Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.mft
File: Up-6tRcaXLIvbFTxCzostttRcj4.mft (raw, json)
Hash identifier: lxIvgvTLvONynOKPXGArAHYQxB130B1WC0U2TmM8aN0=
Subject key identifier: 88:A2:D1:98:2B:E1:16:DC:F8:A4:AA:0B:40:19:25:CB:1E:6E:FE:48
Authority key identifier: 52:9F:BA:B5:17:1A:5C:B2:2F:6C:54:F1:0B:3A:2C:B6:DB:51:72:3E
Certificate issuer: /CN=529fbab5171a5cb22f6c54f10b3a2cb6db51723e
Certificate serial: 0197B6D74920D127E8FFBF04E0D7238A5C67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Up-6tRcaXLIvbFTxCzostttRcj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.mft
Manifest number: 102A
Signing time: Sat 28 Jun 2025 14:00:51 +0000
Manifest this update: Sat 28 Jun 2025 14:00:51 +0000
Manifest next update: Sun 29 Jun 2025 14:00:51 +0000
Files and hashes: 1: FrmVEYuDa9xtluHCEQ99gg4ezxk.roa (hash: ROrbhIKSviaPzDwOSSegQp+fGjZAnP/YBP5hACLrt+g=)
2: Up-6tRcaXLIvbFTxCzostttRcj4.crl (hash: hcDYa0L5fdvbFspriWcoyjrOh4J0QsXWwBtmsMKo9hc=)
3: qi3rhjz0p_JIDWgNBHnC01nOTzc.roa (hash: sI4mLt9OaWWXoU75bYS+ZomsMcCTUVq/R9FP0uAoyas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Up-6tRcaXLIvbFTxCzostttRcj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:49:20:d1:27:e8:ff:bf:04:e0:d7:23:8a:5c:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529fbab5171a5cb22f6c54f10b3a2cb6db51723e
Validity
Not Before: Jun 28 14:00:51 2025 GMT
Not After : Jun 29 14:00:51 2025 GMT
Subject: CN=88a2d1982be116dcf8a4aa0b401925cb1e6efe48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5d:73:47:af:76:03:f5:20:e0:e2:a0:6b:87:
1d:1d:dc:6a:4e:43:d5:89:65:f1:a7:1e:0e:6c:c3:
17:13:58:2c:0b:54:79:3e:39:9c:ce:c9:76:5b:37:
19:2d:6d:e7:6d:00:82:89:dc:46:be:1f:a0:49:75:
a8:74:42:54:4d:26:d4:74:e4:68:10:f9:39:bb:2e:
7d:ba:04:2a:75:2a:a4:ac:13:f3:0a:ff:99:a5:7e:
dc:58:12:d7:52:0f:bb:f5:ba:70:5e:3d:dd:08:f4:
e4:84:d8:6a:a5:b7:73:06:17:fe:f9:86:bd:a5:81:
54:82:c6:50:e1:00:ad:d0:80:25:a9:20:cf:9d:91:
2f:9a:68:a4:df:c8:75:4b:12:2b:11:29:10:f4:5b:
1d:62:81:af:49:d0:8a:48:6c:db:81:84:75:ae:a6:
25:86:55:2c:d1:3a:90:47:93:48:53:81:f6:97:b2:
4b:02:0f:b1:29:2c:5d:27:50:25:10:d2:e8:58:1a:
56:b5:da:a1:26:28:68:ff:7a:21:97:43:8e:c7:f1:
99:c9:2f:bf:7e:01:2d:e1:f9:53:19:8f:90:22:d6:
b7:9f:6d:56:9c:3f:f6:b3:fe:88:14:a0:13:9d:3b:
5c:56:86:1d:fc:99:71:59:fa:da:01:7b:fb:cf:31:
05:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A2:D1:98:2B:E1:16:DC:F8:A4:AA:0B:40:19:25:CB:1E:6E:FE:48
X509v3 Authority Key Identifier:
keyid:52:9F:BA:B5:17:1A:5C:B2:2F:6C:54:F1:0B:3A:2C:B6:DB:51:72:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Up-6tRcaXLIvbFTxCzostttRcj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:78:c1:f6:ca:8d:01:7e:72:19:f9:8c:71:5f:a7:71:e2:c6:
34:00:d6:10:86:67:71:d3:4f:b3:aa:69:b4:9a:fe:89:d5:d4:
19:61:2c:67:aa:6c:ef:47:f2:20:3f:ab:30:72:e3:18:d5:ba:
89:3e:11:a7:63:fc:3a:25:2a:45:c2:f9:0c:f3:62:26:53:9a:
44:f4:05:8d:d3:26:8e:49:9d:48:ae:eb:54:b2:63:0a:88:3d:
09:b0:36:83:37:a3:b0:fc:a9:36:d0:5e:26:fc:66:22:18:3c:
b3:4e:18:2f:ca:54:4c:98:24:42:1b:be:6a:b4:da:74:f2:43:
32:46:3e:fa:72:6a:a3:9a:48:84:e9:a9:b8:6c:95:ca:a3:87:
56:a9:cb:3d:4b:31:76:53:91:37:66:0e:52:52:0b:d0:1e:54:
8e:ce:dd:ae:c1:a1:1c:23:42:06:61:88:b1:b2:e4:eb:53:90:
5f:c0:aa:8e:42:8e:fb:52:0c:85:94:be:c5:f3:46:f2:ab:23:
ea:be:f0:05:18:bb:51:9d:cf:4a:f7:7b:5b:84:aa:4b:30:89:
09:26:61:17:da:e1:37:48:b0:22:a8:1f:e7:99:35:a0:e1:23:
4d:92:e0:21:61:7e:92:58:7c:6a:59:9a:92:7d:da:8b:4f:bf:
3b:5f:a4:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:35:58 2025 by rpki-client