Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/c46d1e-987d-4f65-b11b-2e2cd6435106/1/upfBVFbrYAQD7PuxbCDggWCUT48.mft
File: upfBVFbrYAQD7PuxbCDggWCUT48.mft (raw, json)
Hash identifier: XvbZNl6x1ETbUrQG2ih0z0l3SThla9qOMDSJIPoaLDA=
Subject key identifier: 55:EB:36:BD:50:90:1C:0D:0E:17:95:78:42:D7:38:CE:6A:82:C6:90
Authority key identifier: BA:97:C1:54:56:EB:60:04:03:EC:FB:B1:6C:20:E0:81:60:94:4F:8F
Certificate issuer: /CN=ba97c15456eb600403ecfbb16c20e08160944f8f
Certificate serial: 01976F62BE589CCA8ACEDDE42890A2AA8846
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/upfBVFbrYAQD7PuxbCDggWCUT48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/c46d1e-987d-4f65-b11b-2e2cd6435106/1/upfBVFbrYAQD7PuxbCDggWCUT48.mft
Manifest number: 1219
Signing time: Sat 14 Jun 2025 17:00:31 +0000
Manifest this update: Sat 14 Jun 2025 17:00:31 +0000
Manifest next update: Sun 15 Jun 2025 17:00:31 +0000
Files and hashes: 1: SIndVbkKUXy4BUQozeoniwpZDAY.roa (hash: w+S8wcJNHWfC84514ZDYZ2EFFwmdH9ulSWKDE7QHbmQ=)
2: upfBVFbrYAQD7PuxbCDggWCUT48.crl (hash: YYfcGTuCu0eTMO7q1/4JFZ9i1A2ntxmuEOD7RFWucDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/c46d1e-987d-4f65-b11b-2e2cd6435106/1/upfBVFbrYAQD7PuxbCDggWCUT48.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/c46d1e-987d-4f65-b11b-2e2cd6435106/1/upfBVFbrYAQD7PuxbCDggWCUT48.mft
rsync://rpki.ripe.net/repository/DEFAULT/upfBVFbrYAQD7PuxbCDggWCUT48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:62:be:58:9c:ca:8a:ce:dd:e4:28:90:a2:aa:88:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba97c15456eb600403ecfbb16c20e08160944f8f
Validity
Not Before: Jun 14 17:00:31 2025 GMT
Not After : Jun 15 17:00:31 2025 GMT
Subject: CN=55eb36bd50901c0d0e17957842d738ce6a82c690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:88:4e:cb:b1:13:d4:d8:84:a6:73:58:b9:4b:
be:1c:dd:5c:3d:4b:14:77:d8:b0:6f:48:ac:1b:43:
be:f8:b7:52:c3:a9:4d:ca:0a:9c:59:f6:4e:f7:69:
b5:88:96:c3:ed:65:7c:42:db:a7:71:c2:77:e6:2c:
9b:be:02:db:39:83:b9:6d:28:b2:6a:cb:cd:af:16:
53:18:cf:94:9b:83:ff:6e:58:10:fd:fd:ca:5b:73:
7d:59:73:c1:9e:ae:1b:a5:88:43:f0:c9:10:3d:b5:
99:70:bc:c1:44:6e:9a:2a:e5:60:86:b2:d9:73:b5:
df:fb:e8:fd:a8:2a:db:f2:32:d1:51:fa:5b:99:43:
2d:2e:8b:d4:71:9a:74:e0:0f:d3:7c:d2:e4:e3:99:
9f:18:fb:81:6c:02:8a:2f:9c:09:7a:22:76:47:bd:
fa:0a:5b:74:e6:ff:11:ea:2c:f4:f2:8a:8d:b3:5e:
b6:26:c5:61:15:a5:8c:dd:1f:39:00:0b:5c:2d:f7:
70:fb:26:5a:ad:84:9d:4e:8b:46:69:ec:f6:e2:ed:
fc:4a:f6:9b:c9:2c:93:bc:1e:62:0c:f0:f2:d3:29:
2c:42:da:13:ab:88:7f:7a:92:79:3a:5f:f6:f8:d5:
71:32:5f:ad:de:e7:69:a6:5f:eb:0c:01:c3:8f:08:
93:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:EB:36:BD:50:90:1C:0D:0E:17:95:78:42:D7:38:CE:6A:82:C6:90
X509v3 Authority Key Identifier:
keyid:BA:97:C1:54:56:EB:60:04:03:EC:FB:B1:6C:20:E0:81:60:94:4F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/upfBVFbrYAQD7PuxbCDggWCUT48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c46d1e-987d-4f65-b11b-2e2cd6435106/1/upfBVFbrYAQD7PuxbCDggWCUT48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c46d1e-987d-4f65-b11b-2e2cd6435106/1/upfBVFbrYAQD7PuxbCDggWCUT48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:ee:2c:fd:95:06:3e:46:ab:18:96:b5:44:5a:48:70:ff:eb:
01:88:98:ce:14:85:3d:e9:58:ba:09:50:dd:47:b8:38:c2:ad:
ee:bc:4c:2c:35:e4:f6:e4:15:b4:b8:13:e0:73:f8:69:b3:2d:
9f:a9:0a:a2:22:5c:5e:7d:75:e3:79:b4:73:38:86:97:a4:7e:
98:1c:43:d3:5e:ef:d2:d8:8c:26:71:e9:88:ed:80:14:aa:15:
5a:c1:0b:68:03:d6:cb:22:fd:90:30:90:b9:98:bd:23:cf:ef:
30:eb:e4:96:3f:57:4e:ee:0a:c0:c9:49:99:b7:9a:23:0f:5c:
de:81:06:c1:2f:64:a5:9e:da:15:ea:35:df:c0:d6:8e:03:dc:
53:67:22:52:fc:90:ad:f5:8a:ac:b9:cd:e9:aa:29:e4:75:f2:
48:4e:7b:7f:e1:32:d3:e0:be:72:aa:d1:2a:d4:9e:fd:1b:0e:
1e:b4:9a:63:a3:ea:11:e7:d8:f6:cb:08:0c:7b:bb:af:b5:b3:
87:4d:d2:d8:de:72:75:62:6d:63:0f:ca:ea:ca:f6:84:f2:78:
6e:fa:b4:18:e9:22:9c:a6:b0:dd:b3:82:d6:c7:ab:70:78:50:
ac:e1:44:42:ff:b2:12:3e:af:13:ee:d1:4b:a8:76:ac:89:64:
8b:30:99:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:13:42 2025 by rpki-client