Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/UpZVR_EJYGS2tXPAKBcUwfBhzU0.mft
File: UpZVR_EJYGS2tXPAKBcUwfBhzU0.mft (raw, json)
Hash identifier: SuJ4LQbrbJQgz5atRsOCGZt9kmoChxiyIh9KgXz+o5M=
Subject key identifier: 09:93:CE:B7:F6:53:D7:3D:20:58:F9:02:C0:96:D9:F0:EF:24:FA:7D
Authority key identifier: 52:96:55:47:F1:09:60:64:B6:B5:73:C0:28:17:14:C1:F0:61:CD:4D
Certificate issuer: /CN=52965547f1096064b6b573c0281714c1f061cd4d
Certificate serial: 019A4EF55F6EB74048501326D2F1B7ECFC31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpZVR_EJYGS2tXPAKBcUwfBhzU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/UpZVR_EJYGS2tXPAKBcUwfBhzU0.mft
Manifest number: 0FE2
Signing time: Tue 04 Nov 2025 13:01:34 +0000
Manifest this update: Tue 04 Nov 2025 13:01:34 +0000
Manifest next update: Wed 05 Nov 2025 13:01:34 +0000
Files and hashes: 1: UpZVR_EJYGS2tXPAKBcUwfBhzU0.crl (hash: eyPZG06pFE6Skc48YBqFuzQPvKr59+zWkXsxUvZvIp8=)
2: ove2TkiR5Y_QzNqFVx6binaCimY.roa (hash: nkoFx2cGJ1UQ07ClYGuA0sWHVfaghbV6qV22jBDNl8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/UpZVR_EJYGS2tXPAKBcUwfBhzU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/UpZVR_EJYGS2tXPAKBcUwfBhzU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/UpZVR_EJYGS2tXPAKBcUwfBhzU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:5f:6e:b7:40:48:50:13:26:d2:f1:b7:ec:fc:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52965547f1096064b6b573c0281714c1f061cd4d
Validity
Not Before: Nov 4 13:01:34 2025 GMT
Not After : Nov 5 13:01:34 2025 GMT
Subject: CN=0993ceb7f653d73d2058f902c096d9f0ef24fa7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6b:f6:1e:41:3b:d0:0b:93:73:c9:f1:b3:d5:
c9:67:df:8d:9e:e4:48:c6:c4:f3:06:21:8b:c6:4b:
66:f0:47:83:32:37:26:5b:38:16:b3:ca:15:64:b9:
68:80:df:ae:9b:f8:aa:75:41:5c:9b:b2:ff:ca:b8:
da:63:a9:58:40:16:d3:06:55:21:f6:48:73:e9:1e:
37:1f:f6:14:a2:b0:03:c1:a0:3c:d3:97:74:56:99:
d1:e4:e5:8e:cb:55:bc:64:4e:dc:ae:f2:c4:ba:83:
16:f3:4d:6e:c6:71:f0:ca:63:e4:d3:81:72:df:38:
4f:38:ef:19:47:58:79:77:cf:92:4d:58:49:e6:2a:
7d:b9:d5:c1:f4:49:6a:cd:43:42:8c:b7:ab:24:97:
09:ea:97:0c:ce:a6:c7:9b:4e:c3:10:36:e8:f5:d2:
50:f1:33:21:3b:ea:f2:e7:fa:2a:05:41:76:a3:6c:
5b:1b:6c:9b:07:09:23:b5:5d:5b:94:89:01:08:c5:
01:2a:05:a9:b7:95:50:38:4c:02:ef:70:75:04:e3:
5d:00:a8:97:b9:e2:f6:0a:1e:74:4b:01:84:fb:69:
a8:a9:c8:7d:2c:c1:bb:37:57:2c:f1:6a:10:9f:20:
80:13:25:9b:99:c2:f6:45:fa:84:ba:b1:b4:90:3c:
7c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:93:CE:B7:F6:53:D7:3D:20:58:F9:02:C0:96:D9:F0:EF:24:FA:7D
X509v3 Authority Key Identifier:
keyid:52:96:55:47:F1:09:60:64:B6:B5:73:C0:28:17:14:C1:F0:61:CD:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpZVR_EJYGS2tXPAKBcUwfBhzU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/UpZVR_EJYGS2tXPAKBcUwfBhzU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/UpZVR_EJYGS2tXPAKBcUwfBhzU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:84:f7:c4:20:23:eb:db:94:5c:91:96:cf:c0:2a:80:39:1e:
05:9e:51:a9:0e:a4:82:41:a5:0a:8f:76:82:89:3f:aa:27:0f:
b5:64:73:38:3e:b3:62:51:4d:0b:b7:15:22:cf:66:3a:ff:f8:
7c:79:05:43:cf:dc:9b:45:5b:34:4a:f2:e7:60:c1:dd:cd:12:
47:ca:8c:32:00:58:23:c6:5a:8e:c5:f1:a3:50:55:f0:83:96:
e6:64:78:f1:6f:d6:94:19:31:85:af:5f:63:3d:3e:d0:dd:9c:
fc:7b:75:84:ba:a7:c3:f8:84:3c:9e:c4:ea:64:f0:57:83:fb:
44:c1:5b:55:0b:4f:40:aa:c8:a0:aa:59:04:5e:82:f4:ea:00:
29:f4:ab:b4:da:af:e6:7a:f9:21:ff:c5:8d:44:46:fd:f3:97:
3f:25:28:db:57:9f:9e:67:0b:90:85:25:49:e2:fc:4d:0d:10:
e4:0c:4b:3c:b6:87:ae:18:71:47:80:c6:fd:52:b4:3b:63:44:
04:42:01:18:a5:1c:ba:f0:6e:e2:c3:84:0c:66:6b:01:1d:45:
ca:9b:0a:8d:5b:6e:a5:48:7f:84:d9:d6:cc:f0:48:d7:16:a5:
d2:f9:43:02:94:ed:96:cf:d7:8c:24:9d:7e:d9:69:78:3f:5f:
67:d7:56:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:20:36 2025 by rpki-client