Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/c46d1e-987d-4f65-b11b-2e2cd6435106/1/upfBVFbrYAQD7PuxbCDggWCUT48.mft
File: upfBVFbrYAQD7PuxbCDggWCUT48.mft (raw, json)
Hash identifier: PDQW9DqnRkyB7LOXGQPPKXVT5/MK+lhAP6+Zv6XHKIU=
Subject key identifier: 95:12:52:C3:26:2A:5F:A5:B8:FD:7D:0F:2D:68:17:DE:0E:B1:EB:70
Authority key identifier: BA:97:C1:54:56:EB:60:04:03:EC:FB:B1:6C:20:E0:81:60:94:4F:8F
Certificate issuer: /CN=ba97c15456eb600403ecfbb16c20e08160944f8f
Certificate serial: 01985155DCE6B320F2857D0A507C30ED812C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/upfBVFbrYAQD7PuxbCDggWCUT48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/c46d1e-987d-4f65-b11b-2e2cd6435106/1/upfBVFbrYAQD7PuxbCDggWCUT48.mft
Manifest number: 128E
Signing time: Mon 28 Jul 2025 14:00:38 +0000
Manifest this update: Mon 28 Jul 2025 14:00:38 +0000
Manifest next update: Tue 29 Jul 2025 14:00:38 +0000
Files and hashes: 1: SIndVbkKUXy4BUQozeoniwpZDAY.roa (hash: w+S8wcJNHWfC84514ZDYZ2EFFwmdH9ulSWKDE7QHbmQ=)
2: upfBVFbrYAQD7PuxbCDggWCUT48.crl (hash: h6tYaMCk3j9Hj4wuMrXLBiWVzBtWihf12PBCYHToYrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/c46d1e-987d-4f65-b11b-2e2cd6435106/1/upfBVFbrYAQD7PuxbCDggWCUT48.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/c46d1e-987d-4f65-b11b-2e2cd6435106/1/upfBVFbrYAQD7PuxbCDggWCUT48.mft
rsync://rpki.ripe.net/repository/DEFAULT/upfBVFbrYAQD7PuxbCDggWCUT48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 14:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:55:dc:e6:b3:20:f2:85:7d:0a:50:7c:30:ed:81:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba97c15456eb600403ecfbb16c20e08160944f8f
Validity
Not Before: Jul 28 14:00:38 2025 GMT
Not After : Jul 29 14:00:38 2025 GMT
Subject: CN=951252c3262a5fa5b8fd7d0f2d6817de0eb1eb70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1d:50:1b:43:4e:84:ba:bb:f7:a6:f0:29:67:
ca:ba:59:9f:2b:dc:93:c3:2d:bd:12:75:a4:3d:38:
e0:21:6e:6a:b6:14:b6:86:13:3a:d6:21:ec:fd:36:
3c:87:3e:f8:4f:72:34:cf:ea:d8:b5:de:cf:a8:49:
f9:64:c1:74:36:e6:00:75:d7:5c:f3:e2:8f:da:6b:
3d:22:5b:e5:c1:4d:1f:be:c3:8b:17:f0:71:01:33:
5f:42:07:3a:77:05:c9:c3:74:d8:f4:21:aa:79:eb:
a4:90:74:3c:da:19:f5:a3:ca:bd:85:8b:71:f5:d5:
46:7c:a6:da:a5:c1:7b:66:13:91:ae:71:2e:e1:43:
69:87:c4:66:21:ce:00:31:1b:57:49:77:71:7b:e4:
a4:d6:d7:a2:22:a4:bf:02:57:09:11:85:5e:6b:00:
9b:db:64:3a:96:fe:84:16:b6:e0:41:f1:0f:7d:1b:
b3:d5:79:8e:f5:e5:52:8c:55:e1:80:76:dd:0c:52:
b5:78:f8:b8:8a:26:4f:f0:7c:a0:f3:bc:e9:b3:a5:
e1:50:0f:99:d8:09:3a:5a:72:c4:eb:78:ae:45:2b:
2a:50:4a:f3:36:aa:7a:b5:08:26:da:dd:4e:90:59:
29:2b:64:4f:51:f6:9d:8a:91:7d:39:13:a3:76:90:
02:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:12:52:C3:26:2A:5F:A5:B8:FD:7D:0F:2D:68:17:DE:0E:B1:EB:70
X509v3 Authority Key Identifier:
keyid:BA:97:C1:54:56:EB:60:04:03:EC:FB:B1:6C:20:E0:81:60:94:4F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/upfBVFbrYAQD7PuxbCDggWCUT48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c46d1e-987d-4f65-b11b-2e2cd6435106/1/upfBVFbrYAQD7PuxbCDggWCUT48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c46d1e-987d-4f65-b11b-2e2cd6435106/1/upfBVFbrYAQD7PuxbCDggWCUT48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:38:9f:e1:f2:99:15:c1:0e:ba:53:62:c5:6a:30:66:d2:a4:
45:59:85:86:8b:6b:65:09:36:46:06:6b:22:4a:43:fc:e9:7f:
8f:63:f0:f7:e7:50:e2:18:de:33:3f:44:89:f0:3e:2d:f4:8f:
9b:6d:69:92:ed:91:08:0b:40:a8:f3:52:af:f2:65:26:66:eb:
54:36:b4:af:d7:3a:96:bf:d7:96:71:15:8d:f8:b5:cc:57:7e:
48:56:75:6b:22:1e:19:b5:a8:b1:df:34:99:cd:87:60:97:7f:
5d:a6:f0:5c:a6:55:6a:3c:f5:98:5a:54:54:eb:74:0c:de:0a:
0b:24:ce:9a:41:6f:4e:c8:31:3f:fd:1b:c0:fe:20:cc:c5:86:
38:5c:61:77:cc:8c:e5:9c:06:eb:e5:c1:e3:1d:a9:71:f2:2e:
68:07:e1:c2:05:c8:b0:3e:9c:1a:1c:bb:aa:70:18:4d:f3:f9:
9b:7b:c7:57:22:33:48:b5:6b:7d:61:0f:00:b0:3f:17:48:82:
c0:85:df:69:87:58:f7:af:5f:d1:ee:d3:57:cc:65:04:59:08:
02:0d:6e:80:43:00:98:fb:73:a8:c5:3f:fc:17:1d:c0:ae:ba:
81:01:82:d2:65:0e:27:bc:bf:11:a7:72:9d:a8:9f:92:35:39:
dd:a1:81:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 20:05:35 2025 by rpki-client