Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.mft
File: UpylpuXWdCHz8s0hE4y3BwSFCVU.mft (raw, json)
Hash identifier: wYSz5wOSC3tpqzz6opFcrfwJpTKX6+AvV3pD9IhUCEY=
Subject key identifier: 9A:34:3A:92:5F:58:1E:10:A4:35:35:CF:54:A3:3B:51:42:ED:C1:4E
Authority key identifier: 52:9C:A5:A6:E5:D6:74:21:F3:F2:CD:21:13:8C:B7:07:04:85:09:55
Certificate issuer: /CN=529ca5a6e5d67421f3f2cd21138cb70704850955
Certificate serial: 01992256060C1072960CA9E4434D96F8F3D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpylpuXWdCHz8s0hE4y3BwSFCVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.mft
Manifest number: 1605
Signing time: Sun 07 Sep 2025 04:01:26 +0000
Manifest this update: Sun 07 Sep 2025 04:01:26 +0000
Manifest next update: Mon 08 Sep 2025 04:01:26 +0000
Files and hashes: 1: 5DYNtQhmHm5xId84-qYm__d0Jxg.roa (hash: M0kddqhlCcHa9Skioom20ixZlz/BFkuuxsQkLcWGHLA=)
2: UpylpuXWdCHz8s0hE4y3BwSFCVU.crl (hash: kw5GhhhVtQKY+VarFQZnv9wEFJzcTQGqv5gf/j0nKnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/UpylpuXWdCHz8s0hE4y3BwSFCVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:56:06:0c:10:72:96:0c:a9:e4:43:4d:96:f8:f3:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529ca5a6e5d67421f3f2cd21138cb70704850955
Validity
Not Before: Sep 7 04:01:26 2025 GMT
Not After : Sep 8 04:01:26 2025 GMT
Subject: CN=9a343a925f581e10a43535cf54a33b5142edc14e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b2:70:81:06:00:40:71:d5:2b:86:d8:9b:4d:
69:39:7f:06:63:f4:52:74:cc:68:84:67:1b:22:79:
01:70:41:c2:14:e2:8b:d6:51:ff:87:9e:ed:84:03:
8c:6d:8d:8b:f6:a3:82:e9:e2:07:ec:d0:cd:77:e3:
c6:96:46:c6:1a:ac:de:26:2a:ea:b4:af:4c:03:e2:
f6:4f:c4:f3:c5:2f:8e:99:92:e9:f4:68:08:2d:06:
29:9b:38:c5:f1:c5:2c:f5:c1:c5:c1:a5:31:6f:33:
8b:69:3a:57:49:40:73:a7:2e:08:b6:d4:cf:53:1a:
f0:bc:69:b6:70:e3:52:3c:12:30:72:ff:0b:80:cb:
27:97:1d:ee:37:e4:61:fb:60:2a:1f:f7:e0:38:d5:
c3:d1:32:f0:15:a2:b6:c6:18:b5:9b:07:77:35:77:
bb:5e:06:a6:48:04:8a:96:b7:96:3d:de:85:02:89:
c3:f2:bd:b3:dc:d8:a9:05:96:e2:bd:a5:42:a9:dc:
7d:47:ac:3c:33:9e:b8:0a:b2:8e:db:62:89:55:12:
d8:92:24:b4:a0:f8:e0:fd:cf:e2:63:02:8d:80:57:
67:ea:98:fe:76:2a:a1:ce:01:26:7c:2d:d6:24:b6:
ec:9b:73:5e:2a:67:70:23:ce:e4:e5:5f:23:04:cb:
e0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:34:3A:92:5F:58:1E:10:A4:35:35:CF:54:A3:3B:51:42:ED:C1:4E
X509v3 Authority Key Identifier:
keyid:52:9C:A5:A6:E5:D6:74:21:F3:F2:CD:21:13:8C:B7:07:04:85:09:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpylpuXWdCHz8s0hE4y3BwSFCVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:45:a4:ff:9b:1b:90:b3:69:a3:f8:88:69:63:f2:bb:49:8c:
04:19:40:5f:d3:57:fb:cf:e7:00:cf:0e:de:48:5d:ab:d2:4f:
aa:07:41:43:a8:16:64:28:22:42:da:33:0e:7b:4f:2d:20:f8:
e5:1c:c2:0f:f2:fa:68:97:8a:47:bc:3b:f7:03:12:84:8c:e1:
f6:be:ca:db:1b:6c:4a:58:98:cc:39:d3:3f:4e:2c:66:03:01:
2b:09:bd:98:e6:56:ae:e9:ea:8f:f9:0a:4d:98:53:08:78:28:
b3:87:f9:75:73:e9:0f:8c:03:89:da:75:2c:6d:b1:4e:9a:47:
66:91:bf:86:d6:e8:26:9e:95:69:37:d6:3b:77:f3:d1:92:32:
6c:42:8d:83:07:da:18:60:a9:9e:c3:dd:ea:56:e1:6a:5f:0c:
02:08:fe:4d:cb:26:aa:89:f3:8f:2d:58:a5:ce:d9:fc:8c:e2:
ad:c3:de:1b:d7:b3:d0:ee:e0:9b:8e:04:c1:f6:56:a6:f6:00:
b8:84:be:2f:71:54:07:fb:04:b6:30:75:ec:eb:4b:8d:4f:89:
6e:96:5a:14:16:d2:5f:09:d7:48:f9:b6:f0:37:c1:49:4c:29:
2e:4f:36:13:61:3b:c6:0c:9d:8b:26:46:5d:80:56:e6:fe:10:
70:b1:70:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:25:16 2025 by rpki-client