Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/7c1ff5-22db-4988-ad94-92d0d01139f9/1/upyRALMvz2LV39ghy9BWq3PS5FU.mft
File: upyRALMvz2LV39ghy9BWq3PS5FU.mft (raw, json)
Hash identifier: q/MAp4FiynCCm42ZTtXsrhES8EgkgheOG+sGll10NZY=
Subject key identifier: 91:BC:AA:3E:89:20:55:0F:DF:10:CF:5D:C3:82:99:76:34:66:BD:66
Authority key identifier: BA:9C:91:00:B3:2F:CF:62:D5:DF:D8:21:CB:D0:56:AB:73:D2:E4:55
Certificate issuer: /CN=ba9c9100b32fcf62d5dfd821cbd056ab73d2e455
Certificate serial: 0198D472F4514D6EBAF313353848CA4187F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/upyRALMvz2LV39ghy9BWq3PS5FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/7c1ff5-22db-4988-ad94-92d0d01139f9/1/upyRALMvz2LV39ghy9BWq3PS5FU.mft
Manifest number: 0BB9
Signing time: Sat 23 Aug 2025 01:02:39 +0000
Manifest this update: Sat 23 Aug 2025 01:02:39 +0000
Manifest next update: Sun 24 Aug 2025 01:02:39 +0000
Files and hashes: 1: upyRALMvz2LV39ghy9BWq3PS5FU.crl (hash: qs4oBahianl1ek/vAMfJ49ozI/bm/74fo7XfDkVs41g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/7c1ff5-22db-4988-ad94-92d0d01139f9/1/upyRALMvz2LV39ghy9BWq3PS5FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/7c1ff5-22db-4988-ad94-92d0d01139f9/1/upyRALMvz2LV39ghy9BWq3PS5FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/upyRALMvz2LV39ghy9BWq3PS5FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:f4:51:4d:6e:ba:f3:13:35:38:48:ca:41:87:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba9c9100b32fcf62d5dfd821cbd056ab73d2e455
Validity
Not Before: Aug 23 01:02:39 2025 GMT
Not After : Aug 24 01:02:39 2025 GMT
Subject: CN=91bcaa3e8920550fdf10cf5dc38299763466bd66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:dc:5b:ad:50:01:bb:4b:b1:23:3f:55:eb:fa:
bb:53:e9:ac:48:eb:2d:d2:4d:af:97:94:81:eb:0d:
c8:8b:70:89:70:b6:e3:94:d3:51:f7:1c:82:7c:0f:
01:a1:fa:5f:5f:4f:1f:ea:d7:e7:70:b8:8c:cc:38:
77:31:34:e6:c6:e5:fb:42:31:54:13:cf:7d:0c:8b:
89:d1:34:7e:4f:41:70:5a:ec:65:70:d3:8f:25:a2:
ef:f5:e0:8c:ba:1f:81:b2:59:cd:6e:61:0f:4c:c4:
7f:0e:dd:3f:4a:61:5a:16:63:ef:86:bd:6c:d8:ee:
8e:13:6d:3c:18:af:63:56:41:72:a4:09:71:b8:93:
c2:08:e4:de:5d:89:e8:f3:4e:bc:f7:7f:ea:a0:94:
31:e3:91:d1:2c:12:fd:1a:20:1e:ad:9d:2e:23:c7:
6e:c6:c0:d7:ee:3d:fa:f5:aa:07:cb:a6:55:85:95:
b6:76:23:56:57:1c:11:e8:0d:bb:19:01:c3:86:80:
c8:11:d9:12:bc:a8:cd:04:a4:50:c2:ee:b9:cc:09:
a1:b0:95:ee:b6:97:b1:19:45:c4:0b:a3:84:50:5a:
37:c4:27:f4:13:b4:74:9a:35:18:10:9e:63:54:2d:
54:42:7d:39:a2:80:67:9d:db:c3:11:a0:ab:9f:c2:
ab:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:BC:AA:3E:89:20:55:0F:DF:10:CF:5D:C3:82:99:76:34:66:BD:66
X509v3 Authority Key Identifier:
