Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/7c1ff5-22db-4988-ad94-92d0d01139f9/1/upyRALMvz2LV39ghy9BWq3PS5FU.mft
File: upyRALMvz2LV39ghy9BWq3PS5FU.mft (raw, json)
Hash identifier: 0vrhePQFEpv2aq4kV7QEthcVh4+1u75KqlScHJcAA3c=
Subject key identifier: 10:5F:6F:D3:98:D0:6E:28:E5:99:23:2C:4E:29:79:E4:A5:3D:BE:AC
Authority key identifier: BA:9C:91:00:B3:2F:CF:62:D5:DF:D8:21:CB:D0:56:AB:73:D2:E4:55
Certificate issuer: /CN=ba9c9100b32fcf62d5dfd821cbd056ab73d2e455
Certificate serial: 0197B6A1A48DD59739EE53F004DD4A4707DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/upyRALMvz2LV39ghy9BWq3PS5FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/7c1ff5-22db-4988-ad94-92d0d01139f9/1/upyRALMvz2LV39ghy9BWq3PS5FU.mft
Manifest number: 0B25
Signing time: Sat 28 Jun 2025 13:02:16 +0000
Manifest this update: Sat 28 Jun 2025 13:02:16 +0000
Manifest next update: Sun 29 Jun 2025 13:02:16 +0000
Files and hashes: 1: upyRALMvz2LV39ghy9BWq3PS5FU.crl (hash: ToXpEsxNDXm3q0gYMvMMjF7NoXiUWWBBQYJ0cOr5JFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/7c1ff5-22db-4988-ad94-92d0d01139f9/1/upyRALMvz2LV39ghy9BWq3PS5FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/7c1ff5-22db-4988-ad94-92d0d01139f9/1/upyRALMvz2LV39ghy9BWq3PS5FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/upyRALMvz2LV39ghy9BWq3PS5FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:a4:8d:d5:97:39:ee:53:f0:04:dd:4a:47:07:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba9c9100b32fcf62d5dfd821cbd056ab73d2e455
Validity
Not Before: Jun 28 13:02:16 2025 GMT
Not After : Jun 29 13:02:16 2025 GMT
Subject: CN=105f6fd398d06e28e599232c4e2979e4a53dbeac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d8:1f:50:a2:4e:fc:62:c5:60:63:94:71:e2:
fd:10:c2:97:8c:7b:ae:97:75:f5:1b:26:ff:50:f6:
99:c4:6c:eb:53:00:1a:6b:c7:9c:ec:03:51:21:ad:
31:90:84:de:88:33:b6:51:92:2c:92:a5:91:83:cc:
f1:71:d7:c2:f6:81:01:df:21:b3:44:71:da:d3:02:
ff:e0:f8:ff:2a:bf:d4:50:1c:37:76:89:f0:bf:64:
62:c4:5b:9d:cf:4a:f6:00:d8:6d:ce:06:46:5f:2e:
04:d2:db:39:d8:66:c7:e8:e6:92:5b:08:93:75:c4:
8b:07:0b:15:a5:47:62:8e:df:a6:db:f8:50:1d:17:
c8:1c:b6:91:10:89:0b:43:bc:19:12:41:de:c3:82:
3b:fc:8d:80:aa:7a:45:66:4a:77:03:3a:b4:dc:4c:
97:d5:e2:1a:e7:6c:03:fd:93:97:8c:12:d6:fd:e8:
26:d9:b2:de:b9:5d:9b:19:8b:9c:5c:39:5c:dc:9f:
62:27:40:73:97:8d:5a:bf:44:a1:ee:11:67:af:ec:
17:5a:bb:a5:c3:0a:8c:bc:dc:d4:48:61:cf:c1:09:
cd:3e:2a:0e:d2:a1:6f:ea:44:82:e8:83:a0:43:74:
ef:a8:9f:ab:83:fc:19:11:85:c9:41:74:90:48:88:
8c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:5F:6F:D3:98:D0:6E:28:E5:99:23:2C:4E:29:79:E4:A5:3D:BE:AC
X509v3 Authority Key Identifier:
