Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/c46d1e-987d-4f65-b11b-2e2cd6435106/1/upfBVFbrYAQD7PuxbCDggWCUT48.mft
File: upfBVFbrYAQD7PuxbCDggWCUT48.mft (raw, json)
Hash identifier: ee23CMd3V4NJez1ZTKz8KgZEiTs6X3ee0MreFsAFiE0=
Subject key identifier: 79:C4:63:D3:C4:AF:F4:41:0B:DC:AD:58:75:04:21:4A:3F:2A:38:D6
Authority key identifier: BA:97:C1:54:56:EB:60:04:03:EC:FB:B1:6C:20:E0:81:60:94:4F:8F
Certificate issuer: /CN=ba97c15456eb600403ecfbb16c20e08160944f8f
Certificate serial: 0198819E571987C0E688EAD9D808EC204221
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/upfBVFbrYAQD7PuxbCDggWCUT48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/c46d1e-987d-4f65-b11b-2e2cd6435106/1/upfBVFbrYAQD7PuxbCDggWCUT48.mft
Manifest number: 12A7
Signing time: Wed 06 Aug 2025 23:01:34 +0000
Manifest this update: Wed 06 Aug 2025 23:01:34 +0000
Manifest next update: Thu 07 Aug 2025 23:01:34 +0000
Files and hashes: 1: SIndVbkKUXy4BUQozeoniwpZDAY.roa (hash: w+S8wcJNHWfC84514ZDYZ2EFFwmdH9ulSWKDE7QHbmQ=)
2: upfBVFbrYAQD7PuxbCDggWCUT48.crl (hash: o08e84j226LzFKRzZSyjjQNyd6JfjXUYtIOWIxx8kC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/c46d1e-987d-4f65-b11b-2e2cd6435106/1/upfBVFbrYAQD7PuxbCDggWCUT48.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/c46d1e-987d-4f65-b11b-2e2cd6435106/1/upfBVFbrYAQD7PuxbCDggWCUT48.mft
rsync://rpki.ripe.net/repository/DEFAULT/upfBVFbrYAQD7PuxbCDggWCUT48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:9e:57:19:87:c0:e6:88:ea:d9:d8:08:ec:20:42:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba97c15456eb600403ecfbb16c20e08160944f8f
Validity
Not Before: Aug 6 23:01:34 2025 GMT
Not After : Aug 7 23:01:34 2025 GMT
Subject: CN=79c463d3c4aff4410bdcad587504214a3f2a38d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3f:fc:5c:c1:04:e9:66:0b:6d:16:a2:52:90:
e6:ac:80:a1:e9:35:bc:b1:49:e6:bd:98:a0:bb:0f:
87:a6:6f:8f:a5:9f:87:5e:e8:5d:c0:38:e8:3e:52:
88:99:7d:64:32:61:2f:e9:4b:b7:44:99:dc:2b:a9:
6f:81:0b:bc:87:d8:5b:88:52:57:fd:21:ae:2b:bb:
d8:67:d8:b7:a9:1f:52:c3:98:87:6b:8a:cd:bc:07:
49:01:ec:80:5f:8a:c5:29:f8:8a:31:c0:13:35:9f:
00:d8:2f:1e:92:71:e3:67:45:eb:01:1f:40:16:a3:
f0:0d:a4:d7:dd:91:4b:c5:4a:75:f4:f0:23:ca:b2:
9e:34:8b:ee:dc:0f:37:14:40:7d:ab:44:37:ee:43:
2b:b8:41:f5:8f:8b:5c:5b:bc:78:23:8b:7a:f3:25:
bf:71:d2:2f:15:b0:3c:30:0d:f2:9b:40:83:55:54:
d1:ba:60:16:a2:6f:76:dc:03:73:33:b3:c7:56:e9:
74:36:ef:98:35:1d:30:7b:a4:5d:53:b1:d8:3a:da:
90:42:d1:fb:6f:85:67:4e:61:bc:1b:5e:84:cd:c8:
e7:a5:b1:6c:1c:19:ac:bf:de:ee:51:11:82:2a:c8:
9f:40:22:a7:7e:5e:a4:20:1c:d5:5f:c1:1e:04:15:
b9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:C4:63:D3:C4:AF:F4:41:0B:DC:AD:58:75:04:21:4A:3F:2A:38:D6
X509v3 Authority Key Identifier:
