Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft
File: UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft (raw, json)
Hash identifier: myLvMoaYx6+PJBwb8nVrXDIFWRR8QOab6sunjq3Ey/o=
Subject key identifier: 64:A4:52:D3:7D:56:0F:70:82:74:55:64:AF:65:AB:23:36:54:A2:82
Authority key identifier: 52:D6:61:A9:48:F2:BF:34:90:E8:9D:82:52:F2:CC:C8:74:7C:E5:C7
Certificate issuer: /CN=52d661a948f2bf3490e89d8252f2ccc8747ce5c7
Certificate serial: 0198D58390E39413562A61036F5EFA9B8F6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtZhqUjyvzSQ6J2CUvLMyHR85cc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft
Manifest number: 1426
Signing time: Sat 23 Aug 2025 06:00:25 +0000
Manifest this update: Sat 23 Aug 2025 06:00:25 +0000
Manifest next update: Sun 24 Aug 2025 06:00:25 +0000
Files and hashes: 1: En0AxaNswsA9xI4lqkSKkt-F7C0.roa (hash: q8FwSEiSjvslMUXDVxvqWzOjw6rMu6h87zO4Dcum1yM=)
2: UtZhqUjyvzSQ6J2CUvLMyHR85cc.crl (hash: vXc243n2JslP94OWh76rwMPDqY+4/SgZpqawN4AjMX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft
rsync://rpki.ripe.net/repository/DEFAULT/UtZhqUjyvzSQ6J2CUvLMyHR85cc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:90:e3:94:13:56:2a:61:03:6f:5e:fa:9b:8f:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52d661a948f2bf3490e89d8252f2ccc8747ce5c7
Validity
Not Before: Aug 23 06:00:25 2025 GMT
Not After : Aug 24 06:00:25 2025 GMT
Subject: CN=64a452d37d560f7082745564af65ab233654a282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:df:cd:1c:d0:05:a1:68:8b:17:f5:1d:eb:53:
88:38:7b:6d:e9:a1:36:22:fa:98:22:00:4e:5d:48:
cc:5e:ca:09:7a:f7:de:70:9b:72:b5:0d:a2:16:42:
60:4e:05:6a:5c:25:72:36:b9:49:e8:b8:52:3c:c4:
90:c3:44:12:b7:7e:a8:e5:53:87:e1:ba:a0:a7:14:
c1:c1:aa:34:4a:ac:2b:d1:ae:18:a0:58:c3:0f:21:
07:68:be:94:73:9e:b6:6d:2c:7d:37:d6:58:39:48:
4a:b2:ac:af:d4:86:3e:f8:96:f8:8d:fd:9f:11:7c:
40:12:f3:0f:5b:09:7a:a3:fe:5f:2a:82:d0:ae:35:
18:24:42:a2:70:e5:31:a0:a9:99:ec:22:e9:df:49:
30:64:80:bf:46:af:4d:83:4c:b6:5e:34:d3:10:2f:
8e:20:16:50:bd:b0:6b:37:3e:7e:fd:ed:e6:e7:c2:
a5:5c:69:d5:da:e6:df:81:c2:ef:86:25:df:b9:7b:
fd:62:3b:15:e5:bf:ef:f8:df:97:15:c6:bb:56:ff:
51:07:e5:6a:c5:74:cf:74:a4:95:7d:e1:dc:35:4e:
33:88:60:3b:f8:b9:45:4e:99:f8:eb:e6:28:91:98:
a3:8c:d7:f3:31:de:49:8c:17:2b:4c:13:6d:2c:28:
66:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A4:52:D3:7D:56:0F:70:82:74:55:64:AF:65:AB:23:36:54:A2:82
X509v3 Authority Key Identifier:
keyid:52:D6:61:A9:48:F2:BF:34:90:E8:9D:82:52:F2:CC:C8:74:7C:E5:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtZhqUjyvzSQ6J2CUvLMyHR85cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:66:79:6c:30:39:30:36:fe:50:de:af:6f:b1:f4:e3:eb:6c:
c1:71:25:67:55:99:f3:3b:ca:5a:a4:6f:70:2e:33:a3:34:52:
78:7e:09:1f:3e:eb:a1:4c:fb:0d:6f:a7:51:a5:d6:1f:d2:e4:
ed:c3:77:64:49:ae:7f:91:48:ef:7d:47:a9:5f:fa:e8:a8:dd:
7b:28:29:2f:c9:69:61:24:a6:db:fd:44:a2:de:e1:eb:0c:e0:
5e:d6:80:13:d3:ac:35:ab:1e:9c:e1:29:7c:ab:a7:de:bf:6c:
5d:20:14:86:ff:61:f4:88:b3:ff:96:d9:87:dd:1d:b9:be:7e:
5f:b8:73:6f:29:2c:e9:f3:ca:2c:4c:1a:bb:b7:2e:04:b7:c6:
e4:fc:2e:e4:c3:36:99:c3:5a:da:43:d8:ad:b1:9c:b5:6e:35:
3a:57:5f:80:05:2b:bd:9f:25:79:f2:63:e3:db:dd:ee:8c:9e:
21:bc:64:b3:94:2a:10:81:a4:09:2e:bb:3a:16:6d:a9:1e:6b:
3d:86:e0:ae:b8:0f:a4:44:df:8d:d6:3f:45:e8:c1:3b:c2:23:
4d:86:af:49:16:2a:1d:f8:2c:7f:7e:ee:70:4f:e9:69:f1:c1:
e4:9e:8c:a2:30:62:b1:8d:c7:b0:e5:b9:d3:1b:8e:d4:4a:14:
8b:19:9f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:23 2025 by rpki-client