Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft
File: UpIxske_9ltMY0GQfs1eq6f5ypI.mft (raw, json)
Hash identifier: GB5cDsXNi6+VLxEsKuTCu3gmCWKbRd+N/yV14CqY6qc=
Subject key identifier: 40:EA:F9:18:EB:04:47:2F:72:B2:AE:33:0E:30:23:9B:62:8A:70:80
Authority key identifier: 52:92:31:B2:47:BF:F6:5B:4C:63:41:90:7E:CD:5E:AB:A7:F9:CA:92
Certificate issuer: /CN=529231b247bff65b4c6341907ecd5eaba7f9ca92
Certificate serial: 019A4E86B4A16FCE2A11A789D470BC710A5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpIxske_9ltMY0GQfs1eq6f5ypI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 11:00:42 +0000
Manifest this update: Tue 04 Nov 2025 11:00:42 +0000
Manifest next update: Wed 05 Nov 2025 11:00:42 +0000
Files and hashes: 1: QNtVQ4uRD5YHVKeiIuOtvfCNd7w.roa (hash: h1eiwnIox6CJN2eOBBfQEHdpOKWR/C6Oxeaya2ntIbQ=)
2: UpIxske_9ltMY0GQfs1eq6f5ypI.crl (hash: jfABHSy+VWT2bfflq8OozVsMg18F6fxqr4hHkyxwoWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UpIxske_9ltMY0GQfs1eq6f5ypI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:b4:a1:6f:ce:2a:11:a7:89:d4:70:bc:71:0a:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529231b247bff65b4c6341907ecd5eaba7f9ca92
Validity
Not Before: Nov 4 11:00:42 2025 GMT
Not After : Nov 5 11:00:42 2025 GMT
Subject: CN=40eaf918eb04472f72b2ae330e30239b628a7080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:94:42:07:98:8c:06:2a:82:d6:c6:b6:2f:db:
a1:34:ea:b2:00:bf:46:65:2f:20:d0:1b:e4:8f:87:
d8:11:5f:70:63:25:ef:39:ea:8a:01:22:17:3f:b5:
32:32:dc:65:8e:86:fe:bc:56:4f:07:d7:74:6e:97:
57:1f:9c:1c:2f:b1:0b:50:3e:e9:0c:35:5f:8e:dc:
c5:fd:79:8e:af:50:80:cd:b0:d7:f3:b2:ac:53:0b:
44:53:96:48:9f:37:5c:96:84:de:55:cf:96:f4:94:
3a:fb:30:87:f1:26:01:d6:0f:86:b7:95:ed:b5:e7:
da:4a:56:4f:35:4a:2a:ae:fe:a9:d0:b7:85:9a:04:
10:50:3e:2f:3b:ab:b8:28:37:28:4c:c2:c5:1d:79:
bf:83:3f:34:e7:84:3d:70:1f:c5:79:98:37:91:e6:
dd:62:03:c8:2b:da:f4:5f:ac:6c:cd:3e:46:37:5a:
09:5c:ab:c9:e7:96:16:49:3c:12:db:10:2b:97:a2:
d6:35:16:3f:f8:ed:9d:ce:68:00:4a:fe:3b:fd:bb:
63:96:d1:33:c7:4e:b2:a8:f6:6d:6f:86:3d:ee:c9:
d9:b3:50:68:4e:37:69:2d:68:12:05:dc:e5:7c:8f:
bd:bf:6a:24:ee:28:ea:4d:a1:ba:94:fd:0d:45:24:
3d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:EA:F9:18:EB:04:47:2F:72:B2:AE:33:0E:30:23:9B:62:8A:70:80
X509v3 Authority Key Identifier:
keyid:52:92:31:B2:47:BF:F6:5B:4C:63:41:90:7E:CD:5E:AB:A7:F9:CA:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpIxske_9ltMY0GQfs1eq6f5ypI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:a6:7f:96:e9:ba:52:44:a6:9f:67:93:e8:93:02:d4:b5:92:
66:39:79:a1:00:41:70:a6:74:a5:d2:1e:aa:b0:f9:56:0d:1e:
9a:f2:6b:10:fc:7b:ea:16:d7:01:dd:c1:2f:4a:ba:a9:03:c1:
22:f6:17:ff:6f:d5:7c:2c:34:76:9a:38:08:ec:dc:bc:08:f1:
87:bd:d8:ba:4b:bd:00:00:05:bf:d3:a7:c0:17:62:4b:6b:18:
4c:f3:00:7c:e4:c9:0a:ee:61:dc:df:b1:4f:5b:39:6d:85:6e:
ab:c3:ab:3d:ec:36:91:f8:4b:99:f2:08:2d:63:d2:22:5e:ee:
50:5e:5b:8b:96:3b:a0:30:4a:71:90:71:84:ed:1c:54:5a:53:
33:11:ce:43:e7:b5:60:55:74:2d:cc:be:a8:b8:9b:c7:16:e1:
92:24:0a:49:29:c4:8f:7d:dd:fa:82:cd:2f:e6:7d:e4:59:bc:
ae:c8:8a:f4:5f:e0:3e:a5:46:10:29:33:14:8d:23:41:c3:cc:
72:42:10:5a:34:71:2f:f7:45:88:f6:88:e5:ef:42:99:b6:c0:
3d:e8:93:87:85:8a:12:07:f4:f5:24:44:4c:6f:d0:ea:b6:fb:
cb:e0:e2:89:16:0e:4f:2e:91:41:7a:9d:46:89:2f:59:5d:3f:
22:df:80:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:45 2025 by rpki-client