keyid:BA:97:C1:54:56:EB:60:04:03:EC:FB:B1:6C:20:E0:81:60:94:4F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/upfBVFbrYAQD7PuxbCDggWCUT48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c46d1e-987d-4f65-b11b-2e2cd6435106/1/upfBVFbrYAQD7PuxbCDggWCUT48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c46d1e-987d-4f65-b11b-2e2cd6435106/1/upfBVFbrYAQD7PuxbCDggWCUT48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:e9:4e:19:52:04:ed:7d:b0:c2:3e:67:16:fd:9e:da:6b:4d:
5c:23:0b:30:88:2f:ab:9a:4c:13:5a:c4:c3:9f:3a:39:06:69:
74:b0:96:05:2f:2a:b7:9d:79:b3:31:80:77:c6:ae:8c:94:63:
84:6f:97:94:f9:0c:9d:33:03:b1:90:40:5a:8d:13:09:01:09:
55:34:36:53:62:04:77:55:d9:63:35:22:31:9a:62:77:3c:82:
b2:f0:fd:5e:50:d5:6d:99:3d:ce:3c:08:5a:aa:cb:53:25:d1:
ef:96:4f:41:4b:95:cd:02:a3:e5:99:5a:27:b4:13:6e:78:37:
c3:bc:08:8e:fa:cd:e8:db:2d:78:56:11:df:fa:4a:8c:76:90:
49:7e:6e:7c:0f:c9:08:e8:57:db:7c:53:85:89:95:d6:8c:0a:
b8:40:c3:d8:5e:3e:72:53:35:91:8d:c1:77:c9:a9:fe:27:a1:
bb:a2:24:c9:ff:78:49:4b:70:ce:1b:66:2e:cd:91:01:0e:f5:
02:c7:07:9d:d1:8b:b4:8b:5c:bb:60:e0:34:b7:fc:5f:f2:47:
6b:a2:58:89:c3:60:30:66:1a:6f:ec:f5:b0:26:37:c8:39:f8:
7e:a6:d8:48:0e:44:1e:05:b1:3c:e1:3f:8e:19:73:76:94:e9:
54:13:85:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiBnlcZh8DmiOrZ2AjsIEIhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhOTdjMTU0NTZlYjYwMDQwM2VjZmJiMTZjMjBlMDgxNjA5
NDRmOGYwHhcNMjUwODA2MjMwMTM0WhcNMjUwODA3MjMwMTM0WjAzMTEwLwYDVQQD
Eyg3OWM0NjNkM2M0YWZmNDQxMGJkY2FkNTg3NTA0MjE0YTNmMmEzOGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvj/8XMEE6WYLbRaiUpDmrICh6TW8
sUnmvZiguw+Hpm+PpZ+HXuhdwDjoPlKImX1kMmEv6Uu3RJncK6lvgQu8h9hbiFJX
/SGuK7vYZ9i3qR9Sw5iHa4rNvAdJAeyAX4rFKfiKMcATNZ8A2C8eknHjZ0XrAR9A
FqPwDaTX3ZFLxUp19PAjyrKeNIvu3A83FEB9q0Q37kMruEH1j4tcW7x4I4t68yW/
cdIvFbA8MA3ym0CDVVTRumAWom923ANzM7PHVul0Nu+YNR0we6RdU7HYOtqQQtH7
b4VnTmG8G16EzcjnpbFsHBmsv97uURGCKsifQCKnfl6kIBzVX8EeBBW5rwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHnEY9PEr/RBC9ytWHUEIUo/KjjWMB8GA1UdIwQY
MBaAFLqXwVRW62AEA+z7sWwg4IFglE+PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXBmQlZGYnJZQVFEN1B1eGJDRGdnV0NVVDQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9jNDZkMWUtOTg3ZC00ZjY1LWIxMWIt
MmUyY2Q2NDM1MTA2LzEvdXBmQlZGYnJZQVFEN1B1eGJDRGdnV0NVVDQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9jNDZkMWUtOTg3ZC00ZjY1LWIxMWItMmUyY2Q2NDM1MTA2
LzEvdXBmQlZGYnJZQVFEN1B1eGJDRGdnV0NVVDQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh+lOGVIE
7X2wwj5nFv2e2mtNXCMLMIgvq5pME1rEw586OQZpdLCWBS8qt515szGAd8aujJRj
hG+XlPkMnTMDsZBAWo0TCQEJVTQ2U2IEd1XZYzUiMZpidzyCsvD9XlDVbZk9zjwI
WqrLUyXR75ZPQUuVzQKj5ZlaJ7QTbng3w7wIjvrN6NsteFYR3/pKjHaQSX5ufA/J
COhX23xThYmV1owKuEDD2F4+clM1kY3Bd8mp/iehu6Ikyf94SUtwzhtmLs2RAQ71
AscHndGLtItcu2DgNLf8X/JHa6JYicNgMGYab+z1sCY3yDn4fqbYSA5EHgWxPOE/
jhlzdpTpVBOFEg==
-----END CERTIFICATE-----
Generated at Thu Aug 7 03:30:43 2025 by rpki-client