Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.mft
File: Up-6tRcaXLIvbFTxCzostttRcj4.mft (raw, json)
Hash identifier: Pa+h73dV4qNvRu15/4k8KsJJjdYA/yDTOP/WLlRDHEs=
Subject key identifier: 3F:EB:FE:AB:CD:B4:0D:22:F5:5A:7D:B5:DE:87:CF:6A:8E:4E:D0:21
Authority key identifier: 52:9F:BA:B5:17:1A:5C:B2:2F:6C:54:F1:0B:3A:2C:B6:DB:51:72:3E
Certificate issuer: /CN=529fbab5171a5cb22f6c54f10b3a2cb6db51723e
Certificate serial: 0198499C211E650190CAE1475A1559FEE0B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Up-6tRcaXLIvbFTxCzostttRcj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.mft
Manifest number: 1076
Signing time: Sun 27 Jul 2025 02:00:25 +0000
Manifest this update: Sun 27 Jul 2025 02:00:25 +0000
Manifest next update: Mon 28 Jul 2025 02:00:25 +0000
Files and hashes: 1: FrmVEYuDa9xtluHCEQ99gg4ezxk.roa (hash: ROrbhIKSviaPzDwOSSegQp+fGjZAnP/YBP5hACLrt+g=)
2: Up-6tRcaXLIvbFTxCzostttRcj4.crl (hash: kVBFfyld9ZlvzX31cBsJ9U5HJkEBiVo+/HhbJ2YIBoc=)
3: qi3rhjz0p_JIDWgNBHnC01nOTzc.roa (hash: sI4mLt9OaWWXoU75bYS+ZomsMcCTUVq/R9FP0uAoyas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Up-6tRcaXLIvbFTxCzostttRcj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:21:1e:65:01:90:ca:e1:47:5a:15:59:fe:e0:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529fbab5171a5cb22f6c54f10b3a2cb6db51723e
Validity
Not Before: Jul 27 02:00:25 2025 GMT
Not After : Jul 28 02:00:25 2025 GMT
Subject: CN=3febfeabcdb40d22f55a7db5de87cf6a8e4ed021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1a:f0:6b:b6:5a:6d:ac:5b:44:99:cd:ef:49:
ba:98:cd:82:fb:16:1b:cd:f7:62:e5:17:c9:5d:b2:
3a:30:c2:60:62:56:79:0d:6d:19:da:da:bf:30:57:
b4:40:4e:cd:26:e7:25:b0:76:18:98:76:27:da:ac:
6b:c3:11:8d:7f:72:a2:01:02:e6:41:57:08:92:ff:
67:04:01:c8:20:1c:be:3e:9c:b2:d9:f3:be:e3:a2:
96:50:f0:7d:fc:ea:c5:62:49:90:1f:85:a7:c3:61:
7e:06:71:e9:ae:da:9f:3b:99:40:8e:75:0e:8d:11:
69:4d:e7:c2:18:10:ac:b0:9b:bf:1b:0a:3a:ef:d4:
3a:14:f1:14:c2:0d:67:d0:8a:b4:eb:48:e2:5c:6a:
d1:29:1b:24:0d:9f:06:fe:d9:ad:75:39:a0:d4:73:
1b:5a:2b:9f:f2:94:60:e9:ed:e0:9d:a5:66:59:7e:
ba:00:f2:ed:92:a3:8b:60:ee:12:fb:dc:80:4e:0a:
1c:b5:2d:81:f4:37:0a:39:17:de:46:16:2a:74:fb:
cf:a0:19:a6:67:2f:2f:e9:8b:c1:0a:26:29:03:59:
8f:eb:d9:63:0e:86:31:8e:05:5e:e8:2a:64:9f:ac:
12:94:e1:ee:cb:27:94:b8:04:3a:62:36:4f:c1:be:
a8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:EB:FE:AB:CD:B4:0D:22:F5:5A:7D:B5:DE:87:CF:6A:8E:4E:D0:21
X509v3 Authority Key Identifier:
keyid:52:9F:BA:B5:17:1A:5C:B2:2F:6C:54:F1:0B:3A:2C:B6:DB:51:72:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Up-6tRcaXLIvbFTxCzostttRcj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:18:3a:ae:85:ce:06:40:aa:67:b8:8b:88:65:e1:9b:f7:85:
44:18:d6:e9:e7:54:c2:29:2b:0e:d2:12:b9:ee:9a:7f:3f:49:
64:5c:89:aa:c4:06:fc:0c:28:e5:ad:b8:11:2e:de:78:dc:7f:
23:51:a5:d5:15:54:a1:fd:ee:04:48:67:09:06:42:08:7d:8d:
37:ac:fd:2b:f5:6b:4d:5f:6a:e0:aa:36:0c:dd:5c:0d:42:a6:
92:78:32:d9:5d:28:f5:65:9c:9f:5b:9e:a5:53:0e:ec:4e:5c:
c6:ee:c2:25:9a:29:42:4f:a0:4f:7d:0a:9b:0a:2f:29:cc:cc:
e9:9c:f0:96:fc:96:97:4e:aa:2b:0b:28:09:17:72:11:0c:55:
81:68:f5:82:b2:68:f1:8d:e9:b6:7d:de:82:f1:12:da:1c:ef:
e7:63:6f:39:4c:35:c9:6d:ed:a9:fc:2f:d9:7a:fc:8e:ad:7a:
d7:54:9a:1c:43:45:5c:39:9a:22:2f:26:dc:44:89:b6:81:88:
91:bd:90:57:25:95:9b:bd:ab:2a:e5:24:ce:38:57:8d:bf:f8:
fa:d7:76:83:54:43:dd:d9:fe:4a:02:5f:8e:35:79:dd:80:5d:
1b:1c:ee:99:57:10:14:42:bc:4d:a3:4b:6c:c7:fa:d1:5b:5f:
93:85:74:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:25:57 2025 by rpki-client