Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.mft
File: Up-6tRcaXLIvbFTxCzostttRcj4.mft (raw, json)
Hash identifier: MeI3xiuNK8ufrsr/OporFdr0fA/5h2TPF8pNYcnm6gI=
Subject key identifier: 0D:2E:CE:05:A7:EF:E1:3C:11:0E:7D:85:E3:E5:C6:46:85:F4:71:8D
Authority key identifier: 52:9F:BA:B5:17:1A:5C:B2:2F:6C:54:F1:0B:3A:2C:B6:DB:51:72:3E
Certificate issuer: /CN=529fbab5171a5cb22f6c54f10b3a2cb6db51723e
Certificate serial: 0198D4A7E2D56B00F2B56F572B16779506A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Up-6tRcaXLIvbFTxCzostttRcj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.mft
Manifest number: 10BE
Signing time: Sat 23 Aug 2025 02:00:28 +0000
Manifest this update: Sat 23 Aug 2025 02:00:28 +0000
Manifest next update: Sun 24 Aug 2025 02:00:28 +0000
Files and hashes: 1: FrmVEYuDa9xtluHCEQ99gg4ezxk.roa (hash: ROrbhIKSviaPzDwOSSegQp+fGjZAnP/YBP5hACLrt+g=)
2: Up-6tRcaXLIvbFTxCzostttRcj4.crl (hash: qjqrPKYAtFzctEoKxNat1DpoPJmCRJ6ZxTpsRQEKg/4=)
3: qi3rhjz0p_JIDWgNBHnC01nOTzc.roa (hash: sI4mLt9OaWWXoU75bYS+ZomsMcCTUVq/R9FP0uAoyas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Up-6tRcaXLIvbFTxCzostttRcj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:e2:d5:6b:00:f2:b5:6f:57:2b:16:77:95:06:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529fbab5171a5cb22f6c54f10b3a2cb6db51723e
Validity
Not Before: Aug 23 02:00:28 2025 GMT
Not After : Aug 24 02:00:28 2025 GMT
Subject: CN=0d2ece05a7efe13c110e7d85e3e5c64685f4718d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:00:fc:a5:27:36:81:ed:77:20:41:15:6e:5b:
7b:a6:22:33:51:91:65:8a:86:57:e0:62:49:41:6b:
42:9b:3d:ba:ec:08:65:9b:e9:a9:e8:24:26:96:cc:
c6:a1:8f:a7:26:92:a2:d0:b2:c8:ad:51:a6:a6:5c:
0c:ba:9f:f8:7b:98:f6:c7:71:e2:d0:94:af:7f:6b:
c9:c6:9b:ee:d6:04:90:08:5e:19:71:8d:d7:b1:29:
4c:a5:fb:33:e1:f2:16:12:75:e7:90:15:be:71:1c:
83:b2:a8:8e:1f:a7:c1:0e:89:88:28:30:dc:09:f8:
02:8d:ab:f7:9d:9d:fc:a2:6a:6d:16:83:28:8b:29:
08:8d:e0:bf:3f:62:9e:98:85:55:ba:a9:4b:ad:93:
95:d3:43:f5:fc:9c:7c:71:ea:7e:8f:99:0a:fa:0c:
02:7d:a8:af:88:f4:d5:76:b9:75:3f:24:50:79:6b:
3c:61:b2:fe:32:fe:75:84:57:84:6d:ec:06:8d:8f:
7d:de:a3:d2:22:fd:87:e0:80:62:d6:45:21:4a:7f:
01:e3:44:54:95:18:eb:c7:8e:df:da:c1:38:0d:f5:
2d:26:40:e4:6f:8d:5c:af:69:e2:b4:ac:0b:f3:3a:
62:88:d1:a0:ce:1c:c7:56:a0:54:47:ba:62:dd:21:
bd:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:2E:CE:05:A7:EF:E1:3C:11:0E:7D:85:E3:E5:C6:46:85:F4:71:8D
X509v3 Authority Key Identifier:
keyid:52:9F:BA:B5:17:1A:5C:B2:2F:6C:54:F1:0B:3A:2C:B6:DB:51:72:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Up-6tRcaXLIvbFTxCzostttRcj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:ba:5c:c3:54:a6:88:ca:12:bc:cf:f6:8b:04:31:42:81:a6:
e7:ec:14:15:1a:7e:f6:45:82:94:c6:d0:29:9b:f6:25:fc:50:
01:b1:94:13:6d:c4:df:89:c4:b0:94:25:89:ef:df:5d:73:a9:
99:56:1f:3f:eb:1b:78:3d:17:7b:65:34:6a:5f:8f:33:29:d8:
af:bf:0b:c3:ec:1a:d4:4d:f3:32:1f:36:f8:8c:49:ad:79:18:
a1:00:f0:54:8b:b2:4f:c2:21:16:2d:5c:c9:6e:7f:46:2d:c1:
ca:82:17:0b:2c:4a:ca:9a:d1:7a:ef:37:15:1d:e8:d7:e5:15:
d4:2c:f9:2d:3b:17:42:bc:bc:02:bd:e5:cc:55:aa:86:8d:75:
89:5a:1d:a5:fd:ed:dd:68:06:7c:b8:d3:7b:ef:55:de:8d:f2:
a9:8c:98:0d:0b:ad:6f:c1:fc:52:00:8e:2e:e0:c9:78:84:d1:
34:14:59:9f:b9:53:6a:04:cb:9e:76:5d:b7:66:d6:0c:7d:60:
cc:dc:db:97:b1:3b:f7:7d:1d:18:80:13:86:5e:ad:10:77:58:
55:6d:b0:40:74:a4:02:4b:4f:b5:67:26:67:b0:6c:5e:20:fc:
a0:02:c9:69:92:18:b0:66:0e:88:44:b5:d0:8e:39:40:9c:f3:
d8:57:de:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUp+LVawDytW9XKxZ3lQajMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyOWZiYWI1MTcxYTVjYjIyZjZjNTRmMTBiM2EyY2I2ZGI1
MTcyM2UwHhcNMjUwODIzMDIwMDI4WhcNMjUwODI0MDIwMDI4WjAzMTEwLwYDVQQD
EygwZDJlY2UwNWE3ZWZlMTNjMTEwZTdkODVlM2U1YzY0Njg1ZjQ3MThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAD8pSc2ge13IEEVblt7piIzUZFl
ioZX4GJJQWtCmz267Ahlm+mp6CQmlszGoY+nJpKi0LLIrVGmplwMup/4e5j2x3Hi
0JSvf2vJxpvu1gSQCF4ZcY3XsSlMpfsz4fIWEnXnkBW+cRyDsqiOH6fBDomIKDDc
CfgCjav3nZ38omptFoMoiykIjeC/P2KemIVVuqlLrZOV00P1/Jx8cep+j5kK+gwC
faiviPTVdrl1PyRQeWs8YbL+Mv51hFeEbewGjY993qPSIv2H4IBi1kUhSn8B40RU
lRjrx47f2sE4DfUtJkDkb41cr2nitKwL8zpiiNGgzhzHVqBUR7pi3SG9mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA0uzgWn7+E8EQ59hePlxkaF9HGNMB8GA1UdIwQY
MBaAFFKfurUXGlyyL2xU8Qs6LLbbUXI+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXAtNnRSY2FYTEl2YkZUeEN6b3N0dHRSY2o0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS81Mjg5YzQtMDJiNS00NjVlLThjYmQt
NzczNzMyNjUyZjRmLzEvVXAtNnRSY2FYTEl2YkZUeEN6b3N0dHRSY2o0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS81Mjg5YzQtMDJiNS00NjVlLThjYmQtNzczNzMyNjUyZjRm
LzEvVXAtNnRSY2FYTEl2YkZUeEN6b3N0dHRSY2o0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVbpcw1Sm
iMoSvM/2iwQxQoGm5+wUFRp+9kWClMbQKZv2JfxQAbGUE23E34nEsJQlie/fXXOp
mVYfP+sbeD0Xe2U0al+PMynYr78Lw+wa1E3zMh82+IxJrXkYoQDwVIuyT8IhFi1c
yW5/Ri3ByoIXCyxKyprReu83FR3o1+UV1Cz5LTsXQry8Ar3lzFWqho11iVodpf3t
3WgGfLjTe+9V3o3yqYyYDQutb8H8UgCOLuDJeITRNBRZn7lTagTLnnZdt2bWDH1g
zNzbl7E7930dGIAThl6tEHdYVW2wQHSkAktPtWcmZ7BsXiD8oALJaZIYsGYOiES1
0I45QJzz2FfeTg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:37 2025 by rpki-client