Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/UTBvX0bb20E2BCor440F0iKnx2E.mft
File: UTBvX0bb20E2BCor440F0iKnx2E.mft (raw, json)
Hash identifier: W5cu820NAB+YC4mqUWeJ1QSWoOKYd0NAP1OMdqjwSDo=
Subject key identifier: 2E:41:07:66:A7:A8:3C:C1:2A:CF:04:6E:6A:84:5B:25:48:CD:67:C3
Authority key identifier: 51:30:6F:5F:46:DB:DB:41:36:04:2A:2B:E3:8D:05:D2:22:A7:C7:61
Certificate issuer: /CN=51306f5f46dbdb4136042a2be38d05d222a7c761
Certificate serial: 0199FC2149B003A504A25BD5863E669FAE13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UTBvX0bb20E2BCor440F0iKnx2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/UTBvX0bb20E2BCor440F0iKnx2E.mft
Manifest number: 6E
Signing time: Sun 19 Oct 2025 11:01:03 +0000
Manifest this update: Sun 19 Oct 2025 11:01:03 +0000
Manifest next update: Mon 20 Oct 2025 11:01:03 +0000
Files and hashes: 1: UTBvX0bb20E2BCor440F0iKnx2E.crl (hash: dQX9L9G2NhVYzdIRv2eIvnDh8k6zXrZU0bFP5GpBZnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/UTBvX0bb20E2BCor440F0iKnx2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/UTBvX0bb20E2BCor440F0iKnx2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/UTBvX0bb20E2BCor440F0iKnx2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:49:b0:03:a5:04:a2:5b:d5:86:3e:66:9f:ae:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51306f5f46dbdb4136042a2be38d05d222a7c761
Validity
Not Before: Oct 19 11:01:03 2025 GMT
Not After : Oct 20 11:01:03 2025 GMT
Subject: CN=2e410766a7a83cc12acf046e6a845b2548cd67c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:27:8b:fa:28:12:6b:81:54:04:39:0c:87:c0:
29:d3:16:f1:58:42:b3:17:c0:00:19:de:f9:26:6e:
b9:4d:48:86:31:d0:2d:de:e2:b7:d4:6d:32:24:9d:
83:48:b3:80:ff:a2:9e:76:bc:2a:85:5b:72:d3:20:
ec:25:45:cb:6a:71:52:c2:07:49:48:a0:bd:62:53:
2c:15:4c:85:e5:ae:5e:c6:19:e7:33:e0:dd:9f:59:
a9:14:d2:d3:54:f3:55:8d:0c:14:0c:2d:84:d5:a3:
52:9b:e1:94:49:a7:1c:de:b2:77:5f:fb:17:17:93:
ac:30:12:29:05:c4:17:2c:f1:75:db:41:aa:1b:e0:
94:a8:4e:6c:37:b5:54:cc:03:7c:c3:b1:f0:ce:dd:
d6:f0:92:95:e3:0d:95:64:48:ce:fb:14:1b:de:f3:
49:a3:02:13:47:69:36:3d:dd:19:99:26:f9:18:1d:
15:38:57:db:c7:07:4c:82:ae:92:07:2d:35:ed:60:
7f:8c:b4:24:d5:e3:a7:5d:f7:81:93:b9:e3:02:15:
2f:72:01:6e:69:fb:95:34:bd:a3:30:d6:f9:2b:a9:
06:0f:32:f3:31:04:97:9d:e3:07:98:93:3d:88:b9:
4c:5b:d1:7a:4b:0f:a1:43:e9:cf:8a:9b:2c:00:a4:
d6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:41:07:66:A7:A8:3C:C1:2A:CF:04:6E:6A:84:5B:25:48:CD:67:C3
X509v3 Authority Key Identifier:
keyid:51:30:6F:5F:46:DB:DB:41:36:04:2A:2B:E3:8D:05:D2:22:A7:C7:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTBvX0bb20E2BCor440F0iKnx2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/UTBvX0bb20E2BCor440F0iKnx2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/UTBvX0bb20E2BCor440F0iKnx2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:f3:d9:3f:e3:7b:20:e9:af:3d:dc:54:db:dc:c7:f8:67:2f:
40:c0:30:c0:1b:fe:39:73:70:b8:f0:f6:46:08:2c:02:f5:c1:
02:90:ff:09:47:6d:ad:4c:c3:bc:6c:8f:c3:41:11:6e:d8:ee:
9c:c7:0a:42:e0:ef:06:74:ef:7a:ed:2a:cc:e1:d3:74:62:f6:
bf:28:3e:29:16:83:73:8d:6a:2c:97:c3:ce:52:3b:98:3c:c2:
f6:ff:d2:84:e8:4b:3f:44:a1:f5:c9:54:a2:d9:f2:b1:8f:a6:
52:89:16:6e:ff:ab:ae:e0:c8:40:13:f5:1c:17:ab:8b:b3:14:
55:1c:13:e1:2d:f5:9f:e7:52:e5:5b:a0:b0:6b:f7:34:8a:40:
c8:d7:4b:34:ad:9a:a8:ae:69:da:48:17:b2:e6:52:25:d5:88:
35:a8:2e:48:ff:d3:e8:5d:c2:b4:8f:06:0f:c8:b5:94:80:5b:
63:ef:e6:5f:4d:3b:fc:78:b6:c1:b6:e4:06:3a:6d:cf:08:99:
