Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/10429b-8049-47a2-ab99-256db3ed8335/1/UpJ4MtOYUOhR7staBRFpKZHdpdk.mft
File: UpJ4MtOYUOhR7staBRFpKZHdpdk.mft (raw, json)
Hash identifier: cHFDgS4HfkNfTfhieE8uDNfokS6bMpD1IZSEshx+8JU=
Subject key identifier: BF:1A:6F:A2:49:E4:6C:FF:4B:32:F7:74:00:8F:DB:39:D6:A3:F2:C6
Authority key identifier: 52:92:78:32:D3:98:50:E8:51:EE:CB:5A:05:11:69:29:91:DD:A5:D9
Certificate issuer: /CN=52927832d39850e851eecb5a0511692991dda5d9
Certificate serial: 019A03A4DB0B4D3B05AF56BE133C6897B686
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpJ4MtOYUOhR7staBRFpKZHdpdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/10429b-8049-47a2-ab99-256db3ed8335/1/UpJ4MtOYUOhR7staBRFpKZHdpdk.mft
Manifest number: 16E2
Signing time: Mon 20 Oct 2025 22:02:06 +0000
Manifest this update: Mon 20 Oct 2025 22:02:06 +0000
Manifest next update: Tue 21 Oct 2025 22:02:06 +0000
Files and hashes: 1: UpJ4MtOYUOhR7staBRFpKZHdpdk.crl (hash: pFp6M21a9/mxKB8kd07yni4e1E/3b7Fu2KRetBVVfOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/10429b-8049-47a2-ab99-256db3ed8335/1/UpJ4MtOYUOhR7staBRFpKZHdpdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/10429b-8049-47a2-ab99-256db3ed8335/1/UpJ4MtOYUOhR7staBRFpKZHdpdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UpJ4MtOYUOhR7staBRFpKZHdpdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 15:16:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:03:a4:db:0b:4d:3b:05:af:56:be:13:3c:68:97:b6:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52927832d39850e851eecb5a0511692991dda5d9
Validity
Not Before: Oct 20 22:02:06 2025 GMT
Not After : Oct 21 22:02:06 2025 GMT
Subject: CN=bf1a6fa249e46cff4b32f774008fdb39d6a3f2c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ba:ff:d0:1f:a9:8a:b4:40:44:e9:69:56:41:
a7:25:93:27:2f:bc:3d:11:01:32:da:8f:c0:1a:59:
9b:fa:99:65:dd:14:ac:da:b6:cf:5d:89:be:c7:d3:
cb:62:ce:e6:00:92:43:7e:1c:17:b0:a4:23:41:77:
31:12:07:85:15:9d:e5:16:85:16:12:89:60:23:11:
93:ee:c9:b0:f5:d7:b5:35:71:9b:41:d1:1f:27:9b:
80:12:02:b2:85:75:96:2e:65:de:41:f6:95:3b:f5:
2a:df:e4:c0:9f:ab:2d:33:39:e2:e1:c5:f2:92:64:
61:ed:99:c1:d1:ef:1a:41:ad:0a:fc:f7:dc:80:ec:
09:3d:16:ef:3d:5e:88:4d:61:b9:0a:1c:a6:82:94:
88:70:7d:be:90:90:13:93:4f:ef:a5:ba:56:26:36:
82:f9:0e:3d:1a:0b:ac:26:1c:67:dd:3c:8a:98:32:
d2:e8:21:1e:ab:a5:3a:6e:65:b2:a6:9c:56:cb:43:
55:2f:63:59:98:4d:40:a8:da:ab:5d:35:58:ba:d6:
b3:e6:d9:66:e1:b2:13:59:68:b5:c3:29:35:ee:26:
63:af:ae:f0:5b:f4:6f:b1:dc:13:36:cc:81:bf:90:
c0:6d:d6:c4:a0:ed:5d:38:a1:21:b7:fc:5e:78:06:
c3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:1A:6F:A2:49:E4:6C:FF:4B:32:F7:74:00:8F:DB:39:D6:A3:F2:C6
X509v3 Authority Key Identifier:
keyid:52:92:78:32:D3:98:50:E8:51:EE:CB:5A:05:11:69:29:91:DD:A5:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpJ4MtOYUOhR7staBRFpKZHdpdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/10429b-8049-47a2-ab99-256db3ed8335/1/UpJ4MtOYUOhR7staBRFpKZHdpdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/10429b-8049-47a2-ab99-256db3ed8335/1/UpJ4MtOYUOhR7staBRFpKZHdpdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:8f:f9:17:92:62:07:65:67:d5:9f:ec:80:1b:9f:f6:d5:32:
d9:ae:d4:3d:5d:02:b6:7c:57:1c:e9:c6:15:15:0f:1e:be:a7:
dc:ac:26:e4:85:6c:3b:97:99:12:61:a1:f6:1f:27:d6:c3:4a:
c7:66:fd:4c:ac:7b:40:02:23:d4:ef:ed:c8:b5:e1:c8:63:78:
8f:a0:3b:fd:09:3c:c8:9c:c0:20:43:b7:d1:22:df:ab:46:64:
b2:db:2e:2f:76:ad:57:61:a7:df:40:65:70:c5:a2:fa:27:96:
9c:fa:ae:56:c0:e9:ee:38:a1:5b:b1:9b:76:c7:46:1b:06:bb:
8f:71:4f:18:de:fc:66:ae:3b:3c:67:b6:5b:71:4b:ed:25:1a:
c0:c7:f8:50:75:83:a2:93:6a:f0:f1:9e:b4:f7:bc:dc:e2:65:
7f:2a:86:a6:e3:00:2c:1f:d8:7d:bf:d2:e1:d5:68:3d:f6:4c:
32:0a:ca:2c:d4:45:81:6f:3b:f8:d6:0c:c7:c3:52:06:bf:1d:
18:c7:0b:f7:13:35:c9:0d:fa:3f:a6:17:7c:49:54:9c:cc:d8:
0a:e2:89:9e:ff:9c:98:70:7f:5f:a9:11:ac:e4:98:00:09:85:
ee:e7:28:53:41:20:70:01:be:79:a2:ac:ca:8a:b7:ea:2a:90:
f7:0e:3e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:41:28 2025 by rpki-client