Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.mft
File: UpylpuXWdCHz8s0hE4y3BwSFCVU.mft (raw, json)
Hash identifier: CJb0+XRrwqIfNU4xnHNpku3RNC9xXeTaHhdlH/ukwTE=
Subject key identifier: 0F:47:FE:E0:00:A0:08:52:11:92:9A:CB:E6:CF:8B:57:C0:56:C1:33
Authority key identifier: 52:9C:A5:A6:E5:D6:74:21:F3:F2:CD:21:13:8C:B7:07:04:85:09:55
Certificate issuer: /CN=529ca5a6e5d67421f3f2cd21138cb70704850955
Certificate serial: 01968247689D897074E7E52DDAC8B8FFC60F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpylpuXWdCHz8s0hE4y3BwSFCVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.mft
Manifest number: 14A9
Signing time: Tue 29 Apr 2025 16:00:40 +0000
Manifest this update: Tue 29 Apr 2025 16:00:40 +0000
Manifest next update: Wed 30 Apr 2025 16:00:40 +0000
Files and hashes: 1: 5DYNtQhmHm5xId84-qYm__d0Jxg.roa (hash: M0kddqhlCcHa9Skioom20ixZlz/BFkuuxsQkLcWGHLA=)
2: UpylpuXWdCHz8s0hE4y3BwSFCVU.crl (hash: Vu3F+fyJs/88swYqNC0KAODWsCf2JT5SZElF40UHzg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/UpylpuXWdCHz8s0hE4y3BwSFCVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:47:68:9d:89:70:74:e7:e5:2d:da:c8:b8:ff:c6:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529ca5a6e5d67421f3f2cd21138cb70704850955
Validity
Not Before: Apr 29 16:00:40 2025 GMT
Not After : Apr 30 16:00:40 2025 GMT
Subject: CN=0f47fee000a0085211929acbe6cf8b57c056c133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:9c:9f:97:d7:f8:8c:c4:55:c5:83:c4:e1:78:
58:43:fa:aa:72:6e:ef:3f:c2:55:2c:a0:72:b5:36:
84:d6:01:f5:7f:c3:a2:ef:43:91:d5:5c:18:22:c4:
ac:c5:d3:b1:ec:91:dc:80:db:5b:38:71:f7:87:72:
4d:38:37:79:f9:09:fb:ae:66:5f:86:2a:e8:d7:9b:
b1:68:6f:f0:17:50:39:b4:34:1f:82:0b:c4:d5:6c:
a8:99:e3:92:21:51:48:90:a4:7d:9d:d5:0e:9c:ef:
5d:aa:58:92:58:7d:c9:93:81:99:0b:09:57:a2:05:
25:af:1a:fb:e0:08:ac:15:ba:76:85:46:c5:f9:45:
f3:8b:a7:72:14:e5:b8:30:e0:9c:96:ae:10:49:64:
18:33:f8:3b:ad:43:91:7c:d1:fd:11:a6:50:64:f8:
16:c7:2a:14:ea:e1:b9:46:e0:ee:e1:b4:4f:d1:34:
88:4a:46:bd:69:48:a3:07:1d:1c:38:e0:2c:11:2f:
66:e8:69:1b:96:7a:9b:bb:d0:0c:a9:97:60:a3:6b:
2e:f0:f3:d8:02:9a:32:ff:36:4b:91:db:fc:91:89:
b1:9c:9b:45:a5:b1:b8:f9:4d:fa:d2:5b:52:8f:04:
52:23:78:1f:2a:51:e6:5f:77:66:32:66:84:7e:12:
5b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:47:FE:E0:00:A0:08:52:11:92:9A:CB:E6:CF:8B:57:C0:56:C1:33
X509v3 Authority Key Identifier:
keyid:52:9C:A5:A6:E5:D6:74:21:F3:F2:CD:21:13:8C:B7:07:04:85:09:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpylpuXWdCHz8s0hE4y3BwSFCVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:88:17:dd:0d:56:c0:43:ce:92:ed:cd:c7:e5:f0:15:9f:eb:
