Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.mft
File: UpylpuXWdCHz8s0hE4y3BwSFCVU.mft (raw, json)
Hash identifier: m8qHfi/EXoJWZHj3dCun+OgD/uZCPOkfrbopTICSf0Y=
Subject key identifier: BB:F3:16:B7:C4:21:B3:C9:EC:E3:65:1D:A8:EA:BA:38:82:E1:E1:93
Authority key identifier: 52:9C:A5:A6:E5:D6:74:21:F3:F2:CD:21:13:8C:B7:07:04:85:09:55
Certificate issuer: /CN=529ca5a6e5d67421f3f2cd21138cb70704850955
Certificate serial: 0198D515EC2E637531594DB1EC67A986B3B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpylpuXWdCHz8s0hE4y3BwSFCVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.mft
Manifest number: 15DD
Signing time: Sat 23 Aug 2025 04:00:40 +0000
Manifest this update: Sat 23 Aug 2025 04:00:40 +0000
Manifest next update: Sun 24 Aug 2025 04:00:40 +0000
Files and hashes: 1: 5DYNtQhmHm5xId84-qYm__d0Jxg.roa (hash: M0kddqhlCcHa9Skioom20ixZlz/BFkuuxsQkLcWGHLA=)
2: UpylpuXWdCHz8s0hE4y3BwSFCVU.crl (hash: gLbSb5VR3L5T1A11qwFbo/LTmpX1dVBLzu1ym3zxJV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/UpylpuXWdCHz8s0hE4y3BwSFCVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:ec:2e:63:75:31:59:4d:b1:ec:67:a9:86:b3:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529ca5a6e5d67421f3f2cd21138cb70704850955
Validity
Not Before: Aug 23 04:00:40 2025 GMT
Not After : Aug 24 04:00:40 2025 GMT
Subject: CN=bbf316b7c421b3c9ece3651da8eaba3882e1e193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b9:02:c7:eb:ce:90:cb:c4:f1:18:8b:7c:69:
77:32:b8:32:3b:9d:fd:f4:51:02:6f:a7:60:c8:da:
cd:70:42:5b:5b:01:07:e9:ef:79:96:5c:70:bc:4a:
53:82:02:43:7b:65:73:97:9d:37:7f:6d:d0:68:78:
94:36:b5:e6:61:41:f1:d6:cf:fd:b5:19:0e:1f:50:
ac:f0:8b:f5:8b:43:b4:eb:26:40:4c:ef:ae:1b:9c:
25:5e:0f:00:b0:e1:92:0d:19:8b:20:62:ef:da:0d:
76:49:61:c6:ad:6e:e9:28:55:3b:df:a4:f5:eb:ae:
01:7b:a5:b2:c4:af:81:fa:cb:29:21:6f:06:33:23:
32:54:f3:4f:da:4a:1d:ec:ff:91:c6:28:d7:65:21:
7f:38:a1:8a:bd:0b:77:0e:38:41:f9:5c:ed:b1:f6:
9a:2a:a8:2d:2b:4e:67:22:ca:a0:ab:47:21:e6:45:
5b:f2:af:6d:26:48:3a:c0:d8:13:40:8b:86:05:13:
2c:ac:b9:2a:93:11:07:87:cf:84:ef:e6:fe:2e:c9:
e1:e1:63:09:e3:02:9f:47:62:4d:5e:27:7c:5f:d3:
d3:cc:d1:35:bb:24:bc:c4:42:58:8e:09:c0:b9:d9:
e9:27:31:c4:c7:76:e0:cb:51:9e:9a:da:e6:94:c2:
77:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F3:16:B7:C4:21:B3:C9:EC:E3:65:1D:A8:EA:BA:38:82:E1:E1:93
X509v3 Authority Key Identifier:
keyid:52:9C:A5:A6:E5:D6:74:21:F3:F2:CD:21:13:8C:B7:07:04:85:09:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpylpuXWdCHz8s0hE4y3BwSFCVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:51:04:7c:86:9b:43:89:3f:4f:69:83:53:b9:af:44:8f:0d:
06:4b:63:0e:46:64:ab:86:8a:39:a4:2f:96:0f:fd:4b:6d:46:
2d:bc:48:11:6b:23:5c:d0:70:76:fe:fa:e0:ab:5f:9c:6f:3d:
9b:4e:f0:95:cf:2e:ff:44:02:2c:4b:35:23:6c:fb:5d:34:fb:
d7:97:ed:b5:da:8d:23:d2:65:8d:fc:2a:61:18:fe:43:4c:44:
49:94:e9:9c:b3:a2:27:32:50:9c:ff:c9:bb:3d:4a:33:aa:b5:
f9:4f:8d:ed:a1:f3:1a:86:4f:e5:58:4d:e8:73:43:70:d0:36:
a3:5f:2c:dc:02:57:9b:08:22:f3:e1:e4:a7:1e:b8:df:57:50:
60:ea:20:43:ba:fb:f6:7c:f5:d2:65:99:63:a3:20:8d:c1:2a:
24:7a:ad:6c:7c:b6:62:8c:b2:3d:38:b3:e5:73:7a:b6:4d:c1:
53:34:65:93:80:75:b6:d4:13:ef:f8:d7:1b:f9:f4:1b:4b:9b:
cf:85:9a:e0:1d:1e:b0:26:da:d4:87:d8:7d:c4:15:9a:07:06:
15:05:6a:d9:96:55:94:69:11:d0:af:6a:cc:4b:6b:f8:04:b7:
03:9f:61:9c:09:c7:43:23:d0:2e:d3:45:fe:11:b5:5f:73:b1:
fd:90:88:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:08:57 2025 by rpki-client