Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
File: 8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft (raw, json)
Hash identifier: wUsH/eeby85VfFAoKIO2nz8i7MSjA17sritnuCZOo0s=
Subject key identifier: 49:1D:D4:D3:0F:B7:27:C8:A3:6C:78:89:0E:35:36:03:AB:4C:6D:12
Authority key identifier: F1:45:D4:4A:1E:E0:58:53:CD:58:92:65:43:34:B1:F2:1C:E8:26:D4
Certificate issuer: /CN=f145d44a1ee05853cd5892654334b1f21ce826d4
Certificate serial: 019923D5B5218BF73832E88EE89CF2ED3332
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
Manifest number: 0D69
Signing time: Sun 07 Sep 2025 11:00:31 +0000
Manifest this update: Sun 07 Sep 2025 11:00:31 +0000
Manifest next update: Mon 08 Sep 2025 11:00:31 +0000
Files and hashes: 1: 8UXUSh7gWFPNWJJlQzSx8hzoJtQ.crl (hash: 7l183OGDU1WPsh68qfGRR0JHte+/GTa08pQUrFodjrE=)
2: oQ6iu5R4Fpm0Yjxuw1qLXncI4SY.roa (hash: H/akZoh4Ps4IHkjkrhcdXyi2oc0+hPspNWAd57bgzLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d5:b5:21:8b:f7:38:32:e8:8e:e8:9c:f2:ed:33:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f145d44a1ee05853cd5892654334b1f21ce826d4
Validity
Not Before: Sep 7 11:00:31 2025 GMT
Not After : Sep 8 11:00:31 2025 GMT
Subject: CN=491dd4d30fb727c8a36c78890e353603ab4c6d12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:32:6d:22:83:4f:3d:b1:25:8a:ad:ba:7f:24:
a1:eb:0d:c5:5d:8f:cd:91:a0:10:a6:f7:43:65:62:
11:e1:41:8e:d5:6e:01:33:a7:d7:a0:fb:80:a8:f2:
3f:9e:de:3c:28:06:08:e9:01:86:4b:5e:88:c0:91:
19:dd:d4:a6:93:e7:f1:62:80:4a:5a:75:2d:03:b7:
bb:03:5d:1f:92:2f:0e:62:55:26:26:23:13:9a:cf:
35:fc:11:aa:bb:20:ed:2f:ea:c4:a6:fd:32:ca:72:
e2:f8:df:9f:03:44:99:b0:79:15:c8:60:8e:fa:8b:
d1:e7:92:69:67:0d:a1:b0:2e:13:80:9f:bc:4e:26:
ae:e4:fc:88:2b:a0:6b:9d:45:32:07:97:47:55:50:
65:d3:c8:2e:d7:31:48:d6:8c:89:06:0b:9d:c9:c0:
76:1f:fd:ec:08:ab:91:0d:c9:70:96:88:b0:92:8d:
ac:9a:83:94:6c:cf:69:38:c9:5d:0d:70:97:b7:4b:
b1:1a:4a:fa:10:db:e6:e9:99:e2:07:5c:55:b7:8a:
0f:c8:c0:1e:fb:01:88:5e:28:ca:dd:89:e7:b6:8a:
b8:c1:8e:d9:fe:6a:61:84:13:fd:c9:6c:94:dd:f3:
27:cd:b2:d4:0e:d1:1b:0e:2b:1c:80:bb:af:69:0b:
0f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:1D:D4:D3:0F:B7:27:C8:A3:6C:78:89:0E:35:36:03:AB:4C:6D:12
X509v3 Authority Key Identifier:
keyid:F1:45:D4:4A:1E:E0:58:53:CD:58:92:65:43:34:B1:F2:1C:E8:26:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:9e:07:de:68:8b:b5:b2:ff:c2:32:a6:aa:f7:65:28:cb:a2:
da:03:81:2d:9a:9d:2d:4c:ff:ab:6d:23:f6:e0:33:c7:3f:d1:
f2:f0:20:c4:03:76:12:31:4e:4a:32:c3:e3:9c:e8:6a:0d:b7:
81:fd:13:6b:62:2b:cd:68:86:63:9e:54:59:c6:96:7a:9d:c9:
bd:4b:15:9f:b1:e5:01:3f:b6:04:31:5a:bd:44:60:ec:97:c1:
be:b8:7e:db:b9:66:e5:19:50:81:90:6f:8f:f8:d4:66:35:ab:
c9:d7:04:e3:a2:df:de:92:93:a1:c3:31:31:95:6f:a6:37:bb:
0c:73:fd:8a:fa:31:bf:fc:03:7c:56:df:40:b2:6d:59:9a:ab:
f3:2e:fb:ad:13:ef:9d:c9:6e:fa:da:f2:ea:ef:88:ad:c4:82:
48:00:57:91:03:d8:ff:5d:0e:8b:91:1c:39:fc:a6:9b:6f:8b:
89:fb:63:0c:e2:ca:ea:6a:09:24:8f:b5:ba:64:1b:5c:a6:29:
71:6b:71:90:76:9d:cc:51:9f:a9:d2:dd:ea:08:fc:bb:dc:bb:
db:47:4e:96:44:94:95:12:f2:1f:41:1b:28:c5:4e:4f:9d:7c:
6f:2e:d1:d2:32:00:87:85:a5:48:e6:6f:24:e8:ec:24:2d:5a:
04:5d:f4:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:49:24 2025 by rpki-client