10:a0:fc:bc:f9:94:3c:28:d4:17:29:f4:b3:54:80:65:0e:71:
61:ac:11:3b:5f:27:d9:3d:5c:c2:c9:35:53:c2:20:69:c3:fb:
db:21:2f:43:cf:0a:87:bd:b4:ba:63:95:93:87:1c:95:e4:00:
9f:e0:75:d2:59:97:0a:51:7b:28:89:1e:96:eb:5e:1d:cf:68:
5d:0d:e8:d1:91:76:6d:0b:9c:0d:23:d6:23:73:aa:a7:1c:6d:
f0:13:55:9d:dd:ae:a3:60:59:74:8c:d4:f9:1a:ca:d3:3b:74:
c3:a6:8d:d1:51:49:ad:83:91:e0:f2:47:e0:84:62:ca:93:6c:
13:ec:d7:b5:8b:4f:40:bc:ec:7e:e3:92:99:32:ae:74:10:ab:
32:4a:df:c1:36:5f:05:a2:e2:3c:35:fc:dc:a0:72:9e:d6:ab:
6e:9d:4b:49:2b:8d:7d:78:90:e8:8d:73:41:49:63:c1:0a:af:
3a:93:48:8d:8a:f0:6a:6e:e0:97:4c:b3:42:e2:d8:8a:fe:29:
b1:db:79:76:82:42:e9:a8:0d:51:64:54:4b:1d:6f:93:e8:03:
5e:fa:69:7d:6e:65:fa:70:3f:e5:0f:2d:0e:87:8a:62:64:d2:
ec:42:43:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaCR2idiXB05+Ut2si4/8YPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyOWNhNWE2ZTVkNjc0MjFmM2YyY2QyMTEzOGNiNzA3MDQ4
NTA5NTUwHhcNMjUwNDI5MTYwMDQwWhcNMjUwNDMwMTYwMDQwWjAzMTEwLwYDVQQD
EygwZjQ3ZmVlMDAwYTAwODUyMTE5MjlhY2JlNmNmOGI1N2MwNTZjMTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Zyfl9f4jMRVxYPE4XhYQ/qqcm7v
P8JVLKBytTaE1gH1f8Oi70OR1VwYIsSsxdOx7JHcgNtbOHH3h3JNODd5+Qn7rmZf
hiro15uxaG/wF1A5tDQfggvE1WyomeOSIVFIkKR9ndUOnO9dqliSWH3Jk4GZCwlX
ogUlrxr74AisFbp2hUbF+UXzi6dyFOW4MOCclq4QSWQYM/g7rUORfNH9EaZQZPgW
xyoU6uG5RuDu4bRP0TSISka9aUijBx0cOOAsES9m6Gkblnqbu9AMqZdgo2su8PPY
Apoy/zZLkdv8kYmxnJtFpbG4+U360ltSjwRSI3gfKlHmX3dmMmaEfhJbYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA9H/uAAoAhSEZKay+bPi1fAVsEzMB8GA1UdIwQY
MBaAFFKcpabl1nQh8/LNIROMtwcEhQlVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXB5bHB1WFdkQ0h6OHMwaEU0eTNCd1NGQ1ZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC82MGY5YWMtMDUzYS00Njg5LWIwODEt
M2EzYTlmMDI0MmI4LzEvVXB5bHB1WFdkQ0h6OHMwaEU0eTNCd1NGQ1ZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC82MGY5YWMtMDUzYS00Njg5LWIwODEtM2EzYTlmMDI0MmI4
LzEvVXB5bHB1WFdkQ0h6OHMwaEU0eTNCd1NGQ1ZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABogX3Q1W
wEPOku3Nx+XwFZ/rEKD8vPmUPCjUFyn0s1SAZQ5xYawRO18n2T1cwsk1U8IgacP7
2yEvQ88Kh720umOVk4ccleQAn+B10lmXClF7KIkeluteHc9oXQ3o0ZF2bQucDSPW
I3Oqpxxt8BNVnd2uo2BZdIzU+RrK0zt0w6aN0VFJrYOR4PJH4IRiypNsE+zXtYtP
QLzsfuOSmTKudBCrMkrfwTZfBaLiPDX83KByntarbp1LSSuNfXiQ6I1zQUljwQqv
OpNIjYrwam7gl0yzQuLYiv4psdt5doJC6agNUWRUSx1vk+gDXvppfW5l+nA/5Q8t
DoeKYmTS7EJDjw==
-----END CERTIFICATE-----
Generated at Tue Apr 29 19:59:38 2025 by rpki-client