Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft
File: 8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft (raw, json)
Hash identifier: ijrOuWWT0mIeGwW775/K4vPSO39/VFF/B5HLPQ6VhGo=
Subject key identifier: 0C:F5:14:71:84:07:32:57:6D:A3:D2:D4:85:DD:5A:11:FF:4E:86:17
Authority key identifier: F1:4A:63:18:B2:ED:6D:0C:82:34:F9:82:08:F8:8D:E0:E9:D4:69:8E
Certificate issuer: /CN=f14a6318b2ed6d0c8234f98208f88de0e9d4698e
Certificate serial: 0197B9A19C9498FB7DED19543EB34850EA03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UpjGLLtbQyCNPmCCPiN4OnUaY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft
Manifest number: 1042
Signing time: Sun 29 Jun 2025 03:01:05 +0000
Manifest this update: Sun 29 Jun 2025 03:01:05 +0000
Manifest next update: Mon 30 Jun 2025 03:01:05 +0000
Files and hashes: 1: 8UpjGLLtbQyCNPmCCPiN4OnUaY4.crl (hash: yb1j0mmvB3i4ykcIhHitAIQ8STkTFCV/Bxel7wiBr/M=)
2: iZ5p5MN0N4aCqnIjU0jjwKvIZns.roa (hash: DtCRo0LBdqkJmTlhbB6eN/7hU3EdBp5G+2hoRmL97Vc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8UpjGLLtbQyCNPmCCPiN4OnUaY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:9c:94:98:fb:7d:ed:19:54:3e:b3:48:50:ea:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f14a6318b2ed6d0c8234f98208f88de0e9d4698e
Validity
Not Before: Jun 29 03:01:05 2025 GMT
Not After : Jun 30 03:01:05 2025 GMT
Subject: CN=0cf51471840732576da3d2d485dd5a11ff4e8617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:17:c5:8a:cf:92:b2:47:89:eb:ab:c3:2e:22:
c6:3d:ef:1c:dc:b0:51:32:75:96:6e:b5:db:e6:a1:
e8:fd:51:b3:38:28:dd:fa:b4:3f:77:fe:76:19:f2:
fc:bf:48:c1:25:3b:36:18:bf:75:2a:a6:e3:cd:8e:
57:4e:de:82:72:bb:a5:e9:3b:db:95:27:9d:92:e7:
5e:6e:4f:ac:a8:38:dc:4b:44:f3:d1:70:95:9e:ae:
cb:19:56:cf:9f:c5:d0:6d:81:6e:0d:65:d3:14:5f:
9f:b6:9b:9f:a7:a4:fd:61:ac:83:c9:49:ac:28:66:
24:f0:13:84:4e:e3:60:ec:e8:78:44:c5:ce:46:93:
4a:7c:b1:ce:67:df:92:ef:30:44:9f:11:91:e6:7e:
27:5a:c7:47:2e:2b:c5:82:64:ad:62:49:44:b8:f6:
35:d0:c5:61:ee:07:66:99:03:c3:ca:63:3e:d3:72:
88:44:bb:2e:73:0a:00:11:6f:c6:ab:c7:84:67:c5:
1d:73:ab:f0:56:dc:11:cb:d6:8a:a9:01:b7:cc:57:
43:72:38:31:ec:84:e5:96:d6:68:c9:27:24:56:5d:
3a:42:17:34:e0:c2:01:5d:17:ed:6a:f9:18:bc:49:
66:36:e6:5f:90:4e:b5:e9:4e:ff:8e:d4:9d:c9:1c:
f6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:F5:14:71:84:07:32:57:6D:A3:D2:D4:85:DD:5A:11:FF:4E:86:17
X509v3 Authority Key Identifier:
keyid:F1:4A:63:18:B2:ED:6D:0C:82:34:F9:82:08:F8:8D:E0:E9:D4:69:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UpjGLLtbQyCNPmCCPiN4OnUaY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:c9:db:3b:6e:b5:1e:6f:bb:b6:b4:24:81:91:34:a9:f1:1a:
5e:51:62:9a:96:3d:37:b0:79:13:14:b8:f9:71:30:02:21:4c:
65:40:a1:c6:24:73:07:0e:a4:84:ed:9a:12:bb:34:bb:38:ea:
c5:97:d5:87:27:15:72:fa:2e:c9:3d:7d:70:74:87:1e:ce:52:
a1:e8:66:3e:a5:0e:cd:98:67:19:28:62:90:50:75:21:8f:2b:
03:2e:f1:21:bd:28:ec:34:3e:e5:fc:07:95:5e:30:0e:34:a2:
08:b8:fb:03:bf:89:66:18:76:af:32:88:ce:78:f2:42:e3:46:
80:d6:2d:52:5a:74:33:be:e0:33:cd:21:3a:71:5a:ae:3a:62:
c3:ef:87:de:7f:ee:28:d1:b7:e5:27:8e:90:3f:57:3d:aa:6c:
3d:97:9d:84:d1:71:d8:17:a7:19:38:3f:cc:ed:53:70:9f:63:
f1:6b:8e:9e:60:07:e5:4d:84:23:f2:70:1e:bb:78:a2:b8:4e:
9e:11:91:84:51:99:d6:1a:57:8a:fd:14:7e:9b:70:85:f9:c1:
5a:3c:75:a1:a9:1f:a9:16:6e:34:4c:bd:42:27:21:cf:ef:f2:
7d:ba:15:78:b7:66:96:4e:2e:74:cd:d2:cb:58:76:78:38:fb:
30:62:e1:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:01:13 2025 by rpki-client