Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft
File: UpIxske_9ltMY0GQfs1eq6f5ypI.mft (raw, json)
Hash identifier: JXgF3r93ULmvQBZSxxgqWWkhBTxfCtNqW1axj5fa2T8=
Subject key identifier: 3B:A7:CB:C1:B9:DA:18:15:E2:86:46:4D:88:6B:17:40:5F:75:E7:91
Authority key identifier: 52:92:31:B2:47:BF:F6:5B:4C:63:41:90:7E:CD:5E:AB:A7:F9:CA:92
Certificate issuer: /CN=529231b247bff65b4c6341907ecd5eaba7f9ca92
Certificate serial: 019A7149E97323D1EFFCEE0BC8EC0A579728
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpIxske_9ltMY0GQfs1eq6f5ypI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 05:01:00 +0000
Manifest this update: Tue 11 Nov 2025 05:01:00 +0000
Manifest next update: Wed 12 Nov 2025 05:01:00 +0000
Files and hashes: 1: QNtVQ4uRD5YHVKeiIuOtvfCNd7w.roa (hash: h1eiwnIox6CJN2eOBBfQEHdpOKWR/C6Oxeaya2ntIbQ=)
2: UpIxske_9ltMY0GQfs1eq6f5ypI.crl (hash: HkH9iA4EeJkyohT+mbXX+UeN0PCJg/SJx+zC9Pzw6LQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UpIxske_9ltMY0GQfs1eq6f5ypI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:e9:73:23:d1:ef:fc:ee:0b:c8:ec:0a:57:97:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529231b247bff65b4c6341907ecd5eaba7f9ca92
Validity
Not Before: Nov 11 05:01:00 2025 GMT
Not After : Nov 12 05:01:00 2025 GMT
Subject: CN=3ba7cbc1b9da1815e286464d886b17405f75e791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d1:68:df:81:5f:6a:58:51:62:c7:89:63:39:
35:ab:0f:8e:cf:2a:34:22:fd:38:61:43:0d:a0:4c:
6b:f3:48:00:c0:8f:6a:8e:94:8f:d6:28:70:6a:23:
b0:69:54:87:7a:a3:b6:cd:f5:ae:21:7f:f9:66:2c:
ca:95:74:4f:4f:49:43:2f:38:aa:94:cf:42:f8:86:
dc:de:74:8f:70:16:bb:de:49:93:da:53:23:69:3c:
b8:b3:c9:b0:31:fd:79:4c:3e:fd:f4:02:85:41:60:
fd:b2:d8:2b:af:41:a0:79:97:df:33:af:02:de:b2:
26:1a:3c:d9:25:f3:52:9c:4e:78:c5:aa:81:06:47:
27:e2:65:b2:1a:f9:87:a1:44:c1:3d:e4:2e:d4:48:
b4:db:cd:f2:f7:08:35:a7:11:98:8b:cf:6a:37:16:
b5:b5:06:89:db:6d:b2:02:34:7d:28:31:1c:92:e8:
d2:7a:47:49:bc:12:9e:c0:17:b5:da:30:f1:6d:14:
57:22:7f:3c:0f:21:9b:37:b5:c7:86:71:8b:80:b2:
2e:fb:ba:e8:fe:05:f0:4c:3a:ae:7f:64:1b:74:4c:
16:e5:ac:dd:08:d6:66:7f:2a:e2:4c:41:41:71:5d:
c4:75:5f:ab:96:9c:70:52:9a:52:c3:3d:9a:5e:1b:
9e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A7:CB:C1:B9:DA:18:15:E2:86:46:4D:88:6B:17:40:5F:75:E7:91
X509v3 Authority Key Identifier:
keyid:52:92:31:B2:47:BF:F6:5B:4C:63:41:90:7E:CD:5E:AB:A7:F9:CA:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpIxske_9ltMY0GQfs1eq6f5ypI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:0b:3b:71:78:54:6a:cd:39:7d:48:6d:6d:00:35:a2:e3:ae:
af:45:8b:72:1e:3b:16:e5:bb:b4:f7:89:d2:27:d4:60:04:3e:
31:43:ae:d8:bd:b3:69:29:5d:7b:ce:e2:9a:ef:ae:7e:a9:97:
56:a5:58:86:c4:32:fb:89:68:9c:88:9a:fb:1e:f0:ea:b6:a6:
ad:e3:19:11:86:e5:b5:71:a0:e6:ef:58:68:cc:f2:4d:b9:75:
a6:b3:b1:e7:df:be:ff:bf:be:3c:b7:ad:0d:00:a1:23:f6:e5:
95:38:06:1c:92:41:fe:8f:6b:e2:5b:65:ee:cc:6c:c5:b5:8d:
11:df:f1:d4:c0:68:21:c7:51:c4:d5:19:b7:c2:14:c2:4e:10:
71:68:9a:62:d0:31:df:4e:0d:d8:e7:ec:8d:31:27:60:6b:a4:
dd:74:04:a6:04:10:f6:10:35:51:6f:44:da:09:4d:50:4a:fc:
fc:7e:37:b3:f1:25:31:ff:ff:9e:7d:43:1e:16:fd:ab:37:79:
c0:08:0d:76:ed:4a:66:54:81:08:54:12:3c:73:45:82:59:8b:
2a:d9:1f:70:9a:57:37:f1:b1:76:eb:4d:2a:fe:7c:b0:b0:fd:
3b:6c:d7:2b:58:0c:1d:c8:e4:97:5f:53:da:c3:13:80:53:f2:
b0:00:61:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:05 2025 by rpki-client