Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/75b838-4ece-4998-8ad8-17d31dee8e12/1/up78qG3qcNPukBgWeMjrMOaRbR0.mft
File: up78qG3qcNPukBgWeMjrMOaRbR0.mft (raw, json)
Hash identifier: 0prN1hAqGcigzfiy7LaonTuZtnuADItWE5xgKznw1e4=
Subject key identifier: 53:20:7E:FE:67:BB:37:6E:ED:A6:DC:3B:2B:BC:EF:53:07:3C:DA:AC
Authority key identifier: BA:9E:FC:A8:6D:EA:70:D3:EE:90:18:16:78:C8:EB:30:E6:91:6D:1D
Certificate issuer: /CN=ba9efca86dea70d3ee90181678c8eb30e6916d1d
Certificate serial: 01984A09F698FD34BF2EA2BC13314F06152A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up78qG3qcNPukBgWeMjrMOaRbR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/75b838-4ece-4998-8ad8-17d31dee8e12/1/up78qG3qcNPukBgWeMjrMOaRbR0.mft
Manifest number: 1577
Signing time: Sun 27 Jul 2025 04:00:23 +0000
Manifest this update: Sun 27 Jul 2025 04:00:23 +0000
Manifest next update: Mon 28 Jul 2025 04:00:23 +0000
Files and hashes: 1: TcxQ_LIgSlnQjiSbvcx7DOq2_Zc.roa (hash: v9utTlGogD+SmAb7nxAo7ersLZspEGf0TY5tMFbjRB8=)
2: up78qG3qcNPukBgWeMjrMOaRbR0.crl (hash: 4whyTRgvKyq83i6HslaNG8Ww1e/hWN+JBOurfRt98XA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/75b838-4ece-4998-8ad8-17d31dee8e12/1/up78qG3qcNPukBgWeMjrMOaRbR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/75b838-4ece-4998-8ad8-17d31dee8e12/1/up78qG3qcNPukBgWeMjrMOaRbR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/up78qG3qcNPukBgWeMjrMOaRbR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:f6:98:fd:34:bf:2e:a2:bc:13:31:4f:06:15:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba9efca86dea70d3ee90181678c8eb30e6916d1d
Validity
Not Before: Jul 27 04:00:23 2025 GMT
Not After : Jul 28 04:00:23 2025 GMT
Subject: CN=53207efe67bb376eeda6dc3b2bbcef53073cdaac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:09:b8:69:a4:e5:26:08:ea:d0:81:9f:a7:59:
6f:a4:1f:75:1e:79:d3:15:11:3a:19:9e:b3:1c:50:
0a:98:3c:f6:42:47:07:8b:ca:65:8c:b1:38:f9:f7:
71:e9:a2:96:75:ab:16:e5:ec:7a:c2:db:c8:53:9b:
46:06:2e:ec:e1:13:3a:57:9c:0e:25:92:11:6c:b5:
e2:d3:5e:55:a8:eb:5a:87:7a:64:5b:9b:1d:3d:32:
ad:81:53:b5:87:1e:d7:b4:9b:32:d7:de:eb:29:91:
bc:56:b5:2b:de:18:f0:13:34:8d:86:b5:95:0e:d5:
aa:18:fd:75:67:e4:5d:8b:a9:c1:3d:20:f0:41:55:
02:7c:ce:ca:1f:52:0e:d5:52:bc:ab:5c:e1:cd:85:
ee:cf:3c:94:c7:e7:65:e7:12:60:39:67:3b:ef:1d:
19:f9:60:39:bb:c2:ab:1a:91:3c:2b:ea:4b:8f:6a:
1f:38:e4:c5:d7:ce:0e:14:af:e9:f2:7b:e3:99:79:
57:79:c5:a4:98:0f:f9:15:d2:35:11:7a:f8:07:04:
c3:a7:47:f0:7c:18:71:e5:2e:d2:60:8b:a7:98:42:
fa:5b:64:05:8a:20:ec:68:6b:ff:52:34:4b:88:d6:
e5:53:61:c1:2c:9b:4b:db:18:3d:e5:1d:79:82:94:
93:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:20:7E:FE:67:BB:37:6E:ED:A6:DC:3B:2B:BC:EF:53:07:3C:DA:AC
X509v3 Authority Key Identifier:
keyid:BA:9E:FC:A8:6D:EA:70:D3:EE:90:18:16:78:C8:EB:30:E6:91:6D:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up78qG3qcNPukBgWeMjrMOaRbR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/75b838-4ece-4998-8ad8-17d31dee8e12/1/up78qG3qcNPukBgWeMjrMOaRbR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/75b838-4ece-4998-8ad8-17d31dee8e12/1/up78qG3qcNPukBgWeMjrMOaRbR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:ce:f7:35:ed:c0:ed:ea:01:84:4d:06:5a:18:29:d0:3e:c9:
32:29:bd:b2:85:fe:90:2f:68:0b:a1:be:2d:c0:4c:9d:08:2a:
00:0f:36:f0:7b:f6:47:e9:97:ce:d5:ae:7b:a8:5b:fe:4a:db:
aa:11:6a:5f:e5:71:94:9b:37:c2:97:fe:58:28:ba:d4:29:6d:
c4:c8:fe:55:92:a4:e6:72:ae:53:55:1e:bf:3b:20:cd:ec:eb:
00:82:17:23:79:8e:17:ad:28:6b:59:b5:8b:8a:6e:49:cb:e2:
4b:db:5b:1c:f4:7b:48:18:f1:00:ed:75:ba:6f:ed:bf:c5:e0:
8a:d0:bb:8d:c1:e1:a4:4b:dd:eb:3e:4b:24:b9:75:d5:1c:1a:
e5:a1:dd:3d:c5:85:2d:85:86:37:be:17:bb:f3:43:85:77:69:
6e:07:15:7a:58:31:20:d1:f5:d2:f4:1c:cc:dd:b4:ee:5d:de:
e3:80:8f:da:79:7a:74:87:1a:2e:7f:01:60:58:23:c6:2c:1f:
ce:d3:3a:6b:19:e1:f1:bc:9a:0e:c5:72:a2:6b:52:31:5a:ef:
33:3e:dc:a7:f9:60:c7:46:26:fe:ca:1b:ac:0d:64:c5:c4:1e:
5c:5c:78:cc:1c:71:73:80:3f:ba:6a:95:f7:75:a0:11:5d:9e:
b2:e4:77:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:22:44 2025 by rpki-client