Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/f58cf3-6909-458a-a51a-5914f9d3378b/1/UTIqxJAgylfHTzsUi8BBAsq63IM.mft
File: UTIqxJAgylfHTzsUi8BBAsq63IM.mft (raw, json)
Hash identifier: d/8BwBwKO3O6YUyuS2qS7xg4SPRH92YLw8muNgvH8qw=
Subject key identifier: 24:8C:E4:04:9B:98:F0:57:CF:7E:A4:46:7A:FD:29:17:4F:2F:8B:3E
Authority key identifier: 51:32:2A:C4:90:20:CA:57:C7:4F:3B:14:8B:C0:41:02:CA:BA:DC:83
Certificate issuer: /CN=51322ac49020ca57c74f3b148bc04102cabadc83
Certificate serial: 0197B7EA45F683846B10E980733341B81737
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UTIqxJAgylfHTzsUi8BBAsq63IM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/f58cf3-6909-458a-a51a-5914f9d3378b/1/UTIqxJAgylfHTzsUi8BBAsq63IM.mft
Manifest number: 1091
Signing time: Sat 28 Jun 2025 19:01:13 +0000
Manifest this update: Sat 28 Jun 2025 19:01:13 +0000
Manifest next update: Sun 29 Jun 2025 19:01:13 +0000
Files and hashes: 1: UTIqxJAgylfHTzsUi8BBAsq63IM.crl (hash: LcWd6akIp+Howptajd+nxiDLAYFTtdcICg627w6Plhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/f58cf3-6909-458a-a51a-5914f9d3378b/1/UTIqxJAgylfHTzsUi8BBAsq63IM.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/f58cf3-6909-458a-a51a-5914f9d3378b/1/UTIqxJAgylfHTzsUi8BBAsq63IM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UTIqxJAgylfHTzsUi8BBAsq63IM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:45:f6:83:84:6b:10:e9:80:73:33:41:b8:17:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51322ac49020ca57c74f3b148bc04102cabadc83
Validity
Not Before: Jun 28 19:01:13 2025 GMT
Not After : Jun 29 19:01:13 2025 GMT
Subject: CN=248ce4049b98f057cf7ea4467afd29174f2f8b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:a0:ce:12:32:e6:d3:e8:76:c6:81:e4:df:18:
85:53:15:e5:20:07:75:84:98:9c:06:b8:5b:60:4d:
9b:f9:e5:e2:2d:61:5c:ec:22:06:d0:69:12:79:f1:
2f:fa:82:22:c1:23:66:58:71:fe:fa:08:5e:72:fb:
f1:3c:32:24:22:38:de:df:86:e6:be:04:1f:ef:92:
c9:3d:82:62:b8:54:6c:f0:93:a1:82:44:69:b5:d6:
9c:13:3a:15:a5:ee:d8:bb:04:6b:2b:2b:75:47:8e:
58:4b:b1:19:45:dc:a7:bf:d3:d6:fb:f6:c1:77:26:
e9:b9:f3:67:df:aa:0a:a0:21:a5:88:d4:1d:88:89:
d7:ad:3e:73:aa:61:74:0e:12:87:f2:ac:91:31:0c:
f7:35:a0:c6:a8:d9:cf:9b:a5:77:e6:53:24:6c:3c:
e9:9e:e8:1a:a9:02:47:01:bc:58:3e:2c:05:a0:49:
5e:7d:de:e8:bb:ea:b7:0b:d2:b4:13:64:95:fa:49:
50:4b:11:48:d5:95:d3:5d:9c:77:b3:a8:bb:27:94:
34:ef:c0:27:94:c3:b1:95:a6:32:b8:eb:85:c7:4b:
79:b6:23:e7:9c:88:0c:b9:09:78:39:a7:ac:78:cf:
67:1f:d5:c3:f8:53:c6:49:16:8e:74:24:9b:84:65:
b5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:8C:E4:04:9B:98:F0:57:CF:7E:A4:46:7A:FD:29:17:4F:2F:8B:3E
X509v3 Authority Key Identifier:
keyid:51:32:2A:C4:90:20:CA:57:C7:4F:3B:14:8B:C0:41:02:CA:BA:DC:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTIqxJAgylfHTzsUi8BBAsq63IM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f58cf3-6909-458a-a51a-5914f9d3378b/1/UTIqxJAgylfHTzsUi8BBAsq63IM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f58cf3-6909-458a-a51a-5914f9d3378b/1/UTIqxJAgylfHTzsUi8BBAsq63IM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:75:40:96:fd:42:cb:27:9a:b3:45:c1:72:f3:85:4d:4d:b7:
af:3d:61:e0:57:12:35:06:f5:6c:e2:b8:2f:97:d1:f9:cb:ba:
d1:44:ef:2d:ce:1b:a4:ba:bd:82:7a:c1:b8:b8:59:fa:8d:5c:
70:0e:b1:6e:41:03:75:58:80:f3:b3:8a:1a:6c:f2:ad:8e:bb:
d6:7d:db:dd:7c:27:b0:de:f7:55:dd:3b:d1:9a:23:63:b2:e0:
3e:3a:5d:eb:70:2b:0f:0d:04:00:04:83:98:b5:ae:c6:cc:34:
ca:84:fc:31:d2:c8:48:04:52:25:0a:6f:4e:4c:b9:77:5b:ee:
bf:9f:95:ce:84:ee:0a:01:17:3f:8c:fb:34:c4:db:1f:76:84:
e9:da:ac:4f:da:37:05:0b:44:a1:37:b3:2a:de:c2:06:de:1a:
99:34:0e:f3:cd:4a:d8:b5:c3:1e:5a:57:1b:e3:12:4d:62:5a:
84:5b:59:02:9f:b1:53:44:88:b4:3d:06:2d:78:88:ca:54:63:
c7:96:52:00:07:1b:7d:d9:9e:c7:8a:90:62:9e:4e:9e:1e:8a:
2f:a8:8a:e1:a2:ff:9a:d0:c7:7b:1b:ba:2d:08:ac:93:45:d9:
23:64:04:f0:92:47:9f:d3:58:2a:9b:12:71:17:6a:68:63:7b:
cd:f6:9b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:46:28 2025 by rpki-client