Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft
File: 8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft (raw, json)
Hash identifier: RcoQNoluob9exwCVzuZ5EbDfrLW1C1Mw8VyaYtJfwH0=
Subject key identifier: 44:E4:D7:52:BD:FB:0E:88:AD:46:51:8D:BA:BF:3F:18:6A:4B:31:91
Authority key identifier: F1:4A:63:18:B2:ED:6D:0C:82:34:F9:82:08:F8:8D:E0:E9:D4:69:8E
Certificate issuer: /CN=f14a6318b2ed6d0c8234f98208f88de0e9d4698e
Certificate serial: 019A5488571DBC28EBD18A8921826FD19650
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UpjGLLtbQyCNPmCCPiN4OnUaY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft
Manifest number: 119C
Signing time: Wed 05 Nov 2025 15:00:12 +0000
Manifest this update: Wed 05 Nov 2025 15:00:12 +0000
Manifest next update: Thu 06 Nov 2025 15:00:12 +0000
Files and hashes: 1: 8UpjGLLtbQyCNPmCCPiN4OnUaY4.crl (hash: 5Mw0TL7+PSQGWlZRJzV9XH92epoKeVNhFY3lkIKZ+F0=)
2: VJ4tqhsbAxvbZbMk4UpOcvURbX8.roa (hash: rFhoSBbOl1/XJywdO7kEvMzIk6v7w1dBiBMHnGzvKJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8UpjGLLtbQyCNPmCCPiN4OnUaY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 15:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:88:57:1d:bc:28:eb:d1:8a:89:21:82:6f:d1:96:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f14a6318b2ed6d0c8234f98208f88de0e9d4698e
Validity
Not Before: Nov 5 15:00:12 2025 GMT
Not After : Nov 6 15:00:12 2025 GMT
Subject: CN=44e4d752bdfb0e88ad46518dbabf3f186a4b3191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fb:36:ea:31:de:4e:4e:e3:f9:eb:f4:99:a7:
8d:55:09:63:cd:ca:d8:2b:7d:06:a3:8f:ca:57:5c:
25:4c:42:7c:e5:2d:e3:ac:eb:b9:9e:72:d9:af:07:
64:27:b3:08:c9:81:a8:44:33:a2:11:29:77:63:f5:
a7:69:fb:3c:14:0a:f1:46:de:69:99:0c:83:d6:ef:
7a:4e:d2:f8:e8:c0:6b:49:29:d3:3e:c3:ba:4c:b8:
ea:36:80:31:d0:8e:6c:e3:ed:40:0b:db:fc:e5:49:
4b:b3:bc:31:28:69:83:d6:81:ee:59:60:6b:45:a5:
9f:12:66:aa:5d:76:95:06:ca:45:a5:ab:9e:62:62:
ac:37:a3:36:d3:a6:67:69:4f:50:0c:5a:ae:fc:df:
8a:1d:04:33:6e:1f:6f:82:af:7d:01:cf:57:05:7b:
4d:0e:b1:ff:76:03:1e:21:9b:9d:24:b6:d2:75:5e:
c2:a0:b3:46:71:a2:13:b7:c1:1f:f1:72:11:f5:6b:
2c:d5:68:18:7e:b8:83:97:7e:68:7a:19:10:7e:ea:
4b:e1:9c:87:f7:ed:31:86:19:4c:0e:2f:72:06:cd:
79:cd:31:e3:fc:48:db:eb:39:d7:2d:4a:09:81:81:
e7:35:09:08:a9:b9:15:91:6e:76:20:a7:a8:4b:80:
d5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E4:D7:52:BD:FB:0E:88:AD:46:51:8D:BA:BF:3F:18:6A:4B:31:91
X509v3 Authority Key Identifier:
keyid:F1:4A:63:18:B2:ED:6D:0C:82:34:F9:82:08:F8:8D:E0:E9:D4:69:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UpjGLLtbQyCNPmCCPiN4OnUaY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/335797-9b21-4c50-b044-c86ed4862501/1/8UpjGLLtbQyCNPmCCPiN4OnUaY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:b9:24:9f:cc:a1:fd:c4:95:ae:33:01:2e:88:92:3b:4c:6a:
60:b5:ad:04:26:1f:6d:37:76:0c:0b:1f:26:43:7c:e8:e3:25:
80:f9:85:c6:a9:c5:c4:bf:ca:a8:f5:ac:4c:04:c8:89:e3:94:
a3:17:8e:d0:13:8c:89:88:83:7a:ab:59:5d:5f:4b:44:e3:f5:
1e:33:c9:71:7c:91:a1:19:ef:6a:26:4d:ec:bd:04:82:09:03:
c2:bd:17:14:ae:f3:13:ca:0e:52:ef:4b:e5:d3:a8:95:dc:90:
7e:0d:da:ac:62:21:3e:72:61:de:3f:77:75:04:aa:e6:4a:44:
7d:f6:b8:47:d7:36:9f:50:83:5b:b7:2b:c2:ae:c1:e2:8b:c1:
97:29:18:aa:71:4e:11:f3:19:28:40:93:51:d7:26:af:20:57:
65:76:bd:23:6a:73:8d:33:b9:29:ab:df:f4:d1:a9:13:2f:5a:
89:f0:0a:a6:7f:d0:d8:fb:2e:ff:c1:4d:f9:e3:43:e2:ee:b4:
e8:14:12:d7:ea:0e:86:cb:3c:80:a2:58:6f:6e:e1:57:7e:96:
03:0b:39:61:55:8b:36:08:86:9d:ec:da:33:5f:f5:c9:5a:84:
4d:e5:1c:cf:2b:3b:ef:b9:f9:b0:6b:d7:4f:0d:f3:04:79:ba:
38:f5:02:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:46:59 2025 by rpki-client