Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.mft
File: UpylpuXWdCHz8s0hE4y3BwSFCVU.mft (raw, json)
Hash identifier: hMPSQbhtxliNKrd0gKKEHWFnTuvFWKXCAxHHWuTMuaQ=
Subject key identifier: FD:36:88:88:CA:9A:2A:20:48:54:0B:44:11:CB:48:D6:B8:60:A3:5A
Authority key identifier: 52:9C:A5:A6:E5:D6:74:21:F3:F2:CD:21:13:8C:B7:07:04:85:09:55
Certificate issuer: /CN=529ca5a6e5d67421f3f2cd21138cb70704850955
Certificate serial: 019A725C6392379D5EFC82F9AA242496324A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpylpuXWdCHz8s0hE4y3BwSFCVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.mft
Manifest number: 16B3
Signing time: Tue 11 Nov 2025 10:00:48 +0000
Manifest this update: Tue 11 Nov 2025 10:00:48 +0000
Manifest next update: Wed 12 Nov 2025 10:00:48 +0000
Files and hashes: 1: 5DYNtQhmHm5xId84-qYm__d0Jxg.roa (hash: M0kddqhlCcHa9Skioom20ixZlz/BFkuuxsQkLcWGHLA=)
2: UpylpuXWdCHz8s0hE4y3BwSFCVU.crl (hash: /OQwKNdUZR5Nx7Q2HxA0uixFtMVQKz9LOeiP8lD88oY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/UpylpuXWdCHz8s0hE4y3BwSFCVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:63:92:37:9d:5e:fc:82:f9:aa:24:24:96:32:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529ca5a6e5d67421f3f2cd21138cb70704850955
Validity
Not Before: Nov 11 10:00:48 2025 GMT
Not After : Nov 12 10:00:48 2025 GMT
Subject: CN=fd368888ca9a2a2048540b4411cb48d6b860a35a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:67:44:5f:b0:c8:a5:c4:d0:ee:41:d5:f6:04:
8f:89:0c:a2:8e:a4:2f:77:f8:18:16:80:51:fc:a2:
d4:9d:5a:bb:17:5c:16:3d:66:84:16:a4:f1:fc:f3:
3f:bc:f9:17:29:73:84:53:7e:a1:fb:26:f1:0e:05:
01:21:83:ff:18:81:5b:b0:89:0d:f9:c2:06:4a:57:
bd:0d:8d:1c:08:60:16:89:64:68:c4:6e:fd:9c:ef:
3b:b4:12:be:02:68:bf:ed:ac:ac:11:70:16:6a:43:
4b:8a:3f:12:28:4c:e5:a1:6a:06:d3:8e:c5:58:bf:
85:60:93:9e:8e:be:43:ee:01:98:0f:4c:bd:39:a5:
84:f8:21:31:d7:fe:79:74:8a:2a:38:69:d7:9a:68:
e9:e4:38:14:fe:c4:f1:1b:29:9e:66:f1:0b:12:f1:
40:df:8b:0f:df:69:71:31:c9:3f:8f:64:e9:d4:8a:
8c:e2:1d:c0:47:5d:42:fb:7e:36:03:4c:3d:a2:49:
02:99:ed:0d:8f:e7:3b:ab:a9:48:d6:ee:ec:8f:f9:
7c:13:a0:7c:8f:8b:b8:6a:0b:31:e4:69:6f:73:8d:
0a:0f:81:5d:fd:50:6b:9d:28:26:be:60:e5:f5:89:
8d:2e:ca:79:9c:9b:81:f8:08:97:73:38:a1:cf:7b:
cb:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:36:88:88:CA:9A:2A:20:48:54:0B:44:11:CB:48:D6:B8:60:A3:5A
X509v3 Authority Key Identifier:
keyid:52:9C:A5:A6:E5:D6:74:21:F3:F2:CD:21:13:8C:B7:07:04:85:09:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpylpuXWdCHz8s0hE4y3BwSFCVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:10:1e:d2:18:d4:f5:91:93:33:e6:00:27:86:ee:95:c7:a8:
b8:f9:27:62:4e:f7:b3:27:4d:4e:1c:38:e1:35:f4:43:f6:cd:
1f:38:1e:62:1f:49:e2:79:01:9b:ce:5d:40:91:87:49:3e:36:
18:1b:4c:5c:ba:b9:8d:57:bb:2a:46:47:78:62:f4:9a:d3:d1:
1c:05:e4:08:d1:b2:32:cd:2d:ee:1e:40:dc:0c:19:f5:00:20:
78:af:a5:44:f1:25:16:83:14:db:a0:0d:f4:10:d8:40:48:ef:
28:55:ab:36:9d:1e:4c:5b:3f:e0:85:07:96:46:22:78:ce:e2:
82:0f:41:3b:47:fd:4f:7f:04:76:eb:42:d0:46:cc:cd:95:16:
6b:23:ec:8b:f8:16:71:b0:2b:2f:d3:d7:95:b2:9e:63:17:a9:
1c:d2:06:a3:fe:5f:06:2b:69:08:aa:ff:75:67:3d:73:3f:ce:
b0:0c:23:15:e3:db:d1:1a:a7:6a:f3:34:36:59:ee:cc:25:4c:
3b:27:74:dd:04:32:90:4c:19:5f:ee:4c:f5:2c:64:b8:31:a3:
66:15:66:b7:2e:88:26:0e:c6:02:4c:3b:c9:a3:c9:8b:c2:39:
8b:aa:82:ac:dc:05:d6:4e:24:5d:ad:47:45:d6:d7:a5:c3:6c:
5e:49:c9:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:42 2025 by rpki-client