Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/75b838-4ece-4998-8ad8-17d31dee8e12/1/up78qG3qcNPukBgWeMjrMOaRbR0.mft
File: up78qG3qcNPukBgWeMjrMOaRbR0.mft (raw, json)
Hash identifier: PJlujqizIXoZuX9WmvZLFIFwnuzCbCLK+hVjU1+Pl6c=
Subject key identifier: 21:59:61:7D:48:A9:64:DD:17:66:18:56:D1:CF:23:B3:06:59:5D:61
Authority key identifier: BA:9E:FC:A8:6D:EA:70:D3:EE:90:18:16:78:C8:EB:30:E6:91:6D:1D
Certificate issuer: /CN=ba9efca86dea70d3ee90181678c8eb30e6916d1d
Certificate serial: 0198D515A3D16C443DC0AA31DCDD1DE4E9F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up78qG3qcNPukBgWeMjrMOaRbR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/75b838-4ece-4998-8ad8-17d31dee8e12/1/up78qG3qcNPukBgWeMjrMOaRbR0.mft
Manifest number: 15BF
Signing time: Sat 23 Aug 2025 04:00:21 +0000
Manifest this update: Sat 23 Aug 2025 04:00:21 +0000
Manifest next update: Sun 24 Aug 2025 04:00:21 +0000
Files and hashes: 1: TcxQ_LIgSlnQjiSbvcx7DOq2_Zc.roa (hash: v9utTlGogD+SmAb7nxAo7ersLZspEGf0TY5tMFbjRB8=)
2: up78qG3qcNPukBgWeMjrMOaRbR0.crl (hash: jBJQZ517y+VVf1hIi7+QocHdG5BwIH+YNRp8W8DQWJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/75b838-4ece-4998-8ad8-17d31dee8e12/1/up78qG3qcNPukBgWeMjrMOaRbR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/75b838-4ece-4998-8ad8-17d31dee8e12/1/up78qG3qcNPukBgWeMjrMOaRbR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/up78qG3qcNPukBgWeMjrMOaRbR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:a3:d1:6c:44:3d:c0:aa:31:dc:dd:1d:e4:e9:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba9efca86dea70d3ee90181678c8eb30e6916d1d
Validity
Not Before: Aug 23 04:00:21 2025 GMT
Not After : Aug 24 04:00:21 2025 GMT
Subject: CN=2159617d48a964dd17661856d1cf23b306595d61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b0:c0:29:61:81:57:47:33:57:dd:dc:a4:28:
fb:58:2a:e6:16:56:40:5f:b7:fb:4a:b9:ca:54:6e:
b7:ba:ca:5c:28:9b:8b:26:7e:d9:b4:19:23:1c:97:
67:00:0c:dc:dc:2b:fe:23:0a:4c:15:4f:62:3f:80:
08:13:59:7e:a1:89:11:89:99:f0:8e:bf:6d:18:4b:
1a:c4:35:29:d7:0f:d4:32:12:03:ef:e4:e6:6a:72:
a4:00:dc:84:ee:b3:24:83:ab:b9:6c:8f:80:e8:fd:
db:06:51:a8:d6:d0:be:49:92:ef:95:a5:50:21:58:
51:0f:dd:c7:4b:32:9e:fc:b8:4f:d0:ca:be:8d:70:
20:8c:51:17:85:47:6c:a1:d5:32:f7:6f:2f:43:20:
43:d7:5e:10:0a:17:8e:be:5a:15:b9:e9:b9:b4:9e:
be:85:8d:98:73:2f:36:09:13:12:9b:79:14:ee:97:
16:9d:99:ae:34:86:7e:5c:85:a6:c5:88:d1:a1:f2:
9e:41:59:cc:2d:93:f7:1e:fd:14:68:73:c5:8b:9d:
b0:d7:4c:22:0d:cc:08:83:ca:8f:59:a5:87:fd:78:
53:da:07:ca:a1:ad:47:3c:92:7c:0f:80:3e:49:9d:
70:d8:41:d5:31:3a:9b:9b:df:9e:25:68:d0:c9:16:
ee:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:59:61:7D:48:A9:64:DD:17:66:18:56:D1:CF:23:B3:06:59:5D:61
X509v3 Authority Key Identifier:
keyid:BA:9E:FC:A8:6D:EA:70:D3:EE:90:18:16:78:C8:EB:30:E6:91:6D:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up78qG3qcNPukBgWeMjrMOaRbR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/75b838-4ece-4998-8ad8-17d31dee8e12/1/up78qG3qcNPukBgWeMjrMOaRbR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/75b838-4ece-4998-8ad8-17d31dee8e12/1/up78qG3qcNPukBgWeMjrMOaRbR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:54:bf:9e:01:a0:17:23:77:78:0d:de:0c:f2:b1:b1:a0:d3:
8d:3c:66:ac:90:e5:0f:90:65:3d:91:e0:28:aa:e9:01:77:ce:
ff:07:7e:88:c5:f3:fd:b4:b8:b1:a6:0e:bd:16:c9:e5:49:d2:
bb:2d:fb:1a:2f:2b:3a:4a:c0:70:db:66:92:7a:c4:f4:9b:f8:
ca:8a:e7:ce:79:bc:27:28:32:d3:2b:01:09:4c:8f:e6:cd:24:
dd:07:1c:ae:8b:cf:38:85:69:43:b8:d6:06:eb:85:01:38:9d:
86:1c:6a:f6:a7:5e:98:e4:78:e0:a7:c7:d0:2b:61:8b:1c:49:
43:2a:e0:8a:9e:c0:27:26:4c:01:cd:18:9e:10:6f:79:e9:cf:
92:70:f8:86:2a:f2:5b:b5:45:d0:d3:52:c8:ba:a9:76:34:1d:
de:04:89:40:26:3a:c3:b4:e0:01:ac:98:90:94:43:df:89:3d:
d5:4f:bd:89:94:e5:53:65:19:cd:7e:02:3f:cb:03:a1:b1:8e:
3d:3a:e8:ee:96:86:19:eb:1a:3c:03:c6:f5:8e:69:f7:bd:17:
ed:cb:7a:8d:74:4c:c3:58:ce:ab:65:d7:0c:3c:0f:a0:1b:ff:
a0:e4:df:11:4e:2c:ed:f6:6e:fa:76:dd:95:e3:7b:b1:40:2f:
62:fa:ec:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:25:38 2025 by rpki-client