Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.mft
File: UpylpuXWdCHz8s0hE4y3BwSFCVU.mft (raw, json)
Hash identifier: wKXCxYxGa8S6cytE8qrSavf4efie9HW/sJv6yD6EzP0=
Subject key identifier: EF:29:1C:8F:74:92:CF:31:01:62:BA:34:43:D3:05:54:1E:05:A1:7A
Authority key identifier: 52:9C:A5:A6:E5:D6:74:21:F3:F2:CD:21:13:8C:B7:07:04:85:09:55
Certificate issuer: /CN=529ca5a6e5d67421f3f2cd21138cb70704850955
Certificate serial: 0197B74593BE185423349915A6B80E47512B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpylpuXWdCHz8s0hE4y3BwSFCVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.mft
Manifest number: 1549
Signing time: Sat 28 Jun 2025 16:01:19 +0000
Manifest this update: Sat 28 Jun 2025 16:01:19 +0000
Manifest next update: Sun 29 Jun 2025 16:01:19 +0000
Files and hashes: 1: 5DYNtQhmHm5xId84-qYm__d0Jxg.roa (hash: M0kddqhlCcHa9Skioom20ixZlz/BFkuuxsQkLcWGHLA=)
2: UpylpuXWdCHz8s0hE4y3BwSFCVU.crl (hash: 8Dd/v2kQhKFHJRS1wIrd7pczNQhJ3OGli37QG0vKDRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/UpylpuXWdCHz8s0hE4y3BwSFCVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:93:be:18:54:23:34:99:15:a6:b8:0e:47:51:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529ca5a6e5d67421f3f2cd21138cb70704850955
Validity
Not Before: Jun 28 16:01:19 2025 GMT
Not After : Jun 29 16:01:19 2025 GMT
Subject: CN=ef291c8f7492cf310162ba3443d305541e05a17a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:42:46:33:30:91:e2:04:1f:fb:b6:2f:96:80:
01:b2:5b:63:5f:37:fb:cc:69:d9:fb:9c:03:fd:f5:
6a:0f:25:8a:c4:e0:1f:f8:db:71:1c:70:0a:07:fe:
76:ee:69:0a:b8:51:57:fd:7c:d8:1a:7f:68:6d:34:
c2:5e:1f:c3:47:7b:3d:19:95:fb:ac:a0:c8:92:de:
53:d8:32:cc:6b:dc:71:2c:c2:b1:58:8b:97:f2:34:
b2:6a:e3:2e:37:b1:c2:3d:53:b8:ed:2d:41:7a:50:
08:81:9f:6b:d2:a2:1d:49:af:a1:53:2c:b9:af:52:
16:2c:58:c4:4a:a5:ea:34:5a:01:4e:70:2a:ed:24:
b5:4f:fc:7d:45:c8:02:ea:35:49:9d:56:9e:a7:71:
fa:56:88:02:ba:b3:fe:b3:87:ef:d6:bc:33:ad:6e:
2c:f2:f2:d4:ae:e1:34:43:b9:c9:0d:b5:8d:87:e0:
58:13:e0:29:5f:a1:d6:c2:4d:e6:5f:10:b6:3e:3e:
8a:fd:e4:24:7c:36:33:5e:60:ca:0f:56:17:54:5c:
ec:5b:49:f5:fb:1d:78:a3:c2:3e:33:54:8b:b9:80:
89:64:5f:d6:db:1f:96:82:bb:64:7b:68:2a:75:f4:
1b:b3:bd:db:1f:06:1d:1b:86:5b:01:e9:c6:aa:aa:
d4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:29:1C:8F:74:92:CF:31:01:62:BA:34:43:D3:05:54:1E:05:A1:7A
X509v3 Authority Key Identifier:
keyid:52:9C:A5:A6:E5:D6:74:21:F3:F2:CD:21:13:8C:B7:07:04:85:09:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpylpuXWdCHz8s0hE4y3BwSFCVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:c8:36:06:96:a7:c8:5f:fe:74:96:1e:0f:e5:c2:7c:14:08:
d5:03:37:fc:03:da:ff:38:cc:42:16:9b:59:ad:1f:26:ea:82:
db:e0:cd:68:83:0a:36:dc:17:ce:0e:3c:41:22:6e:77:78:36:
b3:cb:b5:90:f2:6a:55:a5:56:8f:d9:27:5e:f2:d0:b4:33:60:
7d:51:48:c4:a9:bb:be:79:2e:24:a4:3d:b4:eb:c7:24:55:45:
06:26:bd:34:e2:29:3b:5b:0b:d7:12:b6:03:a0:d7:f0:48:b2:
5e:f4:c1:18:66:a3:f7:ec:a5:f4:45:58:34:95:78:df:52:2a:
86:92:da:d4:01:38:93:ec:76:f5:c0:8a:41:e3:2e:fa:c0:04:
4c:5d:73:4f:4a:84:ae:c3:1b:1a:26:f1:75:1a:6a:76:d8:89:
55:0c:cb:e8:5a:9c:91:99:95:be:25:26:41:37:54:74:ca:fe:
49:a0:81:b6:e7:cd:4c:5a:c1:ef:74:58:83:c5:c8:f3:46:e1:
8a:f3:e0:da:10:da:94:b7:de:64:a4:eb:00:78:f4:72:17:85:
2f:d8:16:59:7c:48:75:b3:a1:b4:22:4a:37:a3:47:47:db:e8:
02:fb:69:1f:ec:c9:88:f3:9a:55:77:cf:62:8e:d7:98:4d:5f:
d9:1a:8a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:11:09 2025 by rpki-client