Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft
File: UpIxske_9ltMY0GQfs1eq6f5ypI.mft (raw, json)
Hash identifier: yDEDx+FsPHD8zcg4uPENaVWnUt5DBvmQ2OUXGPbcZ5s=
Subject key identifier: 35:99:91:42:1A:1D:D8:FF:9D:C2:60:58:C4:F1:D0:86:7E:2A:00:B0
Authority key identifier: 52:92:31:B2:47:BF:F6:5B:4C:63:41:90:7E:CD:5E:AB:A7:F9:CA:92
Certificate issuer: /CN=529231b247bff65b4c6341907ecd5eaba7f9ca92
Certificate serial: 0199FD6B17923A3CCB155255390B89EE4816
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpIxske_9ltMY0GQfs1eq6f5ypI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 17:01:17 +0000
Manifest this update: Sun 19 Oct 2025 17:01:17 +0000
Manifest next update: Mon 20 Oct 2025 17:01:17 +0000
Files and hashes: 1: QNtVQ4uRD5YHVKeiIuOtvfCNd7w.roa (hash: h1eiwnIox6CJN2eOBBfQEHdpOKWR/C6Oxeaya2ntIbQ=)
2: UpIxske_9ltMY0GQfs1eq6f5ypI.crl (hash: CTt0TqlnHTuV/YAsHN7IOxmaBOI9dGCyj/npMCN3dQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UpIxske_9ltMY0GQfs1eq6f5ypI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:17:92:3a:3c:cb:15:52:55:39:0b:89:ee:48:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529231b247bff65b4c6341907ecd5eaba7f9ca92
Validity
Not Before: Oct 19 17:01:17 2025 GMT
Not After : Oct 20 17:01:17 2025 GMT
Subject: CN=359991421a1dd8ff9dc26058c4f1d0867e2a00b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:b3:d7:3e:0e:86:bc:b8:b6:57:b4:70:eb:ef:
d5:61:25:a1:20:26:8e:1f:fb:cf:27:32:6f:5f:0b:
82:13:37:35:4e:1c:cd:38:95:1d:73:51:52:6b:71:
b0:05:ff:06:04:26:fb:02:c2:87:3a:ed:d9:91:37:
fb:25:fd:7c:c0:7c:94:78:6d:3e:e2:32:cf:a3:19:
66:51:9c:1b:2c:50:80:a7:c5:31:6d:7c:09:3a:57:
ff:fb:db:40:0d:04:c0:0f:b6:03:b1:f6:c7:a3:5a:
00:86:51:6d:8c:cc:5d:08:08:24:f1:e6:76:ba:2b:
58:6e:a6:e6:44:45:f6:3f:a7:f9:de:87:4e:e9:fd:
71:82:5b:32:a1:d6:a2:db:8d:a8:e2:27:b0:ce:ec:
ee:2c:9a:9a:2b:a0:9e:43:c2:41:21:31:14:76:7b:
49:13:b7:89:31:1e:ad:c0:22:6f:81:bf:d3:47:73:
a5:ef:1e:f1:dc:9e:3b:e4:8a:f0:7d:85:e3:ca:23:
8f:e8:33:63:9a:85:70:94:51:bc:82:ea:d2:f4:40:
da:fa:fd:39:df:1f:1b:4b:43:f5:2b:1d:57:2e:8a:
b0:47:c2:66:32:e5:ec:6c:70:9f:5e:2c:88:cb:e4:
c7:9a:19:18:a6:9d:a1:d0:86:ec:5a:e0:c4:3f:81:
4b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:99:91:42:1A:1D:D8:FF:9D:C2:60:58:C4:F1:D0:86:7E:2A:00:B0
X509v3 Authority Key Identifier:
keyid:52:92:31:B2:47:BF:F6:5B:4C:63:41:90:7E:CD:5E:AB:A7:F9:CA:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpIxske_9ltMY0GQfs1eq6f5ypI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:81:9e:e0:ea:c3:90:b1:9b:0b:13:90:9c:64:75:d4:46:fb:
0a:f6:92:36:98:81:75:4e:4b:0d:09:8e:d6:9d:c4:b6:b2:1c:
f9:2c:dc:b9:8f:7c:62:30:fb:88:e3:3e:73:cb:7e:c4:86:bb:
46:4e:58:7e:91:59:68:3b:fd:70:f7:cb:3b:9d:a5:12:ee:95:
a3:e2:a9:3a:22:58:fe:b6:91:7b:e4:62:43:8a:e6:71:9e:b8:
92:02:2a:24:05:14:61:22:ff:e9:00:ea:3e:db:fc:4d:38:76:
b5:cf:67:02:9e:07:ec:c2:98:07:1b:e6:85:c1:23:bd:62:41:
e0:b7:53:04:7e:83:7e:45:2b:67:63:8c:f6:d5:6e:ff:a7:0b:
67:78:7b:c7:58:cd:23:be:26:f1:9f:37:30:00:d4:08:09:ce:
f9:62:5e:3e:ba:7e:e9:83:2c:ea:83:17:be:98:a5:04:ea:5f:
21:50:51:57:7f:99:38:17:2d:b3:21:b7:d7:16:f2:21:4c:34:
89:1e:57:3b:09:c5:e0:9c:41:70:c1:18:50:87:5d:39:2e:21:
68:b5:bd:b6:da:62:03:cd:f9:30:40:14:d8:02:e4:da:a3:b2:
81:47:d5:a3:71:ac:77:39:9e:b1:8e:03:fd:bb:98:dc:3c:c8:
3b:fe:e8:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:59:39 2025 by rpki-client