Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
File: 8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft (raw, json)
Hash identifier: kE+IeTS359A/qDdN1pJp0dJD9XO8vFT1FGQS941ZlcI=
Subject key identifier: E3:7B:33:55:85:B6:B9:CE:CE:93:23:BA:DB:67:AE:BF:23:98:0C:FB
Authority key identifier: F1:45:D4:4A:1E:E0:58:53:CD:58:92:65:43:34:B1:F2:1C:E8:26:D4
Certificate issuer: /CN=f145d44a1ee05853cd5892654334b1f21ce826d4
Certificate serial: 0198D6982D1036824F1EBDED8024AC2CC060
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
Manifest number: 0D41
Signing time: Sat 23 Aug 2025 11:02:33 +0000
Manifest this update: Sat 23 Aug 2025 11:02:33 +0000
Manifest next update: Sun 24 Aug 2025 11:02:33 +0000
Files and hashes: 1: 8UXUSh7gWFPNWJJlQzSx8hzoJtQ.crl (hash: rdqpfQbbOYePNVTOwgqio7SadTAGLkrDa5guFZptwS0=)
2: oQ6iu5R4Fpm0Yjxuw1qLXncI4SY.roa (hash: H/akZoh4Ps4IHkjkrhcdXyi2oc0+hPspNWAd57bgzLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:2d:10:36:82:4f:1e:bd:ed:80:24:ac:2c:c0:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f145d44a1ee05853cd5892654334b1f21ce826d4
Validity
Not Before: Aug 23 11:02:33 2025 GMT
Not After : Aug 24 11:02:33 2025 GMT
Subject: CN=e37b335585b6b9cece9323badb67aebf23980cfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:31:44:0a:ad:28:46:3d:f7:49:46:46:c6:2a:
11:3a:87:60:9e:98:2a:2d:b5:7e:1f:d5:db:d1:33:
02:f6:14:e3:0e:00:7f:57:f5:ad:90:53:5e:5d:ba:
52:2b:22:73:7c:34:f3:79:5b:43:8c:df:3d:d9:67:
98:2f:82:b7:c0:dd:58:fd:ec:ab:b1:64:7a:28:49:
89:70:9c:c3:37:10:d1:7b:93:26:7b:e2:0f:57:19:
62:61:90:2e:c4:be:a1:12:ce:83:94:b2:75:44:90:
bc:20:08:a8:bb:5a:ee:c0:27:fe:1b:7d:57:f5:62:
b5:27:88:cf:6e:a9:1e:d4:52:9f:74:67:ad:ac:ba:
af:52:ec:ed:2c:33:a4:0a:ff:58:0a:be:78:21:99:
29:15:52:f2:af:b0:1c:4c:b5:fb:ee:27:51:11:0f:
39:47:00:a1:48:e0:4d:3a:75:f5:6b:02:8a:7f:a5:
39:a9:68:51:3f:a9:59:a2:c1:bf:44:63:e1:09:22:
73:9a:20:99:b9:a2:c8:d1:95:a1:27:d4:56:3e:cd:
89:4b:4e:f3:37:89:20:f0:cc:49:6a:e5:86:8c:f2:
1f:20:fb:91:a7:2f:c5:a8:49:46:d8:ca:71:3e:28:
56:f7:d0:25:11:72:9f:01:af:ec:d9:7d:97:96:88:
28:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:7B:33:55:85:B6:B9:CE:CE:93:23:BA:DB:67:AE:BF:23:98:0C:FB
X509v3 Authority Key Identifier:
keyid:F1:45:D4:4A:1E:E0:58:53:CD:58:92:65:43:34:B1:F2:1C:E8:26:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:8e:b7:64:48:e0:e1:74:18:92:f9:1b:99:9b:e6:86:4a:46:
57:2c:0b:73:4e:52:80:9d:d4:d6:62:6b:4e:b0:41:32:71:6b:
c2:86:10:46:eb:fd:65:c5:44:62:1b:3f:a0:3a:e2:f2:66:e4:
5c:e0:32:90:d0:a7:9e:eb:29:7f:96:c5:8b:cb:31:ca:a9:1c:
a5:a8:b8:ba:55:1e:c1:9b:7e:a8:c6:b1:bb:48:a7:87:d9:63:
87:79:3e:37:f1:b2:77:67:82:e6:83:82:6e:17:eb:f5:8c:27:
d9:b6:9f:5a:0e:96:49:c3:93:db:dd:41:51:53:52:da:13:78:
c8:21:9d:22:71:74:f6:06:12:2c:b1:5b:76:9a:2c:78:b1:60:
95:be:f8:a4:a3:55:11:dd:f7:b1:b4:70:d9:74:ac:3c:56:40:
e2:c9:b3:88:56:45:a6:99:07:0a:1b:dc:eb:2b:8c:a4:6f:cf:
3a:ef:56:a5:00:68:d4:60:49:df:90:4b:96:97:79:dd:de:93:
97:ae:31:b7:48:b5:2f:51:bb:fb:32:f9:cd:44:0f:db:82:ba:
09:bf:d5:e0:f0:f0:8b:4d:ac:df:df:f1:1f:e3:97:23:0f:79:
b1:9a:9b:f6:39:87:51:cc:fd:4b:dc:92:35:f0:da:64:75:a9:
a8:c3:6d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:16:55 2025 by rpki-client