Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/7c1ff5-22db-4988-ad94-92d0d01139f9/1/upyRALMvz2LV39ghy9BWq3PS5FU.mft
File: upyRALMvz2LV39ghy9BWq3PS5FU.mft (raw, json)
Hash identifier: /Y+RTGxIfDpn6PD87QC4MuO77SFkEfeepIKRpN4BaRk=
Subject key identifier: 5D:3C:7A:73:E8:98:37:E3:49:82:EA:6C:22:E7:BF:EC:4B:9F:79:3D
Authority key identifier: BA:9C:91:00:B3:2F:CF:62:D5:DF:D8:21:CB:D0:56:AB:73:D2:E4:55
Certificate issuer: /CN=ba9c9100b32fcf62d5dfd821cbd056ab73d2e455
Certificate serial: 0199FBEAB4BB2B3F19AA5601DFE4364AEE32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/upyRALMvz2LV39ghy9BWq3PS5FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/7c1ff5-22db-4988-ad94-92d0d01139f9/1/upyRALMvz2LV39ghy9BWq3PS5FU.mft
Manifest number: 0C52
Signing time: Sun 19 Oct 2025 10:01:26 +0000
Manifest this update: Sun 19 Oct 2025 10:01:26 +0000
Manifest next update: Mon 20 Oct 2025 10:01:26 +0000
Files and hashes: 1: upyRALMvz2LV39ghy9BWq3PS5FU.crl (hash: QPgUgYpi9yjO2AscSjVfDmyzYVfn9uijR+JTAxpZh9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/7c1ff5-22db-4988-ad94-92d0d01139f9/1/upyRALMvz2LV39ghy9BWq3PS5FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/7c1ff5-22db-4988-ad94-92d0d01139f9/1/upyRALMvz2LV39ghy9BWq3PS5FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/upyRALMvz2LV39ghy9BWq3PS5FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:b4:bb:2b:3f:19:aa:56:01:df:e4:36:4a:ee:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba9c9100b32fcf62d5dfd821cbd056ab73d2e455
Validity
Not Before: Oct 19 10:01:26 2025 GMT
Not After : Oct 20 10:01:26 2025 GMT
Subject: CN=5d3c7a73e89837e34982ea6c22e7bfec4b9f793d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8d:de:39:cc:c4:5b:90:d6:46:91:b1:95:5c:
a9:bd:a8:f8:e0:05:e7:38:9e:85:ca:0a:6c:44:ed:
ea:db:99:c8:0c:4d:89:65:12:c3:df:44:a4:35:32:
57:b8:27:a3:8a:3a:1c:ce:de:06:20:b4:0b:0c:ca:
d7:18:bc:e9:18:3f:8c:c7:a4:4e:e5:be:ac:d3:0f:
54:d7:9d:28:74:8e:b3:b5:38:ce:4c:f5:34:17:94:
63:ad:de:1f:b1:43:12:6b:4b:44:8f:c1:39:b8:87:
57:bf:76:b4:56:60:6e:ee:2c:00:04:27:c1:e7:37:
70:0e:7e:7b:24:8a:aa:d0:5e:4b:88:ba:4d:f9:aa:
4a:e5:45:57:1b:91:8f:eb:8d:15:a3:80:57:9f:60:
03:1b:2f:55:6f:ef:2d:97:ad:dd:6b:a6:00:35:c3:
0b:82:75:d5:3e:c1:63:79:37:87:f8:61:96:09:1a:
e3:78:ed:86:dd:dc:c5:f3:ef:fe:24:a3:01:d8:a1:
9a:d6:0f:e5:fe:36:41:47:5d:97:ac:0b:89:56:71:
ee:d8:8f:3b:0a:16:cd:22:28:1b:50:5b:fb:51:59:
68:75:dc:49:96:55:0e:b2:b8:76:16:d3:ca:9c:67:
2a:1b:73:ba:9d:90:af:bb:7b:26:59:7b:1c:1d:0f:
c3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:3C:7A:73:E8:98:37:E3:49:82:EA:6C:22:E7:BF:EC:4B:9F:79:3D
X509v3 Authority Key Identifier:
keyid:BA:9C:91:00:B3:2F:CF:62:D5:DF:D8:21:CB:D0:56:AB:73:D2:E4:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/upyRALMvz2LV39ghy9BWq3PS5FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7c1ff5-22db-4988-ad94-92d0d01139f9/1/upyRALMvz2LV39ghy9BWq3PS5FU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7c1ff5-22db-4988-ad94-92d0d01139f9/1/upyRALMvz2LV39ghy9BWq3PS5FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:a3:12:44:65:c7:e4:26:9e:71:e6:19:81:ac:63:80:8d:5a:
8c:3f:37:9b:a2:f0:ca:16:be:19:e9:46:9e:4d:8c:a7:e5:91:
df:6e:f1:87:10:17:3e:a6:5e:26:96:64:4d:d1:d4:19:a0:ee:
49:22:3d:c6:18:9c:46:bf:9d:c4:fc:39:7f:e0:bf:d8:83:f2:
9b:e7:f6:27:f4:89:ac:16:11:a1:62:38:33:b3:d0:00:ce:6d:
92:2f:36:88:4c:a6:7c:2b:43:86:d1:00:1c:f5:6e:f6:c8:29:
49:01:b8:39:ba:c3:3f:96:74:11:75:86:53:2a:c3:b4:1d:57:
95:b0:6f:a1:8a:c9:38:5d:84:82:81:e8:70:21:05:f5:18:26:
4a:af:af:4e:59:6a:76:00:8a:a4:93:68:38:5f:a6:ed:75:f9:
49:12:32:ad:17:86:05:fd:9d:3d:97:2c:e7:8c:74:a4:c7:32:
67:b8:a4:73:21:e7:9c:16:d7:29:65:20:d0:ca:59:1d:e1:37:
81:4d:01:d0:9a:81:49:ab:25:fa:d8:ad:b0:dc:bf:09:1f:d2:
14:af:d9:6b:ec:98:7c:6e:38:63:f7:f1:c4:75:af:18:76:70:
9b:ed:0b:9e:d4:7b:8d:9c:bf:ae:70:0a:d6:a8:26:59:62:e0:
11:f1:48:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:49 2025 by rpki-client