Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/10429b-8049-47a2-ab99-256db3ed8335/1/UpJ4MtOYUOhR7staBRFpKZHdpdk.mft
File: UpJ4MtOYUOhR7staBRFpKZHdpdk.mft (raw, json)
Hash identifier: Z0RBf8oO/69AVCjmuKztvrNM6Ec6LWYamLcS3ndmV20=
Subject key identifier: 30:6D:4B:BA:BA:2A:74:61:66:18:67:F5:BC:46:79:CD:76:AF:4F:32
Authority key identifier: 52:92:78:32:D3:98:50:E8:51:EE:CB:5A:05:11:69:29:91:DD:A5:D9
Certificate issuer: /CN=52927832d39850e851eecb5a0511692991dda5d9
Certificate serial: 019A50E432A47FBCB94D3657EDFFD74A5E8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpJ4MtOYUOhR7staBRFpKZHdpdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/10429b-8049-47a2-ab99-256db3ed8335/1/UpJ4MtOYUOhR7staBRFpKZHdpdk.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 22:02:03 +0000
Manifest this update: Tue 04 Nov 2025 22:02:03 +0000
Manifest next update: Wed 05 Nov 2025 22:02:03 +0000
Files and hashes: 1: UpJ4MtOYUOhR7staBRFpKZHdpdk.crl (hash: tYqVk7hNfTdMgGg6Uldb/DD4DAGfB8sdjoUlSLKPyd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/10429b-8049-47a2-ab99-256db3ed8335/1/UpJ4MtOYUOhR7staBRFpKZHdpdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/10429b-8049-47a2-ab99-256db3ed8335/1/UpJ4MtOYUOhR7staBRFpKZHdpdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UpJ4MtOYUOhR7staBRFpKZHdpdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e4:32:a4:7f:bc:b9:4d:36:57:ed:ff:d7:4a:5e:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52927832d39850e851eecb5a0511692991dda5d9
Validity
Not Before: Nov 4 22:02:03 2025 GMT
Not After : Nov 5 22:02:03 2025 GMT
Subject: CN=306d4bbaba2a7461661867f5bc4679cd76af4f32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bb:ce:7b:8c:4b:63:fb:a2:67:8b:29:44:d8:
92:2b:07:d3:ef:4c:27:28:06:b3:0a:72:66:84:31:
53:aa:c5:8e:51:e0:ce:3b:c4:4e:c9:04:e5:d4:28:
45:45:cc:d0:1a:79:48:43:de:92:25:f5:1e:7e:1f:
29:d3:0b:b2:18:dc:5a:27:16:6d:93:4f:bb:dc:7b:
fc:7a:00:c9:67:60:2c:4d:b9:43:86:bf:09:95:69:
69:77:bf:0c:24:54:7d:df:7b:ac:d9:06:27:c6:67:
fd:cd:70:b2:56:40:94:52:c1:4b:f1:8f:f5:5d:b7:
a3:10:23:0d:94:60:dc:80:cc:e3:a0:24:fd:f2:14:
65:e0:e5:dd:93:13:cd:d9:2e:8f:a8:7f:a5:56:5f:
ca:a2:00:fd:ee:95:9b:a0:b5:61:2a:49:1c:3e:b5:
e1:44:9c:a6:76:3e:62:c3:e5:7e:73:34:64:f4:db:
96:4c:2a:39:08:9b:2b:78:2d:c6:a1:c8:89:7e:29:
7d:b3:63:e6:fe:56:37:77:d7:c0:4e:68:43:4f:57:
1b:c2:84:5a:47:d2:af:5a:57:76:11:03:73:ca:30:
88:bc:87:42:30:fc:04:42:6b:46:03:a1:36:3d:b9:
fb:ff:46:ef:f5:e3:13:f5:85:4a:ad:d7:89:5c:ba:
d2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:6D:4B:BA:BA:2A:74:61:66:18:67:F5:BC:46:79:CD:76:AF:4F:32
X509v3 Authority Key Identifier:
