Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft
File: UpIxske_9ltMY0GQfs1eq6f5ypI.mft (raw, json)
Hash identifier: IpeCMq2eaAM4YLUiLXw+UR2CyMMGhRR6Y6BTviucYSY=
Subject key identifier: AA:DF:DF:16:91:63:A9:64:BE:01:70:BB:8B:00:8A:B4:1B:DC:A3:C7
Authority key identifier: 52:92:31:B2:47:BF:F6:5B:4C:63:41:90:7E:CD:5E:AB:A7:F9:CA:92
Certificate issuer: /CN=529231b247bff65b4c6341907ecd5eaba7f9ca92
Certificate serial: 0197B63303D781BE4FDE37508281D186C304
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpIxske_9ltMY0GQfs1eq6f5ypI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 11:01:25 +0000
Manifest this update: Sat 28 Jun 2025 11:01:25 +0000
Manifest next update: Sun 29 Jun 2025 11:01:25 +0000
Files and hashes: 1: QNtVQ4uRD5YHVKeiIuOtvfCNd7w.roa (hash: h1eiwnIox6CJN2eOBBfQEHdpOKWR/C6Oxeaya2ntIbQ=)
2: UpIxske_9ltMY0GQfs1eq6f5ypI.crl (hash: 7cbA5AKI+i92V9cwmTS437WTd4/GNOv7cyzhBATgFyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UpIxske_9ltMY0GQfs1eq6f5ypI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:33:03:d7:81:be:4f:de:37:50:82:81:d1:86:c3:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529231b247bff65b4c6341907ecd5eaba7f9ca92
Validity
Not Before: Jun 28 11:01:25 2025 GMT
Not After : Jun 29 11:01:25 2025 GMT
Subject: CN=aadfdf169163a964be0170bb8b008ab41bdca3c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:22:63:05:06:fd:e6:22:d6:53:b8:a9:20:68:
77:c4:8e:25:14:50:90:97:50:b6:10:65:a5:04:c5:
48:0e:c1:6d:57:4c:47:9f:16:d7:9d:5e:4e:76:90:
40:b9:bf:f3:78:78:41:8a:fb:c3:16:c3:d3:bb:40:
86:7b:fa:a3:df:be:67:7c:0e:05:d1:23:e3:20:fe:
6f:4a:4c:b1:ec:75:7e:6b:88:97:66:3d:d6:09:a8:
9c:e7:b5:a2:4d:53:29:eb:47:5d:96:50:9b:5f:d1:
f9:a8:0c:ec:51:d1:f9:a3:11:3c:c3:8e:55:ff:e2:
b9:63:15:6e:8d:7d:b6:f6:a4:2e:85:04:f5:fd:2a:
57:71:ba:08:63:2a:9a:ca:70:5d:2a:b6:1b:cd:11:
df:f3:fb:53:bb:21:62:93:22:7c:ae:6d:53:23:83:
14:f0:14:cd:6a:ca:01:50:5f:16:24:0a:9c:6c:01:
37:aa:34:38:ae:c6:9b:ae:91:bc:a0:98:2b:6c:4a:
9c:9a:f9:b3:27:90:28:d0:28:40:82:e8:aa:6d:0b:
cf:bd:a3:cf:3e:43:d0:72:54:ca:c7:6b:fc:65:b2:
0c:6c:2a:88:77:12:e9:c2:3b:c5:a6:5b:e9:74:79:
ac:4c:75:e4:41:fe:72:af:2e:3d:f5:1d:df:66:b6:
f9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:DF:DF:16:91:63:A9:64:BE:01:70:BB:8B:00:8A:B4:1B:DC:A3:C7
X509v3 Authority Key Identifier:
keyid:52:92:31:B2:47:BF:F6:5B:4C:63:41:90:7E:CD:5E:AB:A7:F9:CA:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpIxske_9ltMY0GQfs1eq6f5ypI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:f1:58:20:60:27:c0:1f:27:c2:f5:20:86:7d:45:35:0f:1a:
00:78:23:e0:a3:27:ee:b4:90:1f:f2:02:39:f6:52:29:43:4c:
38:eb:6d:ca:73:04:3d:e9:c8:aa:05:77:a0:20:d9:fe:d0:35:
d5:97:10:bd:f0:84:90:4f:e2:8f:ea:cc:48:84:84:4b:63:57:
aa:2d:8b:5a:ed:e3:48:18:a7:87:0c:dd:1b:62:1f:53:0e:74:
4d:34:57:4b:82:2a:26:0a:95:a8:86:a2:8f:2b:41:2e:a5:00:
ff:8b:33:4d:e5:e2:cb:28:32:d6:00:88:64:3a:71:ba:2d:60:
d6:7d:2b:57:c3:0a:9f:42:1e:e4:48:4d:8b:85:81:2c:4e:aa:
a3:e2:3b:28:21:b9:54:b1:5a:c7:72:66:c0:f3:48:aa:fd:58:
e2:3a:ac:2f:f5:50:33:93:8f:e5:8b:93:c4:8b:b2:d3:a6:63:
38:1d:f7:da:cc:d8:94:56:71:0d:0f:dc:24:d4:87:c8:ee:d1:
37:ee:40:51:71:6f:aa:32:a4:23:2b:79:18:ed:0a:b8:05:6c:
c6:eb:bf:e2:18:ac:e4:09:d5:a0:3a:e1:a1:89:32:37:97:ab:
15:62:04:3e:d0:90:b6:65:dc:29:f9:6a:a3:79:18:5e:2d:7b:
28:95:44:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:57:29 2025 by rpki-client