Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft
File: UpIxske_9ltMY0GQfs1eq6f5ypI.mft (raw, json)
Hash identifier: o5TinaKQAAYWExrlIDcPbebgQDyIuikXwKzAU81bLUE=
Subject key identifier: C9:13:58:5F:3F:17:F4:9A:1A:A5:87:9A:BA:FD:FA:00:86:C6:5F:19
Authority key identifier: 52:92:31:B2:47:BF:F6:5B:4C:63:41:90:7E:CD:5E:AB:A7:F9:CA:92
Certificate issuer: /CN=529231b247bff65b4c6341907ecd5eaba7f9ca92
Certificate serial: 0198D5F1AF91ECD3D2E08FCC8F1E98DA1EC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpIxske_9ltMY0GQfs1eq6f5ypI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 08:00:42 +0000
Manifest this update: Sat 23 Aug 2025 08:00:42 +0000
Manifest next update: Sun 24 Aug 2025 08:00:42 +0000
Files and hashes: 1: QNtVQ4uRD5YHVKeiIuOtvfCNd7w.roa (hash: h1eiwnIox6CJN2eOBBfQEHdpOKWR/C6Oxeaya2ntIbQ=)
2: UpIxske_9ltMY0GQfs1eq6f5ypI.crl (hash: aqbUpP3WZlG35+bZthYy7p80oR7d0VXY28Geq16wwPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UpIxske_9ltMY0GQfs1eq6f5ypI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:af:91:ec:d3:d2:e0:8f:cc:8f:1e:98:da:1e:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529231b247bff65b4c6341907ecd5eaba7f9ca92
Validity
Not Before: Aug 23 08:00:42 2025 GMT
Not After : Aug 24 08:00:42 2025 GMT
Subject: CN=c913585f3f17f49a1aa5879abafdfa0086c65f19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:eb:c2:45:79:82:0a:d2:32:22:ee:97:2a:f0:
e7:6d:5c:31:26:d1:4d:0d:70:b1:d8:95:d2:0d:de:
c8:b7:70:a5:3f:20:3e:12:8a:d0:18:71:db:16:c2:
ad:70:44:98:bb:86:cd:40:58:45:ca:05:94:0d:57:
7e:83:b3:09:c4:bc:d5:60:b3:2b:86:45:f8:8f:d8:
bc:2b:ca:08:73:1b:dc:35:17:d9:60:3b:3b:4b:0b:
45:77:eb:98:64:ee:d6:47:f7:d1:7b:f3:e0:10:7e:
f5:09:79:78:00:82:dc:65:d9:d9:c3:3d:8c:79:29:
9e:46:e5:f0:57:9a:03:a9:64:19:39:b8:ce:34:a9:
c2:c6:19:a3:3f:5f:9a:5d:b0:aa:37:d4:1f:6f:1a:
2b:cf:67:6c:65:e0:35:85:37:3d:d7:3c:40:3f:10:
66:f1:10:e7:aa:fc:17:80:0c:cb:87:0c:06:64:44:
de:9d:96:93:1b:3a:2d:8b:60:77:21:5c:0d:e6:da:
c0:8f:f1:0a:31:d6:79:5d:44:89:97:22:d5:25:bd:
97:a0:a6:9f:29:67:20:b6:c3:6d:ea:fe:26:9a:07:
53:b0:48:1d:29:a4:56:cf:43:f8:49:9e:35:2b:b5:
43:75:fb:d3:a7:72:1d:67:c8:15:16:c2:3b:5a:d6:
b4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:13:58:5F:3F:17:F4:9A:1A:A5:87:9A:BA:FD:FA:00:86:C6:5F:19
X509v3 Authority Key Identifier:
keyid:52:92:31:B2:47:BF:F6:5B:4C:63:41:90:7E:CD:5E:AB:A7:F9:CA:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpIxske_9ltMY0GQfs1eq6f5ypI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:ab:7b:c0:d3:c5:8d:8c:dd:b7:8a:b1:f4:e4:d4:55:de:e0:
eb:fc:fa:aa:69:61:52:7a:1e:24:e4:d1:5f:a1:49:c7:1d:79:
9c:12:bd:2f:c0:66:50:8f:68:cc:99:cd:fd:a6:9c:59:65:6c:
e0:41:31:c6:40:3a:13:be:b4:54:2b:d2:cf:ac:92:c4:ba:49:
41:4f:4f:88:a0:03:f1:45:00:a3:8f:ec:88:9a:43:42:16:eb:
ea:8c:a9:9b:6c:1a:db:31:d9:79:18:bd:ae:59:cd:34:ad:d6:
9b:a8:31:1a:24:3b:2f:d6:b7:ec:35:df:a0:89:6c:28:60:03:
f0:2c:5a:91:ad:a8:9e:ed:72:12:2d:9d:b9:01:9b:8e:08:a5:
d8:c8:dc:fe:f7:96:86:9e:d9:0b:e7:b4:d9:e9:fc:83:38:5d:
3b:ef:42:c2:7e:14:e8:fa:e6:95:37:c5:01:30:be:4f:32:a8:
f8:55:0d:d8:9f:00:34:00:91:30:37:99:c3:1f:e6:5b:9e:1c:
6e:c7:93:b1:59:5b:07:94:a9:1c:5c:57:d1:1c:5c:49:cd:8f:
fe:d7:88:00:ef:9b:14:14:98:52:68:fb:8e:70:5d:62:08:b8:
1d:c8:5f:87:c3:60:6c:15:a3:55:e9:c7:c3:c5:84:cc:b3:6f:
e4:ca:16:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:01 2025 by rpki-client