Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/upcN4SazoLVI2tdvXvqIhVxvH_I.mft
File: upcN4SazoLVI2tdvXvqIhVxvH_I.mft (raw, json)
Hash identifier: xsfjnaD9jM73EXYoTIKBPrE4y4c7jfakULpcZbmtVME=
Subject key identifier: 4A:14:C3:E5:C1:F5:35:83:35:99:0C:20:F4:5B:C2:24:CF:35:FE:D1
Authority key identifier: BA:97:0D:E1:26:B3:A0:B5:48:DA:D7:6F:5E:FA:88:85:5C:6F:1F:F2
Certificate issuer: /CN=ba970de126b3a0b548dad76f5efa88855c6f1ff2
Certificate serial: 019772D1FECD6DB75F84CF3C5E1AB7CA07F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/upcN4SazoLVI2tdvXvqIhVxvH_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/upcN4SazoLVI2tdvXvqIhVxvH_I.mft
Manifest number: 0918
Signing time: Sun 15 Jun 2025 09:00:54 +0000
Manifest this update: Sun 15 Jun 2025 09:00:54 +0000
Manifest next update: Mon 16 Jun 2025 09:00:54 +0000
Files and hashes: 1: iB0nh2pqz5-ySXR-fF2YCAS68X8.roa (hash: Y94jSzgT6noKQkiYTVT17vXi3fN7I6D0Bkm1xKFYYKk=)
2: upcN4SazoLVI2tdvXvqIhVxvH_I.crl (hash: ol251jLkBxPvdVeKhD6Q5r9KYEvVk4WMB0Lc1WCOAxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/upcN4SazoLVI2tdvXvqIhVxvH_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/upcN4SazoLVI2tdvXvqIhVxvH_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/upcN4SazoLVI2tdvXvqIhVxvH_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 09:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:d1:fe:cd:6d:b7:5f:84:cf:3c:5e:1a:b7:ca:07:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba970de126b3a0b548dad76f5efa88855c6f1ff2
Validity
Not Before: Jun 15 09:00:54 2025 GMT
Not After : Jun 16 09:00:54 2025 GMT
Subject: CN=4a14c3e5c1f5358335990c20f45bc224cf35fed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d7:3d:1f:dd:b6:b0:c5:ff:19:29:e9:b7:89:
80:0c:ec:cf:f7:47:b3:3a:8d:27:79:60:29:2b:ff:
b3:c0:d7:fd:f6:d2:f3:fc:a8:c4:10:94:97:5b:7c:
66:5b:b2:60:ee:a8:e0:a3:3f:77:cb:81:ab:f7:a6:
ce:16:40:67:cb:9a:c7:c1:c3:26:14:e2:93:21:d3:
52:c9:98:30:f4:57:e0:94:50:9d:9a:9d:bf:6f:a3:
ef:01:1f:d8:44:78:07:9d:cd:5d:d7:86:65:e8:f5:
65:61:df:83:47:c6:e4:9a:3c:92:1b:f4:10:cd:2c:
a2:fe:93:26:f5:ad:b0:9d:55:54:45:4e:7c:18:27:
1d:c1:98:29:de:d6:92:f4:77:b0:e3:14:21:1f:6f:
b0:b2:c5:99:75:4d:cd:49:96:8b:03:0a:8c:73:46:
4b:43:b4:f7:38:34:da:c1:89:88:0c:f9:5a:24:e1:
93:2c:98:1f:14:09:16:21:ba:b8:c8:fd:a4:1e:b1:
7e:6c:54:80:af:79:08:db:69:a5:d3:cc:c7:4b:17:
59:5b:c5:ea:32:5f:4b:f6:c5:6f:8b:56:3f:63:b7:
b6:40:7b:92:94:2c:b2:09:da:7a:7c:6c:71:24:ed:
47:ab:c2:99:84:bd:9d:8d:94:6e:ef:7c:84:94:65:
35:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:14:C3:E5:C1:F5:35:83:35:99:0C:20:F4:5B:C2:24:CF:35:FE:D1
X509v3 Authority Key Identifier:
keyid:BA:97:0D:E1:26:B3:A0:B5:48:DA:D7:6F:5E:FA:88:85:5C:6F:1F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/upcN4SazoLVI2tdvXvqIhVxvH_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/upcN4SazoLVI2tdvXvqIhVxvH_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/upcN4SazoLVI2tdvXvqIhVxvH_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:c7:e8:94:05:16:90:07:78:40:de:ee:0f:74:ab:95:8d:b1:
9a:8f:9f:cd:79:65:9a:a4:1b:b5:cd:e5:22:2a:5c:9e:f6:bc:
81:c7:a2:2d:40:3a:60:ae:a1:65:44:09:b0:d6:08:41:48:3c:
3a:ed:d1:64:2e:7f:01:5d:1d:1c:42:e7:08:9b:8c:05:54:34:
89:ac:0c:a6:28:b5:ee:4f:96:4a:87:dc:fd:78:c5:0d:3b:97:
81:e3:c5:c4:dd:13:02:46:32:08:4b:3c:20:38:8f:6a:24:9c:
cd:16:35:39:ad:4e:e6:bc:8b:40:9f:a1:e2:6e:ac:43:22:1a:
fc:47:26:ba:9b:d8:3e:a4:28:6f:bc:e2:80:70:77:97:2f:b5:
85:c9:07:12:e7:bf:56:95:5c:55:37:6b:7d:fd:f8:64:4a:9b:
ce:d5:ad:63:cf:99:79:87:8a:5e:0e:7d:30:cc:2b:e6:23:1e:
41:78:87:2a:ef:ca:b7:96:40:9b:90:0e:99:e6:4f:27:e7:ee:
39:0d:4e:29:b5:d0:e3:39:df:18:40:04:1b:0e:de:ac:a0:17:
ba:80:f3:9b:21:78:a0:e4:e7:b3:96:db:a9:a4:64:67:f7:fa:
e9:bd:87:7e:db:a3:89:9b:c9:84:f1:db:f4:ba:bf:1f:0a:5a:
cd:ed:a7:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:56:06 2025 by rpki-client