Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.mft
File: 8Uebg8Ug14REXCSCi6tjPw1wLPM.mft (raw, json)
Hash identifier: w59tDy1O3GCsS7T29Kjsu4K7LZLS08sAx73V22H50YU=
Subject key identifier: 26:8A:FB:2E:52:A2:14:28:4E:84:E6:2F:13:08:59:AE:35:E0:8D:7F
Authority key identifier: F1:47:9B:83:C5:20:D7:84:44:5C:24:82:8B:AB:63:3F:0D:70:2C:F3
Certificate issuer: /CN=f1479b83c520d784445c24828bab633f0d702cf3
Certificate serial: 019872622F8C1F37955870872393CAD45D36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Uebg8Ug14REXCSCi6tjPw1wLPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.mft
Manifest number: 1646
Signing time: Mon 04 Aug 2025 00:01:33 +0000
Manifest this update: Mon 04 Aug 2025 00:01:33 +0000
Manifest next update: Tue 05 Aug 2025 00:01:33 +0000
Files and hashes: 1: 8Uebg8Ug14REXCSCi6tjPw1wLPM.crl (hash: ZegQ+JSJT+7Ol2/KS16zMfogdrgv1pc0RhQgRo5Nwz8=)
2: TQKhSi8Awccw4XCNSJ1aruVNLAk.roa (hash: sIBHk/GyN9LYf2GBmbzqMybhc4XcRHVc+6LBWV3OWQY=)
3: UzzaZe2IBnqaAlUC3PzUQU79vek.roa (hash: 0lOgrSdqev4Q++AWXwQLula9bZznJKXyC0Jsns6HfWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Uebg8Ug14REXCSCi6tjPw1wLPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 00:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:62:2f:8c:1f:37:95:58:70:87:23:93:ca:d4:5d:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1479b83c520d784445c24828bab633f0d702cf3
Validity
Not Before: Aug 4 00:01:33 2025 GMT
Not After : Aug 5 00:01:33 2025 GMT
Subject: CN=268afb2e52a214284e84e62f130859ae35e08d7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e6:d9:10:ce:fe:9d:08:a2:bf:ff:6e:9a:ac:
f4:6b:fb:3a:16:89:b4:6a:b3:40:86:59:fb:8e:07:
04:1e:1a:44:0f:ea:b5:0f:87:69:46:a5:9a:40:40:
00:dd:55:a9:6d:7b:ba:8e:19:19:84:da:0e:d7:af:
66:88:80:ae:87:a2:9a:a4:d8:41:92:ef:78:f3:27:
d8:64:51:5c:85:1f:33:cd:3d:5b:71:ce:75:8c:85:
20:24:e0:34:3a:92:8f:10:b5:bf:1f:e4:ed:27:56:
05:85:30:a2:e7:a4:fb:40:10:18:c7:0f:40:b1:37:
60:de:ba:df:96:fe:a0:9a:f5:19:be:47:c8:b0:10:
be:5a:32:1d:85:23:c2:b1:41:34:3f:a7:42:90:1b:
ab:68:2e:e8:9f:a1:1c:17:c5:d9:4e:50:92:09:c0:
9f:a1:dd:d7:43:1b:df:01:b8:41:fa:b0:59:ca:49:
41:e7:76:4b:d8:dd:3e:a4:93:c1:1c:18:2f:f0:59:
ba:3a:00:66:bd:69:8e:90:62:86:e2:0d:61:26:07:
1d:c1:14:d6:76:7e:f7:61:32:01:db:13:c2:39:be:
bd:d3:af:44:6a:20:5b:6c:a0:0b:51:80:39:76:2e:
74:54:b2:3e:be:20:ae:67:02:2c:d5:50:9d:0e:7d:
83:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:8A:FB:2E:52:A2:14:28:4E:84:E6:2F:13:08:59:AE:35:E0:8D:7F
X509v3 Authority Key Identifier:
keyid:F1:47:9B:83:C5:20:D7:84:44:5C:24:82:8B:AB:63:3F:0D:70:2C:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Uebg8Ug14REXCSCi6tjPw1wLPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:20:93:3a:77:76:58:c2:57:ed:f4:20:0f:1a:96:97:23:bb:
10:31:b4:4c:38:f8:da:c7:7a:ca:8f:1f:11:36:ef:23:d9:83:
77:19:a3:cd:6e:c8:92:71:e4:9a:8c:a9:f2:df:46:41:14:55:
83:3c:2c:42:2d:ed:6f:ec:69:7b:27:6f:32:8a:cf:12:c9:4f:
a3:11:ff:60:a4:91:54:42:57:88:5b:3d:29:82:e9:3c:8e:59:
de:be:e9:af:de:3f:13:ee:a7:37:8e:90:fa:29:25:1a:2d:dc:
9c:5e:84:1d:3f:8f:39:1e:1a:7d:50:11:ab:63:be:d1:b3:1e:
16:10:c4:49:be:c2:fa:3c:12:c4:4d:8f:a0:4e:33:e7:3c:c3:
58:53:cb:51:22:14:8d:1a:71:ff:73:8a:df:4a:e2:da:2a:dd:
7a:df:97:95:e4:fe:37:7a:73:8b:6f:6f:5b:0e:af:e3:bf:15:
fb:0e:c0:95:b5:3d:19:e8:93:1a:96:9c:31:3a:6c:80:1e:2e:
dd:4b:89:73:b5:14:78:5d:05:73:1a:80:2a:98:8b:7f:a2:93:
10:17:a3:f0:9c:37:8d:a0:88:44:c1:d9:ce:70:9b:76:ec:17:
16:6d:9b:18:2a:66:0b:a4:2c:96:99:99:78:a4:71:21:1d:1d:
97:e1:5e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:33 2025 by rpki-client