Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/UpZVR_EJYGS2tXPAKBcUwfBhzU0.mft
File: UpZVR_EJYGS2tXPAKBcUwfBhzU0.mft (raw, json)
Hash identifier: FKwU8WUTaRF36dyqEf0dZk+dzspxt4bpVf2IyA8PqZ0=
Subject key identifier: EF:A5:21:C4:86:2F:07:8E:82:AA:C8:85:E2:D5:E3:B4:9F:55:3B:7E
Authority key identifier: 52:96:55:47:F1:09:60:64:B6:B5:73:C0:28:17:14:C1:F0:61:CD:4D
Certificate issuer: /CN=52965547f1096064b6b573c0281714c1f061cd4d
Certificate serial: 0199FDD94A77C6DD8B6FA363A2131DE5281D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpZVR_EJYGS2tXPAKBcUwfBhzU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/UpZVR_EJYGS2tXPAKBcUwfBhzU0.mft
Manifest number: 0FB8
Signing time: Sun 19 Oct 2025 19:01:40 +0000
Manifest this update: Sun 19 Oct 2025 19:01:40 +0000
Manifest next update: Mon 20 Oct 2025 19:01:40 +0000
Files and hashes: 1: UpZVR_EJYGS2tXPAKBcUwfBhzU0.crl (hash: Yxxq1bM211RkAlhfyhNQ6/r+ncaOCh2ceu6cb5RJUy4=)
2: ove2TkiR5Y_QzNqFVx6binaCimY.roa (hash: nkoFx2cGJ1UQ07ClYGuA0sWHVfaghbV6qV22jBDNl8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/UpZVR_EJYGS2tXPAKBcUwfBhzU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/UpZVR_EJYGS2tXPAKBcUwfBhzU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/UpZVR_EJYGS2tXPAKBcUwfBhzU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:4a:77:c6:dd:8b:6f:a3:63:a2:13:1d:e5:28:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52965547f1096064b6b573c0281714c1f061cd4d
Validity
Not Before: Oct 19 19:01:40 2025 GMT
Not After : Oct 20 19:01:40 2025 GMT
Subject: CN=efa521c4862f078e82aac885e2d5e3b49f553b7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4a:dd:ed:1b:6b:5b:b3:95:49:a3:f2:ea:b2:
d3:45:6c:9f:d9:70:88:d2:c0:90:08:05:7f:8c:c3:
95:16:32:aa:e7:ea:8c:0d:91:b9:f0:f6:36:74:e6:
46:c0:2f:11:39:6f:75:a6:17:61:8e:00:a0:76:dc:
7f:82:bd:7f:41:1d:bb:5d:30:0b:f4:39:d7:81:5d:
84:61:7c:13:40:e7:ec:7a:1a:21:d1:70:23:8b:0f:
78:d2:35:79:c1:95:4c:26:6a:5e:a1:58:f0:ad:91:
ae:74:75:6d:a9:85:76:6d:23:1f:08:b8:02:56:bd:
12:99:0d:f3:22:64:01:86:99:c7:39:12:c5:7a:35:
24:f1:0e:f0:a7:fe:10:17:e2:55:af:de:cd:e4:30:
b9:0e:31:59:f5:86:86:86:ad:16:c9:83:08:27:ec:
4a:62:13:98:71:fa:32:0f:0b:a0:c4:4b:d6:a4:45:
bf:59:1f:bd:c5:c6:1d:4f:36:df:16:6f:e0:5f:71:
10:ae:fe:91:ea:51:b6:c6:52:31:53:0f:46:e3:d0:
39:56:97:fb:00:33:0a:4d:f4:66:95:c9:9c:61:57:
61:76:aa:d7:56:e3:e3:36:6c:b7:f4:5d:16:e4:51:
cb:e4:cb:47:8e:c7:54:4f:e7:44:d0:2b:16:34:f0:
ed:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A5:21:C4:86:2F:07:8E:82:AA:C8:85:E2:D5:E3:B4:9F:55:3B:7E
X509v3 Authority Key Identifier:
