Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/upcN4SazoLVI2tdvXvqIhVxvH_I.mft
File: upcN4SazoLVI2tdvXvqIhVxvH_I.mft (raw, json)
Hash identifier: v0pBBC4bG5QPYc/1EdRpJSazDZ9Uzxpxa8QhFisrg6U=
Subject key identifier: F4:A7:D4:91:55:4D:A6:92:A2:54:FB:08:9C:EA:94:21:65:16:BA:97
Authority key identifier: BA:97:0D:E1:26:B3:A0:B5:48:DA:D7:6F:5E:FA:88:85:5C:6F:1F:F2
Certificate issuer: /CN=ba970de126b3a0b548dad76f5efa88855c6f1ff2
Certificate serial: 019873E2DAEC4E351CF9018C961541CBFB52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/upcN4SazoLVI2tdvXvqIhVxvH_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/upcN4SazoLVI2tdvXvqIhVxvH_I.mft
Manifest number: 099D
Signing time: Mon 04 Aug 2025 07:01:43 +0000
Manifest this update: Mon 04 Aug 2025 07:01:43 +0000
Manifest next update: Tue 05 Aug 2025 07:01:43 +0000
Files and hashes: 1: iB0nh2pqz5-ySXR-fF2YCAS68X8.roa (hash: Y94jSzgT6noKQkiYTVT17vXi3fN7I6D0Bkm1xKFYYKk=)
2: upcN4SazoLVI2tdvXvqIhVxvH_I.crl (hash: pjklpgcUte1rBHGgIJgcz4GTziOvOvVIY72lE7SqJkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/upcN4SazoLVI2tdvXvqIhVxvH_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/upcN4SazoLVI2tdvXvqIhVxvH_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/upcN4SazoLVI2tdvXvqIhVxvH_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:da:ec:4e:35:1c:f9:01:8c:96:15:41:cb:fb:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba970de126b3a0b548dad76f5efa88855c6f1ff2
Validity
Not Before: Aug 4 07:01:43 2025 GMT
Not After : Aug 5 07:01:43 2025 GMT
Subject: CN=f4a7d491554da692a254fb089cea94216516ba97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:35:a5:95:65:87:16:c5:80:de:91:d3:35:ce:
47:37:4f:49:d8:b6:c7:62:5b:8b:9e:01:e9:37:d7:
9e:0e:dc:2f:d3:5a:a9:cc:d7:f5:30:aa:f4:3f:21:
5b:a0:af:e2:34:ee:00:35:47:c2:00:4f:1e:26:a4:
a5:03:d5:94:2a:5d:6b:18:1d:cd:6a:c6:f6:c7:7d:
6d:f9:47:46:db:32:6f:a0:92:b3:ec:7d:45:cb:2d:
96:44:e7:15:62:5f:ce:70:7c:e9:d8:b4:3d:7d:2e:
34:29:09:25:f3:66:33:54:da:48:61:59:52:ce:d8:
ea:cb:5a:6e:25:1c:f9:67:51:b6:af:1b:62:f4:b2:
ca:71:dc:2c:27:1a:b1:41:b9:c9:10:72:8c:f6:db:
47:f4:94:26:cb:97:58:28:e7:6f:00:29:93:ec:e2:
07:13:f9:e6:64:49:a2:ca:3c:d6:79:c5:2f:bd:de:
c2:80:40:06:ff:eb:09:72:15:5d:15:d0:f6:92:5d:
eb:62:5c:ad:9c:4b:3d:90:b8:d0:1f:a2:88:aa:4f:
67:5d:5b:22:d3:64:18:c9:04:c6:2f:c6:22:18:7f:
77:74:a1:e2:b6:ad:10:8b:ed:a8:59:30:8e:f8:fe:
e4:35:f8:b4:51:e2:27:03:4f:58:d6:28:21:dd:3b:
35:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A7:D4:91:55:4D:A6:92:A2:54:FB:08:9C:EA:94:21:65:16:BA:97
X509v3 Authority Key Identifier:
keyid:BA:97:0D:E1:26:B3:A0:B5:48:DA:D7:6F:5E:FA:88:85:5C:6F:1F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/upcN4SazoLVI2tdvXvqIhVxvH_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/upcN4SazoLVI2tdvXvqIhVxvH_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/upcN4SazoLVI2tdvXvqIhVxvH_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:b0:5c:16:41:82:08:f5:8e:fc:62:87:aa:c9:26:8e:5c:d0:
8f:cc:09:7c:77:5e:f0:fb:ac:22:92:26:84:00:d1:91:be:c8:
4b:5f:46:e0:d0:d3:60:81:b8:a3:bc:0a:2f:f2:ec:82:0f:b0:
e4:2f:8b:f9:17:01:5b:ac:84:04:e7:1f:f1:92:3f:26:eb:86:
b1:91:87:80:1b:df:b2:e7:7d:af:cd:dd:45:b6:9d:14:2a:29:
59:a3:b2:d1:3b:d9:cf:6c:a1:e7:7b:36:f7:ea:56:90:00:95:
c1:ca:47:f6:54:f0:1a:eb:40:27:5d:23:97:b2:08:8f:d4:7a:
e9:cc:db:8a:c6:ac:1b:9c:ac:b7:45:a2:15:7a:5b:d8:ca:7e:
13:5e:72:a0:c5:aa:f6:fc:f2:d9:da:9f:77:9e:78:c5:02:ad:
db:cb:1f:4a:a6:86:79:9f:b5:70:3e:bc:78:97:fe:ab:16:02:
1f:b9:25:94:ed:4d:89:f8:31:35:9e:f4:77:62:4b:af:98:c3:
f0:9c:e7:e2:40:71:7f:07:dd:46:11:84:90:32:37:24:52:a4:
8b:f2:eb:3c:e7:bd:cb:93:6c:1f:09:e7:b5:34:ba:82:19:47:
8c:7c:7e:cf:e4:52:93:c6:93:02:22:d1:1e:3c:bc:70:35:93:
2b:a0:77:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:17:04 2025 by rpki-client