Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.mft
File: Up-6tRcaXLIvbFTxCzostttRcj4.mft (raw, json)
Hash identifier: Xc1Gx7xidDY2wGM/jUrTRphURo5adeT43MAC8Xfh2Xs=
Subject key identifier: 44:12:3A:A8:21:98:A3:12:A2:61:03:FD:C2:12:04:84:E0:2C:B2:A3
Authority key identifier: 52:9F:BA:B5:17:1A:5C:B2:2F:6C:54:F1:0B:3A:2C:B6:DB:51:72:3E
Certificate issuer: /CN=529fbab5171a5cb22f6c54f10b3a2cb6db51723e
Certificate serial: 01987418F958142B10E9D6C7F145BA3D6967
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Up-6tRcaXLIvbFTxCzostttRcj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.mft
Manifest number: 108C
Signing time: Mon 04 Aug 2025 08:00:50 +0000
Manifest this update: Mon 04 Aug 2025 08:00:50 +0000
Manifest next update: Tue 05 Aug 2025 08:00:50 +0000
Files and hashes: 1: FrmVEYuDa9xtluHCEQ99gg4ezxk.roa (hash: ROrbhIKSviaPzDwOSSegQp+fGjZAnP/YBP5hACLrt+g=)
2: Up-6tRcaXLIvbFTxCzostttRcj4.crl (hash: A6fJzKttgmGTxevGtnyhHtkIDOykGP22fQa52BolEn8=)
3: qi3rhjz0p_JIDWgNBHnC01nOTzc.roa (hash: sI4mLt9OaWWXoU75bYS+ZomsMcCTUVq/R9FP0uAoyas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Up-6tRcaXLIvbFTxCzostttRcj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 08:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:18:f9:58:14:2b:10:e9:d6:c7:f1:45:ba:3d:69:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529fbab5171a5cb22f6c54f10b3a2cb6db51723e
Validity
Not Before: Aug 4 08:00:50 2025 GMT
Not After : Aug 5 08:00:50 2025 GMT
Subject: CN=44123aa82198a312a26103fdc2120484e02cb2a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9e:71:49:32:ed:98:49:8e:b0:81:a8:a9:8f:
b5:a5:21:f2:77:18:60:b2:13:68:6b:e0:2d:32:6a:
ae:6f:b2:8d:92:81:31:fe:95:3b:62:b4:84:1d:93:
e3:ba:94:7f:de:ee:4f:4f:85:68:e1:2c:6a:1a:36:
1d:b9:84:8b:ff:bb:77:e3:c7:22:60:0e:75:73:00:
da:6d:f0:9b:c2:6c:05:54:00:0b:03:34:78:ee:f8:
2b:64:64:22:fc:81:5a:b7:b4:48:fe:ba:dc:f2:af:
be:b7:88:8c:55:e9:d6:2a:73:39:2d:0e:7d:8f:34:
84:ae:c4:e2:2a:c4:7d:1f:8e:89:b2:2a:ea:57:03:
30:a1:97:47:a4:ee:fa:79:e9:1b:4d:1f:7d:03:45:
f9:ea:fa:e1:30:a0:6f:6e:90:47:ba:48:50:da:4a:
0f:7b:f0:fa:bd:17:94:c0:c7:76:37:4f:13:4f:aa:
84:39:8e:cf:4f:ac:ac:fc:9e:1e:1b:d1:7b:df:49:
dc:a5:96:ff:27:b6:21:8d:ea:c0:1c:d0:d1:9e:00:
03:ec:17:61:10:c9:d0:65:e3:60:6c:5f:66:4b:6b:
cf:b6:8d:7c:32:7b:d0:6c:14:cd:6d:2a:93:06:47:
77:90:76:ed:95:62:69:72:b7:d9:5c:ea:fb:7f:e4:
9b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:12:3A:A8:21:98:A3:12:A2:61:03:FD:C2:12:04:84:E0:2C:B2:A3
X509v3 Authority Key Identifier:
keyid:52:9F:BA:B5:17:1A:5C:B2:2F:6C:54:F1:0B:3A:2C:B6:DB:51:72:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Up-6tRcaXLIvbFTxCzostttRcj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:44:65:17:6b:41:63:36:f2:f7:c1:d5:17:9c:05:6f:ac:b5:
33:6b:44:53:6c:84:56:ca:41:c0:e2:c7:33:c7:ce:5b:fa:46:
26:30:10:b5:da:27:f2:f7:95:05:13:1c:ff:22:17:f0:f6:47:
e8:34:df:5f:70:b8:22:81:9c:47:e3:ce:57:25:bd:37:72:c8:
5a:64:c1:a4:4c:2b:48:a4:e2:58:4c:f4:d8:ad:da:66:87:34:
a5:b4:0e:b9:6d:2d:29:67:de:ed:a3:b4:03:7d:6f:ae:6d:6a:
e6:a3:b8:55:f8:a1:6d:26:95:ec:27:dd:76:a4:e5:2b:ed:bb:
e1:85:cb:16:0d:06:fc:f8:51:97:97:87:3e:d7:3c:5b:26:d4:
dd:70:4f:19:86:54:9f:2d:f0:31:17:c5:a0:7c:70:20:03:6a:
3c:a6:15:54:e7:ef:1a:16:58:ca:cb:e2:2f:28:49:10:42:fb:
30:38:7a:40:71:78:b5:a5:65:f6:44:2d:e2:5c:2f:7a:42:84:
02:36:97:6a:20:b8:da:f8:6a:2e:f0:42:6c:cd:4a:b2:d8:be:
b7:8f:92:2c:b6:bf:4b:55:06:fa:79:2c:0c:99:82:ae:af:52:
c9:29:1c:9a:fd:a0:86:8a:df:59:5f:a1:9b:7f:df:a3:8b:c3:
9e:de:b4:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0GPlYFCsQ6dbH8UW6PWlnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyOWZiYWI1MTcxYTVjYjIyZjZjNTRmMTBiM2EyY2I2ZGI1
MTcyM2UwHhcNMjUwODA0MDgwMDUwWhcNMjUwODA1MDgwMDUwWjAzMTEwLwYDVQQD
Eyg0NDEyM2FhODIxOThhMzEyYTI2MTAzZmRjMjEyMDQ4NGUwMmNiMmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkp5xSTLtmEmOsIGoqY+1pSHydxhg
shNoa+AtMmqub7KNkoEx/pU7YrSEHZPjupR/3u5PT4Vo4SxqGjYduYSL/7t348ci
YA51cwDabfCbwmwFVAALAzR47vgrZGQi/IFat7RI/rrc8q++t4iMVenWKnM5LQ59
jzSErsTiKsR9H46JsirqVwMwoZdHpO76eekbTR99A0X56vrhMKBvbpBHukhQ2koP
e/D6vReUwMd2N08TT6qEOY7PT6ys/J4eG9F730ncpZb/J7YhjerAHNDRngAD7Bdh
EMnQZeNgbF9mS2vPto18MnvQbBTNbSqTBkd3kHbtlWJpcrfZXOr7f+Sb9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEQSOqghmKMSomED/cISBITgLLKjMB8GA1UdIwQY
MBaAFFKfurUXGlyyL2xU8Qs6LLbbUXI+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXAtNnRSY2FYTEl2YkZUeEN6b3N0dHRSY2o0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS81Mjg5YzQtMDJiNS00NjVlLThjYmQt
NzczNzMyNjUyZjRmLzEvVXAtNnRSY2FYTEl2YkZUeEN6b3N0dHRSY2o0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS81Mjg5YzQtMDJiNS00NjVlLThjYmQtNzczNzMyNjUyZjRm
LzEvVXAtNnRSY2FYTEl2YkZUeEN6b3N0dHRSY2o0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxkRlF2tB
Yzby98HVF5wFb6y1M2tEU2yEVspBwOLHM8fOW/pGJjAQtdon8veVBRMc/yIX8PZH
6DTfX3C4IoGcR+POVyW9N3LIWmTBpEwrSKTiWEz02K3aZoc0pbQOuW0tKWfe7aO0
A31vrm1q5qO4VfihbSaV7CfddqTlK+274YXLFg0G/PhRl5eHPtc8WybU3XBPGYZU
ny3wMRfFoHxwIANqPKYVVOfvGhZYysviLyhJEEL7MDh6QHF4taVl9kQt4lwvekKE
AjaXaiC42vhqLvBCbM1Ksti+t4+SLLa/S1UG+nksDJmCrq9SySkcmv2ghorfWV+h
m3/fo4vDnt60ow==
-----END CERTIFICATE-----
Generated at Mon Aug 4 16:02:03 2025 by rpki-client