Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.mft
File: 8Uebg8Ug14REXCSCi6tjPw1wLPM.mft (raw, json)
Hash identifier: +QYKmZrGa2AHZu20SLXn4pWiGxK8VDSFVNXOxYJknho=
Subject key identifier: 95:5B:CD:53:8C:5C:46:6B:9B:8A:0C:CC:E9:90:0A:3B:0C:C8:E2:32
Authority key identifier: F1:47:9B:83:C5:20:D7:84:44:5C:24:82:8B:AB:63:3F:0D:70:2C:F3
Certificate issuer: /CN=f1479b83c520d784445c24828bab633f0d702cf3
Certificate serial: 019A533EE07B5A7546A4FCC2BE1FCF9C6651
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Uebg8Ug14REXCSCi6tjPw1wLPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.mft
Manifest number: 173F
Signing time: Wed 05 Nov 2025 09:00:20 +0000
Manifest this update: Wed 05 Nov 2025 09:00:20 +0000
Manifest next update: Thu 06 Nov 2025 09:00:20 +0000
Files and hashes: 1: 8Uebg8Ug14REXCSCi6tjPw1wLPM.crl (hash: 30urAyHrZVXo2VctBf5RniD9lr7w9+1ikyLXqjJBsEg=)
2: TQKhSi8Awccw4XCNSJ1aruVNLAk.roa (hash: sIBHk/GyN9LYf2GBmbzqMybhc4XcRHVc+6LBWV3OWQY=)
3: UzzaZe2IBnqaAlUC3PzUQU79vek.roa (hash: 0lOgrSdqev4Q++AWXwQLula9bZznJKXyC0Jsns6HfWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Uebg8Ug14REXCSCi6tjPw1wLPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3e:e0:7b:5a:75:46:a4:fc:c2:be:1f:cf:9c:66:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1479b83c520d784445c24828bab633f0d702cf3
Validity
Not Before: Nov 5 09:00:20 2025 GMT
Not After : Nov 6 09:00:20 2025 GMT
Subject: CN=955bcd538c5c466b9b8a0ccce9900a3b0cc8e232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:cd:7c:4e:7b:7c:25:05:a8:18:68:31:76:58:
ff:94:8d:b9:00:10:0b:e3:24:96:63:45:0b:a0:98:
37:2c:9f:ee:4d:0c:9d:bd:3b:34:c4:e0:66:a4:4d:
3d:cc:9d:1f:02:52:23:e1:a8:6b:50:cc:c9:7c:2e:
2f:62:1d:66:73:de:70:6a:6f:3a:45:02:cc:39:3f:
e5:20:fa:37:ff:0e:4b:4f:b4:74:37:88:77:a6:ef:
eb:70:fa:fb:11:da:f2:33:cb:6b:e4:d4:76:2f:ae:
b3:16:a6:a0:c9:46:b0:e3:ee:c9:23:78:ed:f2:94:
50:f9:13:0f:a7:c0:e6:2f:af:e2:85:0c:85:32:c9:
5d:c2:12:b4:82:9a:8c:48:a9:10:7a:a3:fe:bb:da:
e9:14:05:8f:3f:b3:65:fa:85:3c:b4:3b:34:9a:4a:
2d:6d:22:7f:d4:1c:5e:e0:c2:6c:5a:58:1d:67:9d:
48:18:00:4b:8d:ff:72:f8:ba:97:b6:fa:90:bd:a0:
d0:06:80:c6:04:87:c4:68:b9:46:5b:83:05:53:0d:
b6:ab:da:1a:06:1a:7f:5b:df:0e:ff:db:35:57:1c:
f7:11:a8:a8:98:e2:fa:ac:6e:ae:f8:f6:34:aa:57:
77:b8:9d:b2:83:a4:b7:84:b5:10:a2:27:5d:f1:07:
17:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:5B:CD:53:8C:5C:46:6B:9B:8A:0C:CC:E9:90:0A:3B:0C:C8:E2:32
X509v3 Authority Key Identifier:
keyid:F1:47:9B:83:C5:20:D7:84:44:5C:24:82:8B:AB:63:3F:0D:70:2C:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Uebg8Ug14REXCSCi6tjPw1wLPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:e5:95:e9:97:81:b9:e6:ea:a1:2d:22:3d:b2:fa:2e:7d:12:
fa:4a:b9:04:e1:03:f1:38:c8:2c:05:c5:19:7e:fa:f3:7b:12:
6b:11:75:42:c9:18:4c:56:ab:42:8a:e4:d8:0a:46:3a:c0:c8:
04:c3:57:54:e5:ef:52:3c:7d:55:d2:93:13:e9:e0:79:51:bf:
b5:85:39:08:1b:70:dc:98:7f:78:c3:ac:33:5c:5a:67:04:65:
62:e7:79:64:19:e5:6c:9c:66:a1:58:d2:82:c1:64:6b:8c:3f:
b9:07:1b:cd:2e:26:1a:41:a3:da:02:cf:a0:e1:26:35:28:5e:
d9:fb:cc:db:df:c6:be:c7:54:e3:51:4e:ac:89:e9:be:b8:50:
89:3c:e3:eb:c9:89:61:f3:8f:48:23:a2:ef:f0:fa:d5:ef:de:
b8:f6:7a:09:78:6c:7c:26:46:bf:3b:23:9b:73:c6:51:bf:08:
4d:5f:39:1d:a2:23:b6:1c:91:c9:52:fe:a5:48:28:af:5c:3b:
02:bd:49:e4:0d:36:ee:9d:e0:37:20:2f:02:84:63:7d:28:b0:
e7:f2:69:86:4a:80:47:6f:25:05:c4:cd:48:09:af:1d:2b:65:
fc:66:ca:c6:27:8d:65:16:00:68:89:1d:31:76:f3:0c:ce:90:
f4:ac:45:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:56:10 2025 by rpki-client