Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/c46d1e-987d-4f65-b11b-2e2cd6435106/1/upfBVFbrYAQD7PuxbCDggWCUT48.mft
File: upfBVFbrYAQD7PuxbCDggWCUT48.mft (raw, json)
Hash identifier: AFse9LyxDNLRQUQvf7g0bgc8yj0nqRAvdVEs+P5Fj2w=
Subject key identifier: 41:70:D8:90:C2:AB:7C:6A:8B:D8:36:89:9C:8B:6F:77:5F:62:E1:E4
Authority key identifier: BA:97:C1:54:56:EB:60:04:03:EC:FB:B1:6C:20:E0:81:60:94:4F:8F
Certificate issuer: /CN=ba97c15456eb600403ecfbb16c20e08160944f8f
Certificate serial: 019A4D3D389D0BE13C5BEA1606DE4085F0E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/upfBVFbrYAQD7PuxbCDggWCUT48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/c46d1e-987d-4f65-b11b-2e2cd6435106/1/upfBVFbrYAQD7PuxbCDggWCUT48.mft
Manifest number: 1395
Signing time: Tue 04 Nov 2025 05:00:49 +0000
Manifest this update: Tue 04 Nov 2025 05:00:49 +0000
Manifest next update: Wed 05 Nov 2025 05:00:49 +0000
Files and hashes: 1: SIndVbkKUXy4BUQozeoniwpZDAY.roa (hash: w+S8wcJNHWfC84514ZDYZ2EFFwmdH9ulSWKDE7QHbmQ=)
2: upfBVFbrYAQD7PuxbCDggWCUT48.crl (hash: lo/p9IpxpGwKNUguE8RTgMqm/hqymfarTkU1pLJmNyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/c46d1e-987d-4f65-b11b-2e2cd6435106/1/upfBVFbrYAQD7PuxbCDggWCUT48.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/c46d1e-987d-4f65-b11b-2e2cd6435106/1/upfBVFbrYAQD7PuxbCDggWCUT48.mft
rsync://rpki.ripe.net/repository/DEFAULT/upfBVFbrYAQD7PuxbCDggWCUT48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:38:9d:0b:e1:3c:5b:ea:16:06:de:40:85:f0:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba97c15456eb600403ecfbb16c20e08160944f8f
Validity
Not Before: Nov 4 05:00:49 2025 GMT
Not After : Nov 5 05:00:49 2025 GMT
Subject: CN=4170d890c2ab7c6a8bd836899c8b6f775f62e1e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f3:45:ca:2c:f9:2f:f9:93:52:19:cc:5f:b1:
62:e6:4b:d2:c6:2e:0e:25:52:68:d4:12:df:39:5e:
21:d2:38:33:11:f9:ac:46:17:30:97:a5:cd:3b:77:
eb:50:2c:ca:0d:cb:14:ca:6e:fc:17:2b:01:71:95:
e8:15:26:17:8a:10:4e:4f:93:68:8b:4b:ef:2b:bd:
ae:47:7f:33:d3:4f:49:26:a2:bc:fe:49:1c:af:cb:
fa:b0:05:f7:59:f8:43:60:02:ee:07:61:23:f0:d4:
72:fe:ff:46:aa:5a:ff:d3:ae:32:d5:91:e0:94:77:
23:67:52:38:a5:2c:27:c3:7a:b9:58:8d:f1:58:db:
20:5d:37:1e:58:0d:62:0b:7e:14:7e:6b:9f:4c:0f:
54:f8:67:4e:f0:6a:c2:24:18:7c:bf:77:01:c9:3a:
09:45:a2:ee:03:92:de:3e:c8:bd:8b:6a:b7:76:4f:
3d:48:5c:31:ca:08:ca:fe:f4:39:a8:46:4e:f8:a9:
49:f0:c4:0d:46:2c:b8:d9:c0:25:f8:81:b1:dc:c8:
18:24:56:e8:8a:42:12:a3:fc:40:9a:71:c2:ce:14:
e4:2f:d3:6a:8b:cc:a1:b9:a1:49:4f:3e:6f:d0:e2:
7b:80:8b:20:e8:bf:b2:bb:06:3a:d9:d1:ed:84:84:
d3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:70:D8:90:C2:AB:7C:6A:8B:D8:36:89:9C:8B:6F:77:5F:62:E1:E4
X509v3 Authority Key Identifier:
keyid:BA:97:C1:54:56:EB:60:04:03:EC:FB:B1:6C:20:E0:81:60:94:4F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/upfBVFbrYAQD7PuxbCDggWCUT48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c46d1e-987d-4f65-b11b-2e2cd6435106/1/upfBVFbrYAQD7PuxbCDggWCUT48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c46d1e-987d-4f65-b11b-2e2cd6435106/1/upfBVFbrYAQD7PuxbCDggWCUT48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:66:b7:17:1d:a7:e3:06:df:89:be:31:f7:77:8d:56:dd:01:
ed:e0:6c:27:de:b9:84:91:0c:9f:bf:b5:77:29:35:45:fa:f7:
32:49:bb:09:a1:97:02:fb:5b:e4:6d:d4:af:54:cf:4f:cd:0b:
8b:52:12:11:54:43:c6:04:dd:4d:95:a4:6e:b3:4b:ea:56:07:
14:67:09:37:60:c7:1f:5c:da:5a:46:ad:79:e2:63:e4:75:ef:
9b:b0:62:01:da:07:37:b7:4b:f6:53:ee:ed:a3:8a:89:9c:d6:
31:24:36:c7:fd:4c:5e:47:63:ef:bb:e4:0f:f4:31:1c:9c:d7:
18:ba:e3:af:1e:e4:f6:27:d7:f5:64:90:42:c3:19:82:a1:53:
5a:c0:de:e4:91:a7:50:b8:f0:c2:2a:af:c4:e4:52:ad:2c:1f:
bd:56:e4:c0:74:e6:84:f1:b1:4a:18:e0:2c:b1:13:6b:86:86:
48:6d:c3:e1:75:e6:34:43:6e:34:2f:65:26:f6:88:e1:f1:48:
56:dd:e7:b7:e5:99:c3:38:ff:7a:7d:09:b9:22:88:74:e2:88:
2d:5f:8a:2c:5f:c1:59:92:a0:05:3c:ff:7b:40:d2:4f:eb:93:
59:73:42:2f:db:e6:af:bc:92:cf:5a:16:bf:d8:df:f4:e1:d6:
c1:29:51:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:08 2025 by rpki-client