:c5:35:d1:5a:eb:dc:cb:cf:
a1:1f:dd:9f:b0:eb:fd:b6:87:59:4c:5c:a8:e6:9b:1b:e5:3d:
96:12:0a:6c:94:b7:19:ee:7a:5d:13:02:51:a9:27:e0:e2:60:
24:dd:76:84:a0:dc:4c:c0:01:98:db:9a:b1:3c:e5:aa:3e:42:
b6:9e:bf:26:0e:66:78:e3:34:5c:67:f2:f4:c3:2b:a9:4f:65:
7e:12:71:6b:6e:36:fd:d1:d1:39:03:2c:2e:dc:aa:ef:83:d4:
e2:62:58:a0:2d:68:2e:c6:ca:e7:ad:a2:8d:04:fa:d9:a9:68:
a4:c2:f8:ba:d0:b2:18:85:b3:85:03:46:f7:15:4d:ed:9f:7f:
83:c1:24:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:52:35 2025 by rpki-client