Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft
File: 8UPRPHu9KqFfVnfBOawzyGeHnyw.mft (raw, json)
Hash identifier: 6izggcFlVMxOvC2irQLF+dVWG4gQwKEaEJ2RliRRDrc=
Subject key identifier: A6:74:8F:31:65:1E:C2:67:40:24:89:98:18:B4:76:08:A1:10:58:71
Authority key identifier: F1:43:D1:3C:7B:BD:2A:A1:5F:56:77:C1:39:AC:33:C8:67:87:9F:2C
Certificate issuer: /CN=f143d13c7bbd2aa15f5677c139ac33c867879f2c
Certificate serial: 0198D5F195EE0BC0884C9A98333115E0A2C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UPRPHu9KqFfVnfBOawzyGeHnyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft
Manifest number: 069A
Signing time: Sat 23 Aug 2025 08:00:36 +0000
Manifest this update: Sat 23 Aug 2025 08:00:36 +0000
Manifest next update: Sun 24 Aug 2025 08:00:36 +0000
Files and hashes: 1: 8UPRPHu9KqFfVnfBOawzyGeHnyw.crl (hash: 4YQeTLXeiX9JPWXjJ3XlyG9gaqyxFf6mFTVHkEgEohc=)
2: UMmv-WY7B5qYJViInJvlNV476mE.roa (hash: jHHOgpNZRXbrpDROEuRDFCxUXMl5uaCZV9NM+NW4eXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8UPRPHu9KqFfVnfBOawzyGeHnyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:95:ee:0b:c0:88:4c:9a:98:33:31:15:e0:a2:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f143d13c7bbd2aa15f5677c139ac33c867879f2c
Validity
Not Before: Aug 23 08:00:36 2025 GMT
Not After : Aug 24 08:00:36 2025 GMT
Subject: CN=a6748f31651ec2674024899818b47608a1105871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:da:c4:39:09:62:85:ae:36:a2:6c:a8:5c:02:
32:48:9b:3a:00:c7:cc:c5:3f:26:ac:f5:37:63:f7:
17:98:ba:f3:19:5e:eb:a2:a9:3f:f0:00:cc:20:25:
91:45:b8:4f:07:bd:d9:41:6a:fa:4e:d2:02:37:02:
73:bb:ae:18:b9:c2:0a:6b:43:4e:68:c5:d4:87:06:
5c:81:8d:4c:ce:4a:fb:9f:af:ec:4e:5c:5a:93:7e:
d8:99:7b:9f:2d:c2:bc:d8:75:60:f8:cf:0f:b1:a2:
8f:00:17:32:86:a9:7f:49:ad:a6:49:c0:87:e0:ba:
b8:b1:10:7c:cb:98:0c:f5:b2:2d:f4:01:5e:56:95:
42:c7:e6:c9:c8:0f:ba:7e:2b:48:6a:45:68:76:8c:
6a:68:e9:95:f8:02:1a:30:9d:99:e4:5f:4c:0e:5f:
00:e4:dc:a0:d5:42:09:dc:c7:2a:6f:f2:51:55:5e:
80:0f:41:66:a3:1c:dc:00:cc:35:0f:a1:fa:f0:95:
ea:55:8a:55:f1:a5:65:fe:99:db:7f:d8:b1:88:0e:
31:ce:dc:b6:15:d1:1f:f6:b3:6f:3b:de:f6:b2:ff:
f3:9e:f2:02:dc:4a:68:ce:d7:4d:de:fc:ca:09:97:
72:e4:8b:d6:fe:f5:1d:96:2b:3c:4a:1f:5c:35:20:
da:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:74:8F:31:65:1E:C2:67:40:24:89:98:18:B4:76:08:A1:10:58:71
X509v3 Authority Key Identifier:
keyid:F1:43:D1:3C:7B:BD:2A:A1:5F:56:77:C1:39:AC:33:C8:67:87:9F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UPRPHu9KqFfVnfBOawzyGeHnyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:c8:0e:cf:60:59:90:9c:77:83:07:57:14:fb:ae:2f:3e:6a:
e8:45:c8:a1:de:33:1c:94:36:6e:2d:2a:28:7c:95:ca:fb:df:
ba:5b:41:f5:40:34:ba:f7:60:af:25:1c:f3:a2:27:3d:84:b4:
f6:26:d1:a0:b0:a5:ee:f3:23:08:c8:68:8e:91:f7:ad:1f:bc:
d4:2b:d5:f8:bc:d8:31:94:75:ca:92:0d:5e:7f:2c:d5:60:5a:
54:0c:3f:8b:0a:71:57:d8:3f:a6:90:36:c8:46:4b:4d:3a:e3:
59:0e:52:b0:b4:1c:a7:9f:cf:cb:d1:6e:07:95:6c:19:56:bc:
e2:45:32:c6:20:fc:96:3c:ed:e3:64:34:a0:6f:1c:3f:50:ec:
91:d0:35:00:b6:c2:e0:c8:e3:2a:e6:4e:ff:2a:75:5b:f3:b1:
09:bd:19:50:72:ff:f2:d7:8c:bf:de:cd:ec:90:5d:bc:da:d9:
d3:dc:05:2e:0b:2f:1b:12:75:62:d7:82:22:68:1d:8f:17:a8:
d0:3b:3f:ae:ae:b9:6e:86:cd:3d:4e:41:52:b2:76:0c:3f:dc:
64:b9:95:a1:ef:2f:cb:11:a2:4b:f4:0f:5d:9d:ee:8f:f8:9a:
73:5c:01:1d:f9:ae:83:9b:2e:0b:e6:f8:cd:58:e0:33:83:b8:
b8:1a:75:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8ZXuC8CITJqYMzEV4KLIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxNDNkMTNjN2JiZDJhYTE1ZjU2NzdjMTM5YWMzM2M4Njc4
NzlmMmMwHhcNMjUwODIzMDgwMDM2WhcNMjUwODI0MDgwMDM2WjAzMTEwLwYDVQQD
EyhhNjc0OGYzMTY1MWVjMjY3NDAyNDg5OTgxOGI0NzYwOGExMTA1ODcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6NrEOQliha42omyoXAIySJs6AMfM
xT8mrPU3Y/cXmLrzGV7roqk/8ADMICWRRbhPB73ZQWr6TtICNwJzu64YucIKa0NO
aMXUhwZcgY1Mzkr7n6/sTlxak37YmXufLcK82HVg+M8PsaKPABcyhql/Sa2mScCH
4Lq4sRB8y5gM9bIt9AFeVpVCx+bJyA+6fitIakVodoxqaOmV+AIaMJ2Z5F9MDl8A
5Nyg1UIJ3Mcqb/JRVV6AD0FmoxzcAMw1D6H68JXqVYpV8aVl/pnbf9ixiA4xzty2
FdEf9rNvO972sv/znvIC3EpoztdN3vzKCZdy5IvW/vUdlis8Sh9cNSDaowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKZ0jzFlHsJnQCSJmBi0dgihEFhxMB8GA1UdIwQY
MBaAFPFD0Tx7vSqhX1Z3wTmsM8hnh58sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFVQUlBIdTlLcUZmVm5mQk9hd3p5R2VIbnl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy84MzU5Y2UtYmJkNC00MjUzLTk0NjQt
YTE0NmExYjAxZjhmLzEvOFVQUlBIdTlLcUZmVm5mQk9hd3p5R2VIbnl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy84MzU5Y2UtYmJkNC00MjUzLTk0NjQtYTE0NmExYjAxZjhm
LzEvOFVQUlBIdTlLcUZmVm5mQk9hd3p5R2VIbnl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlsgOz2BZ
kJx3gwdXFPuuLz5q6EXIod4zHJQ2bi0qKHyVyvvfultB9UA0uvdgryUc86InPYS0
9ibRoLCl7vMjCMhojpH3rR+81CvV+LzYMZR1ypINXn8s1WBaVAw/iwpxV9g/ppA2
yEZLTTrjWQ5SsLQcp5/Py9FuB5VsGVa84kUyxiD8ljzt42Q0oG8cP1DskdA1ALbC
4MjjKuZO/yp1W/OxCb0ZUHL/8teMv97N7JBdvNrZ09wFLgsvGxJ1YteCImgdjxeo
0Ds/rq65bobNPU5BUrJ2DD/cZLmVoe8vyxGiS/QPXZ3uj/iac1wBHfmug5suC+b4
zVjgM4O4uBp1pw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:24:25 2025 by rpki-client