keyid:52:92:78:32:D3:98:50:E8:51:EE:CB:5A:05:11:69:29:91:DD:A5:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpJ4MtOYUOhR7staBRFpKZHdpdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/10429b-8049-47a2-ab99-256db3ed8335/1/UpJ4MtOYUOhR7staBRFpKZHdpdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/10429b-8049-47a2-ab99-256db3ed8335/1/UpJ4MtOYUOhR7staBRFpKZHdpdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:f6:ed:c9:1c:64:f3:22:1a:1b:5a:46:a8:02:80:89:a5:1c:
87:89:6d:33:3d:17:89:74:e7:df:45:e6:ef:40:02:1f:a6:f3:
f1:cf:c0:76:29:06:fd:b2:3e:81:fc:fe:99:73:e2:91:6a:2b:
b6:7b:31:28:9c:65:d5:cf:f9:b2:65:cb:3d:a8:49:5e:84:7f:
36:b0:c3:2b:63:65:09:cf:99:12:91:73:b3:4e:6a:f1:e4:23:
93:6a:c6:02:de:6d:db:00:83:98:36:3f:2c:5d:44:b2:db:a1:
66:b0:f5:72:ca:a8:f1:99:e7:ba:f2:51:bf:dc:3d:62:3c:df:
15:19:37:0a:10:39:b1:9b:4d:cb:c0:1c:21:81:a3:e2:95:c4:
48:4b:40:a9:d0:30:0e:5e:13:71:0c:25:40:15:ed:e9:d6:49:
2b:f2:72:dc:c9:77:c2:15:4f:71:5d:96:87:79:79:0c:98:14:
ca:68:c8:11:59:e9:d5:e2:33:42:c3:94:e1:83:f5:c2:b5:42:
be:8f:4f:87:9a:ee:37:f3:82:96:05:e6:e5:e1:86:64:61:c3:
ae:7d:eb:15:71:47:4c:a0:30:17:eb:79:04:79:dd:23:62:53:
9c:6c:f2:be:d8:b0:d1:74:14:a0:c3:79:e3:eb:e2:9f:cf:1d:
5f:a9:df:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ5DKkf7y5TTZX7f/XSl6NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyOTI3ODMyZDM5ODUwZTg1MWVlY2I1YTA1MTE2OTI5OTFk
ZGE1ZDkwHhcNMjUxMTA0MjIwMjAzWhcNMjUxMTA1MjIwMjAzWjAzMTEwLwYDVQQD
EygzMDZkNGJiYWJhMmE3NDYxNjYxODY3ZjViYzQ2NzljZDc2YWY0ZjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLvOe4xLY/uiZ4spRNiSKwfT70wn
KAazCnJmhDFTqsWOUeDOO8ROyQTl1ChFRczQGnlIQ96SJfUefh8p0wuyGNxaJxZt
k0+73Hv8egDJZ2AsTblDhr8JlWlpd78MJFR933us2QYnxmf9zXCyVkCUUsFL8Y/1
XbejECMNlGDcgMzjoCT98hRl4OXdkxPN2S6PqH+lVl/KogD97pWboLVhKkkcPrXh
RJymdj5iw+V+czRk9NuWTCo5CJsreC3GociJfil9s2Pm/lY3d9fATmhDT1cbwoRa
R9KvWld2EQNzyjCIvIdCMPwEQmtGA6E2Pbn7/0bv9eMT9YVKrdeJXLrS0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDBtS7q6KnRhZhhn9bxGec12r08yMB8GA1UdIwQY
MBaAFFKSeDLTmFDoUe7LWgURaSmR3aXZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXBKNE10T1lVT2hSN3N0YUJSRnBLWkhkcGRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xMDQyOWItODA0OS00N2EyLWFiOTkt
MjU2ZGIzZWQ4MzM1LzEvVXBKNE10T1lVT2hSN3N0YUJSRnBLWkhkcGRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8xMDQyOWItODA0OS00N2EyLWFiOTktMjU2ZGIzZWQ4MzM1
LzEvVXBKNE10T1lVT2hSN3N0YUJSRnBLWkhkcGRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbvbtyRxk
8yIaG1pGqAKAiaUch4ltMz0XiXTn30Xm70ACH6bz8c/AdikG/bI+gfz+mXPikWor
tnsxKJxl1c/5smXLPahJXoR/NrDDK2NlCc+ZEpFzs05q8eQjk2rGAt5t2wCDmDY/
LF1EstuhZrD1csqo8ZnnuvJRv9w9YjzfFRk3ChA5sZtNy8AcIYGj4pXESEtAqdAw
Dl4TcQwlQBXt6dZJK/Jy3Ml3whVPcV2Wh3l5DJgUymjIEVnp1eIzQsOU4YP1wrVC
vo9Ph5ruN/OClgXm5eGGZGHDrn3rFXFHTKAwF+t5BHndI2JTnGzyvtiw0XQUoMN5
4+vin88dX6nf9g==
-----END CERTIFICATE-----
Generated at Wed Nov 5 01:47:57 2025 by rpki-client