Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/10429b-8049-47a2-ab99-256db3ed8335/1/UpJ4MtOYUOhR7staBRFpKZHdpdk.mft
File: UpJ4MtOYUOhR7staBRFpKZHdpdk.mft (raw, json)
Hash identifier: LdOZOFgIisLzu5gAZAgfI+esV0I2xtHx+wJzOwGvgTE=
Subject key identifier: F3:25:84:20:A2:20:9D:55:C3:D0:E6:AE:A7:A1:0E:79:B5:9A:91:D7
Authority key identifier: 52:92:78:32:D3:98:50:E8:51:EE:CB:5A:05:11:69:29:91:DD:A5:D9
Certificate issuer: /CN=52927832d39850e851eecb5a0511692991dda5d9
Certificate serial: 0198D84FDDAA1ADBFA6F4E5D58258ABB2BC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpJ4MtOYUOhR7staBRFpKZHdpdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/10429b-8049-47a2-ab99-256db3ed8335/1/UpJ4MtOYUOhR7staBRFpKZHdpdk.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 19:02:49 +0000
Manifest this update: Sat 23 Aug 2025 19:02:49 +0000
Manifest next update: Sun 24 Aug 2025 19:02:49 +0000
Files and hashes: 1: UpJ4MtOYUOhR7staBRFpKZHdpdk.crl (hash: H4QsqLx4hmA+eBnttUP6Ql/Kd6XrKlTLcnEtLCoF2w8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/10429b-8049-47a2-ab99-256db3ed8335/1/UpJ4MtOYUOhR7staBRFpKZHdpdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/10429b-8049-47a2-ab99-256db3ed8335/1/UpJ4MtOYUOhR7staBRFpKZHdpdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UpJ4MtOYUOhR7staBRFpKZHdpdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:4f:dd:aa:1a:db:fa:6f:4e:5d:58:25:8a:bb:2b:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52927832d39850e851eecb5a0511692991dda5d9
Validity
Not Before: Aug 23 19:02:49 2025 GMT
Not After : Aug 24 19:02:49 2025 GMT
Subject: CN=f3258420a2209d55c3d0e6aea7a10e79b59a91d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:31:ff:c1:47:10:a7:cb:d7:9d:b8:84:06:b8:
07:07:1c:f6:ef:ab:a0:e0:c0:c6:ce:d7:7b:23:cd:
61:d0:16:1e:36:05:02:f6:53:38:fc:6d:50:3c:e9:
cb:51:65:7f:5f:35:d8:b3:41:21:4f:ff:5c:f5:c3:
0c:55:96:2e:62:d2:46:97:8a:d0:e5:e0:66:de:55:
2d:c6:55:cf:44:9e:cd:c6:a8:e9:ee:c8:a2:62:a9:
07:f6:ea:22:2e:19:50:59:23:35:64:54:cd:a3:a1:
97:21:cf:2c:99:ea:84:cf:f0:68:37:d1:27:41:32:
27:78:fd:f5:21:2c:00:9a:67:84:8e:5b:5d:00:45:
bc:91:76:02:1f:a7:e6:e6:90:7e:1e:9a:a9:ee:e2:
f0:89:43:eb:38:b4:e6:1f:d3:bc:52:52:0d:b8:68:
40:bf:09:51:7e:b6:51:bb:47:06:0d:b2:22:47:db:
51:cd:43:f1:0c:05:b5:86:5c:96:a2:ca:21:29:e4:
ad:fd:b8:c3:e8:de:04:73:e8:dc:6d:80:01:5a:cc:
97:a6:43:64:6f:c4:d8:c7:8b:03:4f:10:e9:da:fb:
60:d4:ab:48:7a:f5:d0:68:f4:3c:41:eb:94:ce:74:
a0:66:ad:78:e1:60:a7:1f:f3:61:90:26:73:4e:5e:
45:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:25:84:20:A2:20:9D:55:C3:D0:E6:AE:A7:A1:0E:79:B5:9A:91:D7
X509v3 Authority Key Identifier:
keyid:52:92:78:32:D3:98:50:E8:51:EE:CB:5A:05:11:69:29:91:DD:A5:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpJ4MtOYUOhR7staBRFpKZHdpdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/10429b-8049-47a2-ab99-256db3ed8335/1/UpJ4MtOYUOhR7staBRFpKZHdpdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/10429b-8049-47a2-ab99-256db3ed8335/1/UpJ4MtOYUOhR7staBRFpKZHdpdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:1f:40:21:77:69:e0:48:dc:af:b1:64:37:f9:a5:e3:ca:1b:
8b:51:1c:02:cb:65:4a:10:16:f3:5f:91:fa:35:d7:38:2c:36:
69:5c:42:34:b4:4e:1e:9f:7a:9a:a1:31:12:21:43:27:3f:45:
45:1d:92:a0:84:00:76:5c:80:bb:e4:68:0d:1d:e0:1f:b8:67:
8d:a7:51:ac:77:b7:60:2a:e8:b6:91:6d:07:d1:43:20:fa:87:
65:df:22:a0:35:f2:a2:10:13:a4:ef:1c:ba:f1:35:2b:71:27:
a5:7a:d2:58:7a:42:9a:af:0c:5d:10:8c:c8:64:0f:b0:9d:d9:
9c:2d:95:c8:92:5b:fa:7d:be:1b:11:33:47:97:9c:b3:57:fe:
fb:8a:a5:6b:50:63:a5:b3:db:9b:76:fa:4c:bb:2c:df:33:c4:
45:28:13:2e:eb:95:f5:70:fb:d6:4e:43:80:ee:ed:e2:b4:d9:
c6:ed:b7:36:18:22:8f:16:b0:15:ef:b2:89:5a:a9:64:ba:5c:
55:ed:66:97:ce:90:e7:3a:50:7b:59:dd:54:5a:22:c5:10:dc:
c4:5b:fa:a5:b7:8a:8c:52:9e:80:b6:b7:58:fd:8f:43:ab:42:
9d:31:82:b6:b6:43:cd:ad:88:3c:ba:7d:4d:49:b9:50:f7:a8:
19:02:ce:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:22:06 2025 by rpki-client