Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft
File: 8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft (raw, json)
Hash identifier: H4DWH/u34hZTl4Z9agOaHw8j+O44dHTv/xGVUhIP/pg=
Subject key identifier: D3:31:22:40:97:3A:2F:6A:AF:FE:FF:20:99:96:6F:9B:9E:E4:16:B3
Authority key identifier: F1:4A:63:18:B2:ED:6D:0C:82:34:F9:82:08:F8:8D:E0:E9:D4:69:8E
Certificate issuer: /CN=f14a6318b2ed6d0c8234f98208f88de0e9d4698e
Certificate serial: 0198D62985ADE2749F9A3423A7954F883807
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UpjGLLtbQyCNPmCCPiN4OnUaY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft
Manifest number: 10D6
Signing time: Sat 23 Aug 2025 09:01:41 +0000
Manifest this update: Sat 23 Aug 2025 09:01:41 +0000
Manifest next update: Sun 24 Aug 2025 09:01:41 +0000
Files and hashes: 1: 8UpjGLLtbQyCNPmCCPiN4OnUaY4.crl (hash: KlHHOiEBjCDDFRCoXWCrQBiEvQE/YUVt/IndliER/jI=)
2: VJ4tqhsbAxvbZbMk4UpOcvURbX8.roa (hash: rFhoSBbOl1/XJywdO7kEvMzIk6v7w1dBiBMHnGzvKJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8UpjGLLtbQyCNPmCCPiN4OnUaY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:29:85:ad:e2:74:9f:9a:34:23:a7:95:4f:88:38:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f14a6318b2ed6d0c8234f98208f88de0e9d4698e
Validity
Not Before: Aug 23 09:01:41 2025 GMT
Not After : Aug 24 09:01:41 2025 GMT
Subject: CN=d3312240973a2f6aaffeff2099966f9b9ee416b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:05:7a:b8:45:fe:55:8c:4a:40:c1:4f:d7:44:
bf:c6:48:65:4e:e9:ca:3d:f1:35:23:41:1f:d1:bd:
30:c6:27:fe:3c:48:f2:f7:2d:d0:fe:a4:32:ab:e8:
4a:3e:95:75:48:aa:df:d0:df:08:9b:a4:bd:94:8f:
78:fc:03:bc:9d:73:80:67:de:9d:63:4d:9d:92:08:
2e:b3:63:86:fa:43:1e:8b:01:b8:b1:de:58:7b:1b:
50:b0:70:32:a7:b5:30:28:1d:6b:72:3b:bc:cd:40:
6f:f4:38:e5:a5:31:e0:1d:3c:38:3b:a1:a3:b9:ef:
52:0b:0b:61:a6:86:4f:33:a6:c3:b1:cc:6d:04:4e:
09:a2:a8:5d:12:83:04:08:c3:0e:a9:40:93:6a:cc:
6f:5c:98:7b:3f:54:93:7e:05:31:28:7f:6c:50:2d:
d2:99:4f:dc:78:79:4c:6a:b8:5b:29:b3:e5:63:72:
19:7a:58:00:81:d0:df:ed:c6:35:bb:8c:af:37:93:
aa:f2:ae:87:a8:37:96:92:d9:ea:9a:02:ff:7d:19:
f2:75:36:4f:43:eb:b6:af:9f:4e:ff:54:e4:b3:8d:
e5:4a:8c:db:d8:22:65:96:18:22:6e:e0:28:12:d6:
7b:d8:97:ed:b3:ee:c0:f1:1c:11:e4:73:b5:06:f0:
b6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:31:22:40:97:3A:2F:6A:AF:FE:FF:20:99:96:6F:9B:9E:E4:16:B3
X509v3 Authority Key Identifier:
keyid:F1:4A:63:18:B2:ED:6D:0C:82:34:F9:82:08:F8:8D:E0:E9:D4:69:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UpjGLLtbQyCNPmCCPiN4OnUaY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:ae:8a:4b:76:6e:75:9f:58:44:a0:c5:ea:17:b9:9b:5a:ae:
7c:7d:40:b3:64:86:8d:db:ed:ae:59:41:c4:70:b6:3a:af:05:
74:d1:ff:cb:7c:88:9e:7c:fc:2e:3f:f1:fa:65:04:c9:fb:8e:
60:fa:8b:36:46:46:1e:7b:c2:75:fa:7d:b3:bc:44:aa:c1:72:
4a:fe:07:cc:0e:72:6a:7b:3c:a8:ba:25:ea:47:1e:fb:a4:36:
46:50:81:5b:4c:2e:9d:c3:a3:5b:e8:b2:36:40:43:27:f9:76:
14:55:47:a2:75:8c:55:06:e6:90:81:4f:6b:ea:f3:2a:cb:13:
f3:bd:7c:80:f7:c4:4f:cd:ac:11:f5:fb:91:56:f7:90:81:74:
4e:95:33:62:6c:eb:df:79:de:d7:8a:86:c9:ae:17:0c:d9:ef:
61:5a:79:f7:a5:11:b9:e9:09:21:5c:18:e0:9a:4e:e2:ab:bf:
5a:f7:48:65:63:b1:ab:53:c8:47:36:e1:f2:8c:41:3f:6d:df:
71:23:36:3f:33:6c:51:b3:3e:9f:db:67:a4:7a:a4:cd:69:5f:
cf:bf:e0:1d:99:2f:3a:b7:4f:6e:13:a9:1c:62:e1:d6:3d:e1:
9b:39:5f:6e:51:4f:c1:4d:32:40:b7:75:57:dd:55:3d:37:cd:
a3:26:07:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:55:38 2025 by rpki-client