Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.mft
File: Up-6tRcaXLIvbFTxCzostttRcj4.mft (raw, json)
Hash identifier: fpC/Pe9AJVOW2ViNOZlC2ft1kHDNZ6DN7uSwg54to6Y=
Subject key identifier: 47:9E:40:DC:E9:F6:92:A3:66:E5:05:7F:8D:36:8A:E5:EC:6B:AE:7C
Authority key identifier: 52:9F:BA:B5:17:1A:5C:B2:2F:6C:54:F1:0B:3A:2C:B6:DB:51:72:3E
Certificate issuer: /CN=529fbab5171a5cb22f6c54f10b3a2cb6db51723e
Certificate serial: 019746D48E6C3B3E124712777A9396F09101
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Up-6tRcaXLIvbFTxCzostttRcj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.mft
Manifest number: 0FF0
Signing time: Fri 06 Jun 2025 20:00:24 +0000
Manifest this update: Fri 06 Jun 2025 20:00:24 +0000
Manifest next update: Sat 07 Jun 2025 20:00:24 +0000
Files and hashes: 1: FrmVEYuDa9xtluHCEQ99gg4ezxk.roa (hash: ROrbhIKSviaPzDwOSSegQp+fGjZAnP/YBP5hACLrt+g=)
2: Up-6tRcaXLIvbFTxCzostttRcj4.crl (hash: PG3umiKht+IWaGaBnJGIDmJnC+MUJ1ndn+ZsSER67ks=)
3: qi3rhjz0p_JIDWgNBHnC01nOTzc.roa (hash: sI4mLt9OaWWXoU75bYS+ZomsMcCTUVq/R9FP0uAoyas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Up-6tRcaXLIvbFTxCzostttRcj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:d4:8e:6c:3b:3e:12:47:12:77:7a:93:96:f0:91:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529fbab5171a5cb22f6c54f10b3a2cb6db51723e
Validity
Not Before: Jun 6 20:00:24 2025 GMT
Not After : Jun 7 20:00:24 2025 GMT
Subject: CN=479e40dce9f692a366e5057f8d368ae5ec6bae7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a1:59:49:de:03:7f:ac:df:27:05:c1:78:63:
e9:6e:7a:af:c1:04:f1:ab:7e:31:7d:fa:a5:68:f3:
41:f1:35:c0:e3:9f:a0:04:3c:af:28:b2:5a:1e:70:
f9:9d:50:e2:6a:78:20:59:20:8b:c5:27:f1:27:42:
97:62:65:32:69:68:c4:20:8d:5d:b5:c0:dd:1e:87:
57:d4:a4:e5:cd:6c:2c:ac:eb:ed:19:1f:43:67:e6:
e2:0a:2a:e3:cb:42:e1:7e:10:43:4c:bb:55:48:84:
b5:a1:64:ce:64:ee:2e:2b:a2:a7:3e:41:c3:b8:8a:
af:6b:cc:e4:91:bb:c1:57:11:eb:30:6a:a3:da:a3:
e2:46:a0:32:a8:74:39:56:a0:03:bf:a3:df:fe:78:
f5:eb:ea:49:72:12:e7:f6:f3:6b:f5:be:a8:d8:e0:
4c:c5:36:73:9c:a0:93:69:0b:53:d0:24:0a:84:40:
24:d3:3e:eb:2c:4a:9c:b6:fd:4f:00:e6:83:6b:ac:
62:3e:6b:96:33:32:7f:51:f5:49:f6:47:25:6e:f1:
d9:e4:28:36:90:9e:36:cd:1d:bb:77:66:c9:5e:64:
2d:59:d1:74:d7:51:a3:bd:0b:12:72:7a:58:d2:f5:
31:ac:df:85:ec:00:1c:f8:e3:43:90:39:d5:05:de:
6d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:9E:40:DC:E9:F6:92:A3:66:E5:05:7F:8D:36:8A:E5:EC:6B:AE:7C
X509v3 Authority Key Identifier:
keyid:52:9F:BA:B5:17:1A:5C:B2:2F:6C:54:F1:0B:3A:2C:B6:DB:51:72:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Up-6tRcaXLIvbFTxCzostttRcj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:d0:ad:e9:69:ef:75:dd:a3:28:49:aa:37:76:9b:48:d6:2d:
22:f3:41:e8:40:e6:7c:a2:16:62:d9:4e:c5:90:d1:5b:ac:b0:
3f:43:1c:cd:d5:bc:f2:5a:ed:bf:8c:3a:9d:81:1f:a2:0e:ae:
b8:42:2b:90:1b:65:d4:e9:c6:1c:57:a2:44:31:63:b0:e0:3e:
3f:a2:2f:19:40:2f:25:0d:5b:fa:4c:71:95:3b:d7:14:1a:0e:
72:84:49:ed:f6:f7:23:91:44:ab:8e:36:1d:64:f5:c7:31:cc:
52:d7:9d:6a:fa:96:cb:fe:7b:26:9f:b3:6a:d5:02:9f:a8:e5:
3d:40:4e:d3:6d:ae:c1:43:59:3f:1c:fa:38:bf:dc:4d:bc:21:
bd:41:56:8d:18:3f:89:05:e5:91:a5:aa:18:f0:f2:11:f4:d3:
1e:16:36:86:f7:fd:4a:0f:a1:87:cf:63:f0:39:7c:94:13:d4:
59:78:f7:d7:c5:de:36:dd:9f:fc:1c:97:0b:ef:27:e5:b4:26:
27:da:28:6b:e5:a2:50:13:c0:f4:52:2e:83:4b:a5:50:7b:e2:
c7:f3:2d:80:9c:67:11:ad:a3:62:99:69:a7:04:36:c4:1b:05:
c6:bd:3e:26:fd:40:9c:0f:8b:ab:99:fa:ce:4f:d8:e0:7d:2a:
da:72:4b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:40:57 2025 by rpki-client