Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/7c1ff5-22db-4988-ad94-92d0d01139f9/1/upyRALMvz2LV39ghy9BWq3PS5FU.mft
File: upyRALMvz2LV39ghy9BWq3PS5FU.mft (raw, json)
Hash identifier: FMUyq/cqn4A8lAWWVWilMuAVtSMlY4PVOUWeTJ5GNms=
Subject key identifier: 3C:1F:A2:13:7B:8C:C1:81:56:1C:36:EB:74:59:4E:6C:A5:DC:A6:6E
Authority key identifier: BA:9C:91:00:B3:2F:CF:62:D5:DF:D8:21:CB:D0:56:AB:73:D2:E4:55
Certificate issuer: /CN=ba9c9100b32fcf62d5dfd821cbd056ab73d2e455
Certificate serial: 019875D0CAD9F42624730B8CBEA52D0CBD8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/upyRALMvz2LV39ghy9BWq3PS5FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/7c1ff5-22db-4988-ad94-92d0d01139f9/1/upyRALMvz2LV39ghy9BWq3PS5FU.mft
Manifest number: 0B88
Signing time: Mon 04 Aug 2025 16:01:14 +0000
Manifest this update: Mon 04 Aug 2025 16:01:14 +0000
Manifest next update: Tue 05 Aug 2025 16:01:14 +0000
Files and hashes: 1: upyRALMvz2LV39ghy9BWq3PS5FU.crl (hash: ogJm9DCYWTMPCYXzSTipY9WQCd8DtkcjOgQtdS/dzaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/7c1ff5-22db-4988-ad94-92d0d01139f9/1/upyRALMvz2LV39ghy9BWq3PS5FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/7c1ff5-22db-4988-ad94-92d0d01139f9/1/upyRALMvz2LV39ghy9BWq3PS5FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/upyRALMvz2LV39ghy9BWq3PS5FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:d0:ca:d9:f4:26:24:73:0b:8c:be:a5:2d:0c:bd:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba9c9100b32fcf62d5dfd821cbd056ab73d2e455
Validity
Not Before: Aug 4 16:01:14 2025 GMT
Not After : Aug 5 16:01:14 2025 GMT
Subject: CN=3c1fa2137b8cc181561c36eb74594e6ca5dca66e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:64:ee:b1:8d:7d:25:9a:08:9e:fd:65:cc:13:
1b:bd:c1:67:12:aa:58:de:bf:36:65:39:b0:b7:68:
d9:17:22:eb:16:56:8f:98:19:2e:4a:7f:ff:ae:d4:
6e:71:0c:0d:1b:2c:11:df:a2:d0:44:2e:76:22:af:
40:19:13:2c:0a:02:f4:72:ec:90:05:37:fb:b7:53:
92:91:86:89:05:39:61:e8:ad:f3:30:6b:1a:40:f1:
fb:9f:cc:7e:8b:ae:a6:c9:1f:e8:b9:47:6e:37:a8:
d5:47:5c:f9:6c:b7:ba:3a:11:51:22:de:b9:30:9d:
03:02:cc:23:2e:4d:7a:13:90:c6:51:2e:89:72:28:
0a:33:61:2f:8d:ba:b0:71:fe:e3:2b:44:c9:2f:b5:
0a:68:e0:68:fd:05:48:a3:2b:da:41:97:bb:20:e2:
b6:5a:2b:09:fe:88:87:7d:4d:e5:1b:ec:0f:8e:8c:
d3:cd:fa:c3:83:79:e0:c4:23:6e:83:75:c8:69:b4:
c1:9a:d7:64:67:2a:ea:02:3a:bd:bb:a5:85:4c:5f:
e6:2c:55:e1:13:33:97:39:56:62:82:97:75:e8:6e:
93:26:4c:02:90:cc:ab:3d:e6:2d:97:35:12:06:68:
89:8b:e4:60:21:a9:51:f2:33:32:a1:19:06:23:e8:
41:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:1F:A2:13:7B:8C:C1:81:56:1C:36:EB:74:59:4E:6C:A5:DC:A6:6E
X509v3 Authority Key Identifier:
keyid:BA:9C:91:00:B3:2F:CF:62:D5:DF:D8:21:CB:D0:56:AB:73:D2:E4:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/upyRALMvz2LV39ghy9BWq3PS5FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7c1ff5-22db-4988-ad94-92d0d01139f9/1/upyRALMvz2LV39ghy9BWq3PS5FU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7c1ff5-22db-4988-ad94-92d0d01139f9/1/upyRALMvz2LV39ghy9BWq3PS5FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:c3:35:55:dd:d4:23:3c:ca:a4:7f:6a:c0:f6:c6:d5:b9:0e:
e9:2a:3b:f0:41:44:e5:9a:57:63:7d:78:61:40:3e:76:1f:d7:
17:84:11:fd:0e:d9:99:86:de:84:c6:4d:3e:eb:ca:70:2e:06:
18:d2:04:b7:1e:a1:72:ea:cd:1e:98:8e:e0:8e:ee:02:d8:12:
f6:c1:49:67:51:b5:92:69:5f:6e:14:70:98:ee:2f:ab:89:be:
10:1a:39:77:05:f6:d2:71:7d:db:cb:4b:d5:d2:96:54:bd:60:
7b:db:07:2d:95:a9:a4:ed:13:a3:89:e2:e5:b3:6a:c2:db:fc:
6a:ca:43:9d:f2:47:c3:72:ab:58:aa:87:f9:2a:8d:31:3f:7b:
c2:ab:b8:1c:1f:a3:35:53:6a:c9:b1:34:bf:3d:e7:17:7e:99:
7d:2c:46:56:c1:c5:48:ba:cd:ef:15:cd:b1:7f:a9:a2:cd:ee:
de:64:e7:b3:a8:b1:f5:0e:a4:ce:b9:41:b4:c0:1b:f0:2d:c0:
4f:75:d9:16:0a:c1:3e:96:37:ef:44:bc:c4:0c:56:8f:56:9d:
38:f8:2b:e5:a4:c8:a6:ac:6a:57:f2:48:45:7a:ca:63:53:e4:
6a:02:52:d0:f5:4c:c8:b9:4f:f3:ed:2e:b2:d4:6c:88:71:a1:
6b:01:4c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:30:09 2025 by rpki-client