Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.mft
File: Up-6tRcaXLIvbFTxCzostttRcj4.mft (raw, json)
Hash identifier: VriFtqycSYBqBCJDpw2RXRMJPjo3Ip+vTpItIY2ybb0=
Subject key identifier: 6E:66:14:54:76:16:28:CC:B5:9B:A2:E4:C1:6E:A2:20:D5:F4:E2:0D
Authority key identifier: 52:9F:BA:B5:17:1A:5C:B2:2F:6C:54:F1:0B:3A:2C:B6:DB:51:72:3E
Certificate issuer: /CN=529fbab5171a5cb22f6c54f10b3a2cb6db51723e
Certificate serial: 019A71EE6C8D5889B5296915A7B8B8215BE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Up-6tRcaXLIvbFTxCzostttRcj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.mft
Manifest number: 1194
Signing time: Tue 11 Nov 2025 08:00:41 +0000
Manifest this update: Tue 11 Nov 2025 08:00:41 +0000
Manifest next update: Wed 12 Nov 2025 08:00:41 +0000
Files and hashes: 1: FrmVEYuDa9xtluHCEQ99gg4ezxk.roa (hash: ROrbhIKSviaPzDwOSSegQp+fGjZAnP/YBP5hACLrt+g=)
2: Up-6tRcaXLIvbFTxCzostttRcj4.crl (hash: JoaZLpGmtZhJfMKUpgpCrpgiktV+WokCTIMGTeBk85I=)
3: qi3rhjz0p_JIDWgNBHnC01nOTzc.roa (hash: sI4mLt9OaWWXoU75bYS+ZomsMcCTUVq/R9FP0uAoyas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Up-6tRcaXLIvbFTxCzostttRcj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:6c:8d:58:89:b5:29:69:15:a7:b8:b8:21:5b:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529fbab5171a5cb22f6c54f10b3a2cb6db51723e
Validity
Not Before: Nov 11 08:00:41 2025 GMT
Not After : Nov 12 08:00:41 2025 GMT
Subject: CN=6e661454761628ccb59ba2e4c16ea220d5f4e20d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f3:29:34:97:6d:cf:ce:4b:c2:8e:bb:14:00:
0c:96:39:ee:a4:e6:c7:e8:72:57:67:12:a1:04:f4:
36:3b:3b:84:c3:d7:78:2b:69:d7:82:d7:bd:f2:24:
38:59:11:41:49:f7:56:28:e7:6c:64:b6:82:46:93:
52:3b:7f:44:c3:b6:5b:57:32:f6:a7:15:b7:74:e6:
4e:65:d1:c8:29:ad:e4:1e:21:ad:09:f2:38:c3:6d:
eb:9e:60:8d:19:e5:a1:3f:e3:63:f5:90:b5:c4:e1:
c5:36:20:66:c0:52:62:6b:a1:c0:fc:1c:a3:c6:87:
fe:b2:9b:ff:87:49:66:dc:e0:05:90:91:9e:b6:2c:
62:23:47:3f:6a:2e:07:b7:39:63:00:45:4f:50:40:
38:87:dd:4c:5f:f9:76:fd:ae:22:9b:e0:62:ae:26:
65:e0:14:4f:40:6a:91:03:95:03:6c:1e:85:7c:5c:
a9:b2:16:41:48:4e:30:a7:13:51:d9:e9:8d:54:9f:
39:2e:60:d9:e4:17:77:19:c4:2a:73:42:38:8b:6b:
31:39:c4:fa:ce:aa:3f:e1:7f:66:82:ab:b8:cd:82:
2b:18:cf:76:0c:5a:89:81:97:6e:9b:db:3d:86:2d:
eb:b9:66:55:c3:40:aa:4c:49:1b:2d:ff:57:d9:ed:
ae:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:66:14:54:76:16:28:CC:B5:9B:A2:E4:C1:6E:A2:20:D5:F4:E2:0D
X509v3 Authority Key Identifier:
keyid:52:9F:BA:B5:17:1A:5C:B2:2F:6C:54:F1:0B:3A:2C:B6:DB:51:72:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Up-6tRcaXLIvbFTxCzostttRcj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:4f:2d:b7:2b:5e:89:ec:2b:ae:e4:6b:10:44:f7:5e:c1:ac:
3e:91:79:e1:26:48:08:bd:6c:0c:92:2a:ef:11:19:4e:fd:0c:
2a:2f:43:b2:b3:c8:96:0c:32:58:46:6f:a9:e1:c1:75:0c:84:
7b:37:3a:a2:eb:58:99:19:4f:59:6a:a9:fe:a3:b7:25:26:e9:
19:49:1f:9e:f6:5f:d0:d8:b8:af:0d:e3:df:94:1a:a1:e0:41:
e8:a1:cd:26:fc:df:06:ed:d1:75:a8:8c:43:dd:ec:4c:66:70:
42:41:d5:9b:d1:14:a3:06:e2:a1:5a:cc:ec:fc:d3:a7:48:f5:
18:b2:4f:c1:3b:81:3f:0f:52:53:90:70:8d:cb:31:d1:5f:b9:
7e:fe:3b:f6:5a:cd:a7:46:1e:1f:34:26:46:1a:79:20:cc:27:
17:6c:72:dd:ed:15:20:57:6f:e2:6c:b8:56:83:f6:23:76:c2:
88:22:94:b8:9b:e5:53:92:4c:94:44:b9:40:58:6f:86:25:f6:
cc:2a:1c:19:66:0c:66:f8:62:0f:80:57:29:c3:81:fc:0d:6f:
a0:6c:98:2d:e3:cb:c0:54:8d:72:e7:82:e1:46:2c:85:e5:66:
f8:72:a5:00:8e:54:3e:78:c0:b2:11:f2:5a:e9:8d:f7:a4:d9:
ba:ae:2f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:40:44 2025 by rpki-client