keyid:BA:9C:91:00:B3:2F:CF:62:D5:DF:D8:21:CB:D0:56:AB:73:D2:E4:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/upyRALMvz2LV39ghy9BWq3PS5FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7c1ff5-22db-4988-ad94-92d0d01139f9/1/upyRALMvz2LV39ghy9BWq3PS5FU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7c1ff5-22db-4988-ad94-92d0d01139f9/1/upyRALMvz2LV39ghy9BWq3PS5FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:e5:84:b5:27:2b:8e:c6:b8:27:6c:75:cf:4f:e2:df:85:89:
be:a0:90:7b:30:63:d2:51:57:1e:e3:ee:d2:33:2e:1e:84:67:
52:c8:99:ed:46:5b:fd:6c:c8:a2:d4:03:5a:f8:30:ec:aa:d2:
b2:bd:3b:cb:6e:29:47:8a:bc:fc:ad:e1:0f:88:fb:81:01:72:
fe:d6:d4:4f:9a:b5:2f:fd:6d:40:98:e1:a2:ed:12:84:5c:49:
25:1f:be:2e:0d:f5:a2:43:f2:7a:b1:ea:9d:f4:35:9c:2e:51:
dd:72:43:99:9b:d0:f6:7c:d6:8d:6d:93:66:8e:85:46:77:57:
08:d2:8f:db:24:f6:dc:49:41:6c:91:1c:24:1d:aa:9d:44:fc:
5e:0e:e5:22:db:d8:8c:72:a5:dc:35:37:ee:03:5d:55:c9:6b:
6d:9b:00:1b:c6:4b:2e:7f:31:25:b5:e4:29:97:91:89:61:20:
e2:c0:24:1b:b1:c7:6b:16:79:ac:9e:fa:a5:86:28:2a:fb:80:
7c:ac:6a:6b:40:27:9a:48:53:99:b5:1a:6c:08:4f:1f:4d:25:
a1:90:26:b9:d2:d3:2e:af:48:80:05:12:48:c9:77:65:d9:00:
80:c6:c5:9a:a5:e1:33:6b:c5:f9:1a:6c:77:1a:14:60:16:e1:
ac:5a:59:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oaSN1Zc57lPwBN1KRwffMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhOWM5MTAwYjMyZmNmNjJkNWRmZDgyMWNiZDA1NmFiNzNk
MmU0NTUwHhcNMjUwNjI4MTMwMjE2WhcNMjUwNjI5MTMwMjE2WjAzMTEwLwYDVQQD
EygxMDVmNmZkMzk4ZDA2ZTI4ZTU5OTIzMmM0ZTI5NzllNGE1M2RiZWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtgfUKJO/GLFYGOUceL9EMKXjHuu
l3X1Gyb/UPaZxGzrUwAaa8ec7ANRIa0xkITeiDO2UZIskqWRg8zxcdfC9oEB3yGz
RHHa0wL/4Pj/Kr/UUBw3donwv2RixFudz0r2ANhtzgZGXy4E0ts52GbH6OaSWwiT
dcSLBwsVpUdijt+m2/hQHRfIHLaREIkLQ7wZEkHew4I7/I2AqnpFZkp3Azq03EyX
1eIa52wD/ZOXjBLW/egm2bLeuV2bGYucXDlc3J9iJ0Bzl41av0Sh7hFnr+wXWrul
wwqMvNzUSGHPwQnNPioO0qFv6kSC6IOgQ3TvqJ+rg/wZEYXJQXSQSIiMEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBBfb9OY0G4o5ZkjLE4peeSlPb6sMB8GA1UdIwQY
MBaAFLqckQCzL89i1d/YIcvQVqtz0uRVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXB5UkFMTXZ6MkxWMzlnaHk5QldxM1BTNUZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC83YzFmZjUtMjJkYi00OTg4LWFkOTQt
OTJkMGQwMTEzOWY5LzEvdXB5UkFMTXZ6MkxWMzlnaHk5QldxM1BTNUZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC83YzFmZjUtMjJkYi00OTg4LWFkOTQtOTJkMGQwMTEzOWY5
LzEvdXB5UkFMTXZ6MkxWMzlnaHk5QldxM1BTNUZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl+WEtScr
jsa4J2x1z0/i34WJvqCQezBj0lFXHuPu0jMuHoRnUsiZ7UZb/WzIotQDWvgw7KrS
sr07y24pR4q8/K3hD4j7gQFy/tbUT5q1L/1tQJjhou0ShFxJJR++Lg31okPyerHq
nfQ1nC5R3XJDmZvQ9nzWjW2TZo6FRndXCNKP2yT23ElBbJEcJB2qnUT8Xg7lItvY
jHKl3DU37gNdVclrbZsAG8ZLLn8xJbXkKZeRiWEg4sAkG7HHaxZ5rJ76pYYoKvuA
fKxqa0AnmkhTmbUabAhPH00loZAmudLTLq9IgAUSSMl3ZdkAgMbFmqXhM2vF+Rps
dxoUYBbhrFpZnA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:51:44 2025 by rpki-client