Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.mft
File: 8Uebg8Ug14REXCSCi6tjPw1wLPM.mft (raw, json)
Hash identifier: 7oU+th9hu/dj3INchgwCtocSg1zjv1E8+V1upwWT4rk=
Subject key identifier: 29:33:C5:46:85:8E:0F:FA:EE:D9:54:99:89:3B:D8:0B:D4:97:ED:9E
Authority key identifier: F1:47:9B:83:C5:20:D7:84:44:5C:24:82:8B:AB:63:3F:0D:70:2C:F3
Certificate issuer: /CN=f1479b83c520d784445c24828bab633f0d702cf3
Certificate serial: 019A2E8D761DA3B4741A860086B5570CE178
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Uebg8Ug14REXCSCi6tjPw1wLPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.mft
Manifest number: 172C
Signing time: Wed 29 Oct 2025 06:00:13 +0000
Manifest this update: Wed 29 Oct 2025 06:00:13 +0000
Manifest next update: Thu 30 Oct 2025 06:00:13 +0000
Files and hashes: 1: 8Uebg8Ug14REXCSCi6tjPw1wLPM.crl (hash: F3HyBIgG2ByDK+1JRaHmQITHI07UTE+c+Dld7mBrv90=)
2: TQKhSi8Awccw4XCNSJ1aruVNLAk.roa (hash: sIBHk/GyN9LYf2GBmbzqMybhc4XcRHVc+6LBWV3OWQY=)
3: UzzaZe2IBnqaAlUC3PzUQU79vek.roa (hash: 0lOgrSdqev4Q++AWXwQLula9bZznJKXyC0Jsns6HfWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Uebg8Ug14REXCSCi6tjPw1wLPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2e:8d:76:1d:a3:b4:74:1a:86:00:86:b5:57:0c:e1:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1479b83c520d784445c24828bab633f0d702cf3
Validity
Not Before: Oct 29 06:00:13 2025 GMT
Not After : Oct 30 06:00:13 2025 GMT
Subject: CN=2933c546858e0ffaeed95499893bd80bd497ed9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:e1:d5:a9:81:f7:55:df:e7:9d:1c:b5:ec:f5:
c4:e1:7b:04:47:ab:d1:d4:99:02:c3:e1:cf:cd:1b:
ad:44:96:da:75:bd:2f:17:54:4b:da:b6:04:59:fd:
7f:4a:25:c9:b3:59:2a:36:db:b3:ad:4e:3c:d7:f5:
3c:67:02:82:c5:b5:9a:96:c2:d8:7d:54:f3:18:33:
a3:fa:ba:82:fd:be:b3:40:5f:71:5c:19:fa:32:67:
b0:bd:69:30:59:c9:53:b2:10:2d:e3:7c:25:b9:9e:
3c:8f:2c:23:df:e4:ae:f9:da:11:50:41:5e:f7:7a:
89:a7:80:12:eb:0b:c9:d6:6d:a8:84:ca:68:40:fb:
4d:17:ca:d9:7d:36:37:b7:5a:81:eb:65:c7:32:5b:
7a:2b:fe:60:28:af:45:e1:8c:2c:a0:bb:91:8d:99:
5a:7a:83:71:d5:8a:91:07:ae:96:f9:dc:54:13:ea:
8e:7a:5e:b3:70:f7:f7:8b:09:7d:ce:1c:06:ca:72:
e0:d7:f8:29:2e:e2:cc:c3:ae:c4:53:84:78:9e:87:
3f:55:71:b8:1c:76:d3:50:92:1c:cb:30:7d:cf:86:
55:48:77:5e:23:e2:e0:32:9d:b4:3a:2c:2f:ae:33:
33:d1:5a:0a:33:e6:6b:2e:35:b4:8f:e0:62:5d:1d:
38:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:33:C5:46:85:8E:0F:FA:EE:D9:54:99:89:3B:D8:0B:D4:97:ED:9E
X509v3 Authority Key Identifier:
keyid:F1:47:9B:83:C5:20:D7:84:44:5C:24:82:8B:AB:63:3F:0D:70:2C:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Uebg8Ug14REXCSCi6tjPw1wLPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:b7:37:71:fd:59:ad:ec:dd:1a:39:37:50:81:b8:7e:63:be:
90:ef:5b:35:66:41:65:06:8b:bb:a5:ea:e7:a6:d6:42:04:25:
c6:20:4f:3b:18:af:07:0d:ee:53:61:8b:92:0a:fa:62:9c:6b:
40:15:d0:86:85:a1:5e:1a:62:a0:df:8d:bd:7d:70:01:c4:ef:
7a:c7:de:4b:a1:51:28:ff:bb:e8:8e:8a:06:b6:de:dd:ce:d3:
6b:2d:6d:e9:8f:43:79:e7:76:eb:63:14:ab:c7:23:9a:d2:3a:
e6:63:ce:20:83:19:9d:82:64:da:0e:6f:a3:1f:22:65:a5:cb:
bb:2d:14:3b:d9:38:7c:28:71:f4:06:55:68:6c:68:e8:16:57:
01:78:94:ff:24:4b:b6:66:30:47:7b:4e:10:fd:49:c4:95:64:
03:0f:23:24:23:79:ea:f7:72:60:50:0a:77:12:9d:3a:97:7a:
8a:d8:a0:c4:4d:09:35:e4:f9:6d:d5:77:9a:b7:c5:fb:5f:91:
d5:ed:fe:a4:92:38:be:29:87:c2:0b:3f:94:62:84:f3:68:c5:
a5:d9:af:3f:38:83:8b:52:01:80:e0:f2:5b:45:70:09:33:49:
36:ea:84:c8:c7:d7:fa:12:78:f7:2e:5e:63:32:0b:b7:48:83:
15:1a:93:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 07:12:33 2025 by rpki-client