keyid:BA:9C:91:00:B3:2F:CF:62:D5:DF:D8:21:CB:D0:56:AB:73:D2:E4:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/upyRALMvz2LV39ghy9BWq3PS5FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7c1ff5-22db-4988-ad94-92d0d01139f9/1/upyRALMvz2LV39ghy9BWq3PS5FU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7c1ff5-22db-4988-ad94-92d0d01139f9/1/upyRALMvz2LV39ghy9BWq3PS5FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:9a:1c:0e:47:c3:51:a1:8b:a4:86:69:49:a7:dc:29:2c:30:
49:b2:b7:54:34:0e:1d:82:84:f6:aa:07:69:1b:0c:8b:4b:5d:
46:f5:32:f9:7e:c9:73:af:37:37:6a:ec:62:f9:6d:f2:95:91:
a7:8f:f8:90:5b:4b:0d:2c:c6:9f:9c:c2:d0:14:a9:16:64:66:
dc:6f:a6:df:91:90:db:c5:1b:83:78:ac:b2:1b:f6:ad:ff:87:
4e:3a:c0:ff:77:11:c8:af:f5:cb:19:73:8f:52:0c:e6:08:44:
8c:24:53:3b:e7:a9:52:54:a0:2d:9b:ea:73:3a:c4:50:0d:b0:
88:0e:4b:91:fd:f3:6e:69:f4:7f:2b:6b:5d:3d:48:a5:0e:3a:
53:6f:f6:bd:55:62:4d:8b:d7:be:7f:3c:c4:1a:e2:9b:c6:9e:
e6:07:d4:ca:c6:ca:08:02:29:64:26:5f:21:3f:61:e6:96:19:
d0:e6:94:ff:e7:cd:8e:ed:bf:4e:35:7d:c8:ea:c6:c1:a1:51:
02:43:3a:95:12:6f:9b:23:b7:b8:c9:80:a1:62:38:77:d8:60:
be:16:44:af:b9:a3:5d:c0:18:99:5c:e2:79:d8:31:27:bb:d1:
48:40:5e:8d:7a:b9:d8:a8:2d:ea:fa:98:8f:a4:d4:57:a1:e1:
4b:3e:22:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUcvRRTW668xM1OEjKQYf0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhOWM5MTAwYjMyZmNmNjJkNWRmZDgyMWNiZDA1NmFiNzNk
MmU0NTUwHhcNMjUwODIzMDEwMjM5WhcNMjUwODI0MDEwMjM5WjAzMTEwLwYDVQQD
Eyg5MWJjYWEzZTg5MjA1NTBmZGYxMGNmNWRjMzgyOTk3NjM0NjZiZDY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtxbrVABu0uxIz9V6/q7U+msSOst
0k2vl5SB6w3Ii3CJcLbjlNNR9xyCfA8BofpfX08f6tfncLiMzDh3MTTmxuX7QjFU
E899DIuJ0TR+T0FwWuxlcNOPJaLv9eCMuh+BslnNbmEPTMR/Dt0/SmFaFmPvhr1s
2O6OE208GK9jVkFypAlxuJPCCOTeXYno806893/qoJQx45HRLBL9GiAerZ0uI8du
xsDX7j369aoHy6ZVhZW2diNWVxwR6A27GQHDhoDIEdkSvKjNBKRQwu65zAmhsJXu
tpexGUXEC6OEUFo3xCf0E7R0mjUYEJ5jVC1UQn05ooBnndvDEaCrn8KrHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJG8qj6JIFUP3xDPXcOCmXY0Zr1mMB8GA1UdIwQY
MBaAFLqckQCzL89i1d/YIcvQVqtz0uRVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXB5UkFMTXZ6MkxWMzlnaHk5QldxM1BTNUZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC83YzFmZjUtMjJkYi00OTg4LWFkOTQt
OTJkMGQwMTEzOWY5LzEvdXB5UkFMTXZ6MkxWMzlnaHk5QldxM1BTNUZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC83YzFmZjUtMjJkYi00OTg4LWFkOTQtOTJkMGQwMTEzOWY5
LzEvdXB5UkFMTXZ6MkxWMzlnaHk5QldxM1BTNUZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU5ocDkfD
UaGLpIZpSafcKSwwSbK3VDQOHYKE9qoHaRsMi0tdRvUy+X7Jc683N2rsYvlt8pWR
p4/4kFtLDSzGn5zC0BSpFmRm3G+m35GQ28Ubg3isshv2rf+HTjrA/3cRyK/1yxlz
j1IM5ghEjCRTO+epUlSgLZvqczrEUA2wiA5Lkf3zbmn0fytrXT1IpQ46U2/2vVVi
TYvXvn88xBrim8ae5gfUysbKCAIpZCZfIT9h5pYZ0OaU/+fNju2/TjV9yOrGwaFR
AkM6lRJvmyO3uMmAoWI4d9hgvhZEr7mjXcAYmVziedgxJ7vRSEBejXq52Kgt6vqY
j6TUV6HhSz4ilA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:56 2025 by rpki-client