keyid:52:96:55:47:F1:09:60:64:B6:B5:73:C0:28:17:14:C1:F0:61:CD:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpZVR_EJYGS2tXPAKBcUwfBhzU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/UpZVR_EJYGS2tXPAKBcUwfBhzU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/UpZVR_EJYGS2tXPAKBcUwfBhzU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:2e:cd:56:5b:a4:71:36:f9:3c:72:11:4f:8a:47:ad:09:f7:
6a:84:ee:3f:a1:b3:9c:fc:a7:ba:90:88:03:07:d4:fb:36:21:
7c:e7:c5:18:00:3f:bc:61:e4:7d:7b:88:ff:63:49:fe:d3:24:
61:78:76:a5:25:62:c2:27:32:91:99:79:2b:e4:62:89:2b:6f:
00:f1:57:85:c6:3b:df:4c:ac:15:01:74:9c:7d:d1:f6:46:33:
a6:f7:07:98:d2:8a:db:1f:f9:b4:02:a4:7a:93:ea:ea:5e:21:
5f:45:ff:0a:9b:73:ef:08:16:80:4a:a2:c5:80:11:36:f1:37:
ee:2e:4d:44:16:55:45:57:c4:0f:9f:69:a4:ff:94:fc:4f:3d:
54:3b:eb:1a:6d:5d:2b:21:a7:36:56:64:d6:3e:84:09:be:92:
0d:53:5e:70:d6:59:c9:1b:7c:13:82:85:ed:49:ac:ab:b6:9f:
09:ad:1b:d4:e2:ae:a8:41:8b:1d:43:6c:81:95:b5:84:d9:3a:
30:d4:e1:72:69:27:5b:e4:28:09:9a:12:9f:62:3a:bd:45:2f:
8d:31:6d:22:38:bc:72:1d:66:d7:d4:5d:4e:f2:4f:e4:de:b4:
11:21:bb:fd:0e:41:ff:84:5b:a4:67:64:71:1b:8a:a7:c8:a5:
73:e9:4d:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92Up3xt2Lb6NjohMd5SgdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyOTY1NTQ3ZjEwOTYwNjRiNmI1NzNjMDI4MTcxNGMxZjA2
MWNkNGQwHhcNMjUxMDE5MTkwMTQwWhcNMjUxMDIwMTkwMTQwWjAzMTEwLwYDVQQD
EyhlZmE1MjFjNDg2MmYwNzhlODJhYWM4ODVlMmQ1ZTNiNDlmNTUzYjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtErd7RtrW7OVSaPy6rLTRWyf2XCI
0sCQCAV/jMOVFjKq5+qMDZG58PY2dOZGwC8ROW91phdhjgCgdtx/gr1/QR27XTAL
9DnXgV2EYXwTQOfsehoh0XAjiw940jV5wZVMJmpeoVjwrZGudHVtqYV2bSMfCLgC
Vr0SmQ3zImQBhpnHORLFejUk8Q7wp/4QF+JVr97N5DC5DjFZ9YaGhq0WyYMIJ+xK
YhOYcfoyDwugxEvWpEW/WR+9xcYdTzbfFm/gX3EQrv6R6lG2xlIxUw9G49A5Vpf7
ADMKTfRmlcmcYVdhdqrXVuPjNmy39F0W5FHL5MtHjsdUT+dE0CsWNPDtQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO+lIcSGLweOgqrIheLV47SfVTt+MB8GA1UdIwQY
MBaAFFKWVUfxCWBktrVzwCgXFMHwYc1NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXBaVlJfRUpZR1MydFhQQUtCY1V3ZkJoelUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8wNjQ5MDYtNWJlMy00ZWQxLWFiNzQt
NWRhM2VjODJjYzU2LzEvVXBaVlJfRUpZR1MydFhQQUtCY1V3ZkJoelUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny8wNjQ5MDYtNWJlMy00ZWQxLWFiNzQtNWRhM2VjODJjYzU2
LzEvVXBaVlJfRUpZR1MydFhQQUtCY1V3ZkJoelUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASi7NVluk
cTb5PHIRT4pHrQn3aoTuP6GznPynupCIAwfU+zYhfOfFGAA/vGHkfXuI/2NJ/tMk
YXh2pSViwicykZl5K+RiiStvAPFXhcY730ysFQF0nH3R9kYzpvcHmNKK2x/5tAKk
epPq6l4hX0X/Cptz7wgWgEqixYARNvE37i5NRBZVRVfED59ppP+U/E89VDvrGm1d
KyGnNlZk1j6ECb6SDVNecNZZyRt8E4KF7Umsq7afCa0b1OKuqEGLHUNsgZW1hNk6
MNThcmknW+QoCZoSn2I6vUUvjTFtIji8ch1m19RdTvJP5N60ESG7/Q5B/4RbpGdk
cRuKp8ilc+lNNQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:59:31 2025 by rpki-client