Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.mft
File: UpylpuXWdCHz8s0hE4y3BwSFCVU.mft (raw, json)
Hash identifier: K5Q2LzJBQn6EXapgOqgIVumIL/jmxACh7WUOeHPOuQM=
Subject key identifier: 85:B4:40:A7:61:C1:3C:75:FE:31:C8:85:CB:5E:BF:9C:39:88:E5:45
Authority key identifier: 52:9C:A5:A6:E5:D6:74:21:F3:F2:CD:21:13:8C:B7:07:04:85:09:55
Certificate issuer: /CN=529ca5a6e5d67421f3f2cd21138cb70704850955
Certificate serial: 019A4DAA8214B45523EB9817A5C62097E49F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpylpuXWdCHz8s0hE4y3BwSFCVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.mft
Manifest number: 16A0
Signing time: Tue 04 Nov 2025 07:00:11 +0000
Manifest this update: Tue 04 Nov 2025 07:00:11 +0000
Manifest next update: Wed 05 Nov 2025 07:00:11 +0000
Files and hashes: 1: 5DYNtQhmHm5xId84-qYm__d0Jxg.roa (hash: M0kddqhlCcHa9Skioom20ixZlz/BFkuuxsQkLcWGHLA=)
2: UpylpuXWdCHz8s0hE4y3BwSFCVU.crl (hash: YrK4JV+/OpqwBpqAmcDe2R9d7XRA3FZfn6MaR8ro6jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/UpylpuXWdCHz8s0hE4y3BwSFCVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:82:14:b4:55:23:eb:98:17:a5:c6:20:97:e4:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529ca5a6e5d67421f3f2cd21138cb70704850955
Validity
Not Before: Nov 4 07:00:11 2025 GMT
Not After : Nov 5 07:00:11 2025 GMT
Subject: CN=85b440a761c13c75fe31c885cb5ebf9c3988e545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6c:03:f8:27:90:4e:ad:29:5f:11:48:d5:8d:
56:f0:36:d9:f2:e6:3f:4e:b7:b5:dc:c7:68:1a:37:
b5:e4:7e:ea:aa:93:51:71:69:ee:f6:84:43:d7:f7:
b9:08:d7:b5:92:43:fe:59:86:f8:a6:dd:21:0b:dd:
a0:98:be:fb:3a:41:37:e2:47:35:6c:83:c0:a1:50:
81:c5:98:b3:9c:bc:00:de:3c:2c:bc:2a:fc:f6:4b:
e1:d7:bd:53:c7:d2:cc:ea:cf:d3:ae:70:24:c9:58:
45:5b:66:ae:6e:c3:bf:e1:20:b0:e7:9e:81:bb:3e:
8e:dd:48:ce:e4:bc:36:9e:24:ed:a7:43:b7:87:44:
2b:b3:d8:4f:ad:d4:ac:24:0c:2e:ec:56:64:47:fd:
ef:31:fa:b9:ff:d5:bb:68:b2:b7:6f:e4:e6:37:6e:
09:9c:a9:9e:c5:69:df:64:fd:c1:39:c1:d2:c8:30:
ee:5e:38:65:00:42:61:07:c6:32:00:71:3f:0d:97:
d5:c6:e8:de:60:b4:6e:a8:1b:6a:15:0e:9c:3a:b7:
09:ab:59:26:51:14:58:b0:0f:db:62:35:41:f9:49:
ea:40:98:30:41:a0:44:81:3e:ef:b8:2c:5a:22:ae:
1f:44:da:16:fc:cf:67:d7:f9:28:db:e5:4e:25:36:
35:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B4:40:A7:61:C1:3C:75:FE:31:C8:85:CB:5E:BF:9C:39:88:E5:45
X509v3 Authority Key Identifier:
keyid:52:9C:A5:A6:E5:D6:74:21:F3:F2:CD:21:13:8C:B7:07:04:85:09:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpylpuXWdCHz8s0hE4y3BwSFCVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:93:63:57:cc:7d:3b:76:b0:fe:fa:24:3e:25:b6:37:b7:2a:
44:88:85:bb:16:2f:05:69:d7:29:82:6c:e3:91:8f:8d:d1:cf:
06:de:99:cb:80:23:7a:0f:6c:e5:8b:01:38:18:b9:d1:e4:bc:
1d:b9:68:cf:fa:f9:96:bf:8a:cb:8d:7d:7d:1b:38:ac:69:bb:
83:ba:e1:6a:63:9f:b1:91:fc:23:2f:68:b5:cc:fd:14:58:e6:
7f:a5:61:98:c3:4f:53:a7:24:aa:39:7a:bd:df:d4:f5:75:42:
51:45:45:4f:57:ad:c4:60:ff:ee:c7:57:74:f9:64:d9:8c:8a:
69:21:23:57:85:8d:8d:cb:e7:24:ff:05:3f:fe:4a:e7:77:44:
b2:c0:63:d6:a3:cb:79:3e:63:c1:0f:1a:af:73:06:4a:a0:d6:
36:13:80:86:6a:0b:3c:13:b9:b2:ac:91:fe:1f:0a:28:0b:5b:
89:11:93:c0:d3:25:45:51:04:e2:21:11:f6:ff:61:15:73:f8:
9e:0a:2c:4d:18:20:20:f1:2b:2e:06:c3:31:35:77:33:7d:5d:
f9:96:6a:40:f0:25:21:7a:f8:8f:50:b5:fa:dc:89:5e:e9:5b:
35:7c:e0:59:72:78:47:9d:1b:3a:93:29:b4:a7:aa:66:f9:a4:
99:d4:95:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:48:09 2025 by rpki-client