Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.mft
File: 8Uebg8Ug14REXCSCi6tjPw1wLPM.mft (raw, json)
Hash identifier: dWcyCqQLtCfJIkOV8DVYKU+EG0thji9UHVtH8Kvspac=
Subject key identifier: 55:CB:05:38:38:40:7C:3F:B6:04:83:84:B2:22:9C:87:69:1B:67:66
Authority key identifier: F1:47:9B:83:C5:20:D7:84:44:5C:24:82:8B:AB:63:3F:0D:70:2C:F3
Certificate issuer: /CN=f1479b83c520d784445c24828bab633f0d702cf3
Certificate serial: 019A00356640F264AF50584EA9EA4B23C16E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Uebg8Ug14REXCSCi6tjPw1wLPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.mft
Manifest number: 1714
Signing time: Mon 20 Oct 2025 06:01:30 +0000
Manifest this update: Mon 20 Oct 2025 06:01:30 +0000
Manifest next update: Tue 21 Oct 2025 06:01:30 +0000
Files and hashes: 1: 8Uebg8Ug14REXCSCi6tjPw1wLPM.crl (hash: 1tobspFsFK5EmvE2ybV7y/JBldL0SM89O+OguglQ8CI=)
2: TQKhSi8Awccw4XCNSJ1aruVNLAk.roa (hash: sIBHk/GyN9LYf2GBmbzqMybhc4XcRHVc+6LBWV3OWQY=)
3: UzzaZe2IBnqaAlUC3PzUQU79vek.roa (hash: 0lOgrSdqev4Q++AWXwQLula9bZznJKXyC0Jsns6HfWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Uebg8Ug14REXCSCi6tjPw1wLPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:66:40:f2:64:af:50:58:4e:a9:ea:4b:23:c1:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1479b83c520d784445c24828bab633f0d702cf3
Validity
Not Before: Oct 20 06:01:30 2025 GMT
Not After : Oct 21 06:01:30 2025 GMT
Subject: CN=55cb053838407c3fb6048384b2229c87691b6766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:23:c4:91:49:d8:8d:e7:9f:d9:88:b9:cd:0f:
25:4c:0b:2e:e6:cd:cb:18:e1:65:4f:50:8a:9b:18:
24:60:60:07:94:19:cb:5f:9e:70:77:58:d2:5f:26:
bc:80:e5:36:b6:38:af:f5:78:8c:95:18:1b:1f:a1:
69:0d:02:90:17:52:c6:2a:92:ba:cf:13:21:a1:9a:
7a:53:56:a7:16:15:89:d9:c7:7d:b5:eb:11:a7:fa:
70:43:10:d0:6f:02:73:9a:a5:f7:6a:15:65:aa:eb:
a1:3e:a6:4d:c0:46:60:76:53:ab:c9:49:b1:a0:32:
8c:00:4f:e7:5a:56:f5:ad:0c:d4:7e:08:cf:45:e7:
d8:c8:a0:d0:ff:d2:62:4a:a1:40:f6:e0:f9:da:1d:
51:45:79:95:8f:89:ff:d5:8d:7e:08:07:00:ff:d5:
0a:0a:e4:e4:81:8d:ef:c8:47:29:38:e0:0c:fd:76:
84:53:2f:f6:7e:b0:b2:a3:0b:d3:fe:36:89:f4:cd:
b7:c9:c6:e8:64:2c:46:a2:f6:52:18:d9:18:9c:76:
53:51:2b:c1:47:93:13:d7:af:1c:cb:2c:44:1b:ed:
0b:ea:14:27:ae:0d:20:46:7a:7d:6a:0c:8e:00:68:
a4:d9:dd:fb:05:86:9b:99:db:7c:ca:8d:c0:da:91:
80:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:CB:05:38:38:40:7C:3F:B6:04:83:84:B2:22:9C:87:69:1B:67:66
X509v3 Authority Key Identifier:
keyid:F1:47:9B:83:C5:20:D7:84:44:5C:24:82:8B:AB:63:3F:0D:70:2C:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Uebg8Ug14REXCSCi6tjPw1wLPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:21:87:c7:16:0b:b4:69:ec:e2:f2:d0:2d:83:65:22:e5:53:
b9:05:bf:30:34:47:12:de:80:72:1e:b4:f8:ea:88:11:35:7e:
cd:02:1a:28:cb:df:dd:3a:3e:f7:14:2d:69:12:11:78:18:f0:
80:f6:41:15:96:b5:df:a2:1b:88:ae:b1:53:65:75:22:29:bd:
ac:72:e9:50:fd:c2:35:cb:50:a5:40:7c:2b:bf:a3:6b:0b:86:
01:d1:da:d8:98:03:fc:a6:9b:65:e3:90:c9:0a:2b:6d:c6:c4:
69:07:75:0c:f3:fc:0c:1c:96:f3:0c:c5:5f:b8:60:df:0c:4f:
25:43:a7:4f:7a:ca:10:df:d3:e8:4e:e5:c4:5c:85:ac:de:52:
75:d7:f6:c6:59:cc:75:bb:8d:10:c8:a3:7e:ae:f3:fd:a4:d5:
49:73:67:8e:e3:c5:d8:c2:dd:76:ed:f4:dc:38:43:91:27:12:
1e:aa:7b:b4:e3:e5:88:f8:87:a1:d5:42:01:d7:ef:5f:68:9c:
3d:60:e7:d6:49:18:b2:49:78:a4:0b:52:02:bd:f8:6d:db:c6:
28:b2:b4:79:bf:3a:0c:64:d6:18:ad:8e:59:17:de:ee:23:84:
b0:62:32:eb:90:5d:7f:2a:74:86:b2:0b:dd:f9:f3:67:f5:d4:
d9:b9:17:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:53:23 2025 by rpki-client