Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft
File: 8UPRPHu9KqFfVnfBOawzyGeHnyw.mft (raw, json)
Hash identifier: MiPJAhG5AVWlcHYMus8agaq7O2TEsfZjwRCf31f3vug=
Subject key identifier: 0E:29:1F:A7:E9:23:B9:63:60:C6:36:28:A0:4F:60:CA:82:3F:DC:58
Authority key identifier: F1:43:D1:3C:7B:BD:2A:A1:5F:56:77:C1:39:AC:33:C8:67:87:9F:2C
Certificate issuer: /CN=f143d13c7bbd2aa15f5677c139ac33c867879f2c
Certificate serial: 0199FF59977B5EE972BB4A6C59C7A0F85596
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UPRPHu9KqFfVnfBOawzyGeHnyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft
Manifest number: 0734
Signing time: Mon 20 Oct 2025 02:01:25 +0000
Manifest this update: Mon 20 Oct 2025 02:01:25 +0000
Manifest next update: Tue 21 Oct 2025 02:01:25 +0000
Files and hashes: 1: 8UPRPHu9KqFfVnfBOawzyGeHnyw.crl (hash: 26CKKPaqz6IIg7f3ywl4qfvy49/YqtswK1Ypbvgd69c=)
2: UMmv-WY7B5qYJViInJvlNV476mE.roa (hash: jHHOgpNZRXbrpDROEuRDFCxUXMl5uaCZV9NM+NW4eXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8UPRPHu9KqFfVnfBOawzyGeHnyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:97:7b:5e:e9:72:bb:4a:6c:59:c7:a0:f8:55:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f143d13c7bbd2aa15f5677c139ac33c867879f2c
Validity
Not Before: Oct 20 02:01:25 2025 GMT
Not After : Oct 21 02:01:25 2025 GMT
Subject: CN=0e291fa7e923b96360c63628a04f60ca823fdc58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:42:97:52:b9:fe:3b:8c:55:e0:ed:11:9e:92:
c2:2b:1b:84:0d:cb:ba:57:63:38:50:97:26:89:53:
6c:5e:0b:4e:2d:e1:4a:54:79:79:2d:24:92:a6:1e:
28:71:7c:38:83:6a:84:25:58:21:86:5e:86:0f:cf:
82:55:e5:fd:f4:34:b5:60:c2:76:55:58:30:1c:77:
44:cb:f3:3f:08:a4:c6:9e:b2:2c:b7:86:98:46:99:
3a:fa:dc:9a:54:2c:fc:24:96:c0:f6:56:86:31:fe:
c1:95:4d:af:7f:cc:f4:38:fa:d0:2c:29:db:d6:45:
c0:b8:b0:88:ae:37:00:92:b4:e8:bc:67:e2:df:34:
b8:3d:0e:c8:fa:34:15:e1:90:32:3d:60:88:51:65:
b0:b6:f6:b6:06:82:10:80:a9:cf:1a:85:5d:7a:54:
97:cc:98:6e:9d:70:a4:ff:79:81:69:76:60:00:be:
e9:a2:f2:22:5c:a7:a9:40:6f:4e:27:34:69:60:35:
ba:b3:31:75:61:22:c6:5d:6a:e4:af:cf:2f:90:68:
cd:78:88:9c:c1:29:60:d7:61:42:27:33:a2:47:14:
aa:ee:7b:3e:3a:95:8f:ec:8a:36:4f:a8:8f:ab:cd:
1f:89:e3:cf:ed:a3:1d:a1:89:55:18:ec:ec:9b:08:
60:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:29:1F:A7:E9:23:B9:63:60:C6:36:28:A0:4F:60:CA:82:3F:DC:58
X509v3 Authority Key Identifier:
keyid:F1:43:D1:3C:7B:BD:2A:A1:5F:56:77:C1:39:AC:33:C8:67:87:9F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UPRPHu9KqFfVnfBOawzyGeHnyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:f9:35:49:9a:55:d9:70:a0:9a:6e:3f:cd:3a:7e:15:8f:eb:
37:5a:de:a6:5b:06:d7:25:96:d7:dc:45:a9:61:4d:b9:f3:eb:
94:76:e2:25:b4:86:24:3e:a1:0c:09:29:51:91:29:c1:8e:a2:
f5:b5:56:b9:83:59:a6:cb:75:3b:d3:1d:aa:6e:77:e3:8f:b2:
97:e4:2d:d0:0f:44:ed:fb:82:d0:e8:56:c6:d8:06:15:84:8f:
a0:9e:8b:2a:aa:e1:fa:64:a8:e3:d3:88:c1:0d:4c:23:66:30:
0c:5f:ca:69:1c:37:ed:81:9c:00:b4:02:05:3f:32:50:58:ea:
ee:55:aa:5f:79:66:bf:cc:61:50:6d:96:c0:b2:35:98:25:fa:
07:58:79:14:16:e0:d2:c2:72:0a:bc:77:ab:06:6c:13:89:58:
db:ad:51:9a:6b:7b:28:a6:64:05:be:7f:c0:ce:84:60:9d:0f:
b7:c1:95:2a:55:29:24:42:0c:35:b4:5e:19:ba:4b:6a:c7:e4:
93:e4:6e:0c:c0:b6:90:ff:11:ed:f8:d6:f9:3a:28:97:b1:42:
e3:34:8e:eb:8f:e1:7b:67:da:0f:19:c9:c3:86:d8:6e:80:e5:
9d:37:c8:cf:be:95:dc:12:44:ef:4a:7c:fc:6f:69:54:9f:ba:
6b:3f:ea:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:06:08 2025 by rpki-client