Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e8c264-be46-46f1-928e-48c10a978bd0/1/ukQ9hkNVeFdrQjFVWg7SE_UivvM.mft
File: ukQ9hkNVeFdrQjFVWg7SE_UivvM.mft (raw, json)
Hash identifier: nJanOh4cQpguCl8bSBmjKeSfH+oXjyY76RllUjRrPrw=
Subject key identifier: 8E:C4:DE:C5:A0:1A:FC:92:98:12:94:9F:C4:68:B7:9B:D1:69:46:C2
Authority key identifier: BA:44:3D:86:43:55:78:57:6B:42:31:55:5A:0E:D2:13:F5:22:BE:F3
Certificate issuer: /CN=ba443d86435578576b4231555a0ed213f522bef3
Certificate serial: 01989DBA3FE64B72F867AFDAFF36475487BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ukQ9hkNVeFdrQjFVWg7SE_UivvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e8c264-be46-46f1-928e-48c10a978bd0/1/ukQ9hkNVeFdrQjFVWg7SE_UivvM.mft
Manifest number: 08E8
Signing time: Tue 12 Aug 2025 10:01:25 +0000
Manifest this update: Tue 12 Aug 2025 10:01:25 +0000
Manifest next update: Wed 13 Aug 2025 10:01:25 +0000
Files and hashes: 1: pJcYXodpDPmMRbZLo0Tatq1ioSM.roa (hash: reA4i3iUw1X1kJD9p6sG3wX62hmlDQuF+yso9k92RQ4=)
2: ukQ9hkNVeFdrQjFVWg7SE_UivvM.crl (hash: spt/Z+5E+WR3SWsZVUmnN1V+kZplnbJVnx6EPn8bxpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/e8c264-be46-46f1-928e-48c10a978bd0/1/ukQ9hkNVeFdrQjFVWg7SE_UivvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/e8c264-be46-46f1-928e-48c10a978bd0/1/ukQ9hkNVeFdrQjFVWg7SE_UivvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ukQ9hkNVeFdrQjFVWg7SE_UivvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 10:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9d:ba:3f:e6:4b:72:f8:67:af:da:ff:36:47:54:87:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba443d86435578576b4231555a0ed213f522bef3
Validity
Not Before: Aug 12 10:01:25 2025 GMT
Not After : Aug 13 10:01:25 2025 GMT
Subject: CN=8ec4dec5a01afc929812949fc468b79bd16946c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:60:cf:be:77:5f:66:72:5a:94:d0:fd:d2:c8:
4d:4a:a0:f3:5e:81:d5:26:ae:a8:dc:97:ec:42:b5:
f3:67:64:25:38:fe:d2:17:a7:5f:37:4a:8e:3b:f1:
98:af:70:58:35:b1:a9:b4:28:ba:3b:20:35:d0:8d:
01:f8:70:8f:61:3b:e5:e6:a1:0f:47:a3:63:64:42:
ef:49:fc:d0:9f:81:96:58:0c:5f:5d:2e:a7:21:e4:
82:3d:38:92:89:b4:fb:3e:ef:46:6f:57:65:91:bb:
03:4a:a8:ae:de:6e:29:77:4a:35:fe:f1:47:3e:8a:
0b:b2:96:d0:66:f5:5f:cf:ca:33:f8:bf:81:8b:e7:
14:01:73:40:d9:7e:54:ea:3f:e1:69:c4:01:9b:38:
4f:35:83:50:6a:a4:9a:1a:24:37:0d:06:92:17:cf:
a9:c2:53:fa:c1:46:9c:11:e7:2f:ba:00:93:4b:f1:
3b:cb:9f:be:05:df:09:57:d1:ee:62:ba:f7:47:71:
61:13:c0:10:8a:bf:1b:c9:5c:f9:9b:9c:09:3e:5d:
bd:bf:f5:1c:3d:35:b1:ad:25:28:4f:32:52:36:0f:
31:aa:da:43:60:80:ae:6a:b8:46:8b:12:3b:12:bf:
27:7c:4a:60:8d:4c:62:2b:a5:62:40:44:72:fa:b9:
67:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:C4:DE:C5:A0:1A:FC:92:98:12:94:9F:C4:68:B7:9B:D1:69:46:C2
X509v3 Authority Key Identifier:
keyid:BA:44:3D:86:43:55:78:57:6B:42:31:55:5A:0E:D2:13:F5:22:BE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukQ9hkNVeFdrQjFVWg7SE_UivvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e8c264-be46-46f1-928e-48c10a978bd0/1/ukQ9hkNVeFdrQjFVWg7SE_UivvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e8c264-be46-46f1-928e-48c10a978bd0/1/ukQ9hkNVeFdrQjFVWg7SE_UivvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:c9:ce:a0:94:2d:fb:3c:32:2a:2e:e7:34:45:10:03:f8:5c:
f7:2e:04:28:11:8c:d3:d6:60:8c:5d:13:dc:3d:9a:29:8f:52:
16:be:59:75:3d:4d:c4:32:ab:8b:a1:b4:2c:ab:28:33:61:2e:
27:14:ef:eb:2a:eb:ba:11:0f:15:57:db:98:4e:a6:c1:ef:be:
26:1b:f6:90:46:3a:20:10:7f:e6:92:48:da:51:ae:77:b8:8a:
c2:20:ad:b0:d0:68:bc:c1:57:17:4b:bf:f5:80:5d:4a:23:13:
19:da:80:2b:1b:1f:41:d9:50:ce:26:d8:5f:93:70:d0:6c:70:
e3:cf:a2:42:ba:d9:65:35:e2:56:a9:1c:e3:9a:bb:31:2a:7c:
0e:39:25:cf:fb:d1:80:b1:71:5f:fd:84:63:33:8b:b9:f9:46:
90:ed:b2:fa:7d:e2:d2:08:6e:60:02:ce:65:56:41:8a:11:8f:
06:d4:43:0b:1d:57:e6:14:a8:6e:33:1e:f2:f6:44:92:b6:22:
b1:e3:1c:75:7a:f3:d8:98:55:dd:b1:5b:22:23:c8:6f:44:13:
e9:2e:ae:92:a9:3c:db:93:a5:36:38:53:68:e6:fc:ad:b4:98:
99:0b:b4:b0:d5:3f:b2:ba:9d:7a:35:15:97:d4:16:97:20:d6:
77:13:62:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 19:04:28 2025 by rpki-client