Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.mft
File: UpylpuXWdCHz8s0hE4y3BwSFCVU.mft (raw, json)
Hash identifier: pYcFyDdJQipfQL5CgvOiuF20YqrIzbTYAYL00kjIIA8=
Subject key identifier: C7:1A:D9:2F:FF:5C:7B:58:74:37:8E:DA:75:CF:62:73:92:22:5C:04
Authority key identifier: 52:9C:A5:A6:E5:D6:74:21:F3:F2:CD:21:13:8C:B7:07:04:85:09:55
Certificate issuer: /CN=529ca5a6e5d67421f3f2cd21138cb70704850955
Certificate serial: 0199FC8F9FB9DA993F8152A0281E65189EE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpylpuXWdCHz8s0hE4y3BwSFCVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.mft
Manifest number: 1676
Signing time: Sun 19 Oct 2025 13:01:34 +0000
Manifest this update: Sun 19 Oct 2025 13:01:34 +0000
Manifest next update: Mon 20 Oct 2025 13:01:34 +0000
Files and hashes: 1: 5DYNtQhmHm5xId84-qYm__d0Jxg.roa (hash: M0kddqhlCcHa9Skioom20ixZlz/BFkuuxsQkLcWGHLA=)
2: UpylpuXWdCHz8s0hE4y3BwSFCVU.crl (hash: W2i25pxagw0Md5ZMYxVW3n4qkGAVTfvJGb9IPwCTRbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/UpylpuXWdCHz8s0hE4y3BwSFCVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:9f:b9:da:99:3f:81:52:a0:28:1e:65:18:9e:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529ca5a6e5d67421f3f2cd21138cb70704850955
Validity
Not Before: Oct 19 13:01:34 2025 GMT
Not After : Oct 20 13:01:34 2025 GMT
Subject: CN=c71ad92fff5c7b5874378eda75cf627392225c04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:82:51:71:64:6d:09:d2:97:00:7a:54:7b:45:
9a:12:58:de:1d:3d:80:32:9b:49:e2:75:0b:d6:39:
bd:57:98:47:a4:8f:7a:12:fb:0a:aa:28:7b:d9:43:
91:5c:9c:06:7d:ed:cc:25:ca:9d:8d:29:c3:90:f1:
6c:aa:b2:d2:56:a7:7b:d9:3c:9a:7f:d6:f9:5a:a8:
ae:ed:06:32:c2:1b:df:eb:7b:81:94:aa:a6:ab:c6:
f7:8d:b7:d0:c0:95:c0:9d:2a:e8:f6:48:d7:16:17:
b9:15:7a:74:3f:c9:f4:5b:c6:72:5c:bd:fb:3b:59:
c7:44:31:3a:06:c4:fd:1d:89:d4:24:38:0e:43:be:
54:6f:82:d0:b7:d1:62:0c:23:89:82:92:c6:30:4a:
42:42:ae:3a:86:da:45:f9:cc:ce:0a:e7:6f:d6:4b:
fe:42:43:aa:6d:17:95:84:94:54:71:13:ee:90:49:
20:ac:f5:e2:ea:e0:0d:14:82:67:9c:e8:b3:cc:20:
82:32:9c:8a:88:1b:d4:5e:d1:d0:d2:d9:6a:1b:c7:
d4:a5:dd:d8:d6:6d:30:9f:c5:fa:37:ad:a5:4b:7c:
c5:26:7a:e8:73:a1:8d:d7:83:aa:7c:84:17:76:fe:
29:6e:8b:0f:33:66:11:ba:85:b1:da:4c:cb:99:be:
98:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:1A:D9:2F:FF:5C:7B:58:74:37:8E:DA:75:CF:62:73:92:22:5C:04
X509v3 Authority Key Identifier:
keyid:52:9C:A5:A6:E5:D6:74:21:F3:F2:CD:21:13:8C:B7:07:04:85:09:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpylpuXWdCHz8s0hE4y3BwSFCVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:4a:a0:e1:f3:4e:9f:1b:88:e5:e0:08:5f:25:8e:8d:86:f9:
dd:63:96:09:84:dd:99:4a:15:c9:23:14:37:72:08:01:ce:a4:
f7:3e:e0:a9:23:2e:bd:8f:90:1e:0f:cb:93:cb:f1:6c:93:f3:
c2:7f:88:3d:63:48:61:aa:a6:40:f2:12:f2:e5:46:e3:66:f6:
4d:4e:da:cf:51:59:06:e5:fd:8d:2c:7f:6a:96:71:84:1a:86:
cf:22:f8:f3:a7:ee:55:01:25:b2:95:df:3f:a5:03:db:83:29:
b8:d1:ec:38:c5:74:2d:7a:9a:b0:2a:d0:bb:31:ca:51:63:5d:
67:73:b0:a0:7f:8f:03:e3:e6:08:f7:dc:08:84:57:e7:c9:4c:
63:71:05:99:4b:ac:b8:19:6f:f4:8a:3c:e1:61:0f:0e:5e:82:
50:c0:87:62:3c:d1:a8:cc:66:8e:bb:bd:57:0e:e0:10:c2:bc:
da:1a:bb:4e:e6:c6:39:9e:3e:43:9d:e1:1f:ca:8c:52:71:f5:
f2:0c:9d:47:80:07:2e:bf:e0:63:da:69:4c:9a:c9:36:e3:4c:
5d:05:d2:51:84:f6:b7:45:40:d8:cb:3d:0d:4f:83:c6:27:df:
bd:18:3d:80:4e:03:29:c3:00:dd:86:bb:80:cc:74:a3:19:b0:
dd:12:ad:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:01:55 2025 by rpki-client