Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/upcN4SazoLVI2tdvXvqIhVxvH_I.mft
File: upcN4SazoLVI2tdvXvqIhVxvH_I.mft (raw, json)
Hash identifier: cHr0up4llpcr2v+AEPoSkRs5HEV8zI28h65cYbmYKYI=
Subject key identifier: 2B:D3:63:13:B0:72:A1:63:CE:0A:6F:F3:8E:F1:AB:2A:B7:83:62:DA
Authority key identifier: BA:97:0D:E1:26:B3:A0:B5:48:DA:D7:6F:5E:FA:88:85:5C:6F:1F:F2
Certificate issuer: /CN=ba970de126b3a0b548dad76f5efa88855c6f1ff2
Certificate serial: 019A4EF46B160C5F7739478A22BDCBB73673
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/upcN4SazoLVI2tdvXvqIhVxvH_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/upcN4SazoLVI2tdvXvqIhVxvH_I.mft
Manifest number: 0A93
Signing time: Tue 04 Nov 2025 13:00:32 +0000
Manifest this update: Tue 04 Nov 2025 13:00:32 +0000
Manifest next update: Wed 05 Nov 2025 13:00:32 +0000
Files and hashes: 1: iB0nh2pqz5-ySXR-fF2YCAS68X8.roa (hash: Y94jSzgT6noKQkiYTVT17vXi3fN7I6D0Bkm1xKFYYKk=)
2: upcN4SazoLVI2tdvXvqIhVxvH_I.crl (hash: k9p44kAPIgXbtIjrdRiJNUbpr6UUEwDkqcpiJ9twORo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/upcN4SazoLVI2tdvXvqIhVxvH_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/upcN4SazoLVI2tdvXvqIhVxvH_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/upcN4SazoLVI2tdvXvqIhVxvH_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:6b:16:0c:5f:77:39:47:8a:22:bd:cb:b7:36:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba970de126b3a0b548dad76f5efa88855c6f1ff2
Validity
Not Before: Nov 4 13:00:32 2025 GMT
Not After : Nov 5 13:00:32 2025 GMT
Subject: CN=2bd36313b072a163ce0a6ff38ef1ab2ab78362da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:08:d0:77:aa:92:09:0f:5b:d6:ec:97:bb:5d:
41:72:7b:84:3d:54:f1:63:ae:2d:b3:68:5a:c2:1c:
5b:4f:02:c4:7a:f1:33:51:33:0a:42:c3:ce:3e:24:
36:01:4f:3a:ab:cb:8b:60:a5:f6:a8:42:8e:39:df:
f2:ee:59:77:8e:19:b4:19:64:d7:e2:ac:48:1f:3a:
4e:04:5a:99:a9:de:86:28:fa:86:d8:a8:56:36:e0:
07:28:24:14:4d:aa:fb:c1:24:86:5e:dd:cd:8c:b7:
13:b3:b9:c2:7d:6d:ef:cb:13:e6:0b:cf:1a:ea:b8:
8b:20:18:47:b7:b3:e9:ca:6c:9c:35:ce:37:82:ef:
d1:b8:3a:a1:82:b6:ea:8e:6e:c2:64:2f:e3:9b:f0:
e5:be:ea:10:a2:8f:f9:2c:9b:ef:86:b7:da:0a:9c:
26:c9:1d:5b:0c:91:72:8c:95:10:41:5f:31:de:f4:
46:87:b0:d9:48:34:6f:d9:83:cf:6a:6e:fc:70:3d:
6d:96:90:e4:89:59:61:88:e8:30:03:e5:bc:36:c7:
99:2a:ce:ec:56:bd:e9:4a:fe:87:43:92:f9:7f:57:
a0:c8:2f:a0:72:e2:c4:c3:cd:d1:6e:df:3b:22:88:
1b:c2:08:6e:80:21:6a:6e:49:4c:d6:af:85:c4:6b:
ab:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:D3:63:13:B0:72:A1:63:CE:0A:6F:F3:8E:F1:AB:2A:B7:83:62:DA
X509v3 Authority Key Identifier:
keyid:BA:97:0D:E1:26:B3:A0:B5:48:DA:D7:6F:5E:FA:88:85:5C:6F:1F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/upcN4SazoLVI2tdvXvqIhVxvH_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/upcN4SazoLVI2tdvXvqIhVxvH_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/upcN4SazoLVI2tdvXvqIhVxvH_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:d0:86:fa:f1:32:8b:ac:32:e9:d1:f5:f5:c7:dc:a6:58:30:
46:33:44:71:89:1c:4f:a2:1f:9c:01:65:a3:74:22:1b:5d:3b:
a3:25:45:b1:a4:c5:61:ac:7f:61:91:2a:65:c7:73:70:39:f9:
e2:2a:4b:6e:00:2c:53:74:ed:65:99:d0:b4:5f:61:39:f1:b2:
24:80:e0:67:06:4b:86:a8:50:f6:a9:3d:73:23:a6:48:2f:78:
9e:b1:68:74:31:58:78:23:8a:44:05:9e:f5:b9:df:a1:c8:c6:
56:77:78:af:8f:ff:e5:96:5c:82:74:99:d4:b4:11:ae:dc:ae:
23:19:56:a1:1f:f4:d1:b6:0a:b8:15:2a:77:6e:1c:8a:45:2e:
69:aa:50:d6:63:8f:d8:53:e2:c8:00:9b:27:08:ba:1c:86:04:
f1:82:2c:f9:46:aa:0d:84:99:7d:0f:ca:2a:fb:40:4c:24:b3:
06:27:70:67:f5:dc:e2:62:af:bc:d7:a8:90:7e:8a:9e:89:2b:
d2:5e:d3:94:25:bf:3e:7e:c4:0f:f4:02:48:2a:85:d2:58:a6:
fc:26:b5:06:0a:b9:3c:31:64:85:41:e0:e5:9c:dc:99:1c:b4:
ff:c6:69:bc:2f:04:60:31:f5:9e:75:f6:1d:8c:f7:36:10:88:
0d:69:e4:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:29 2025 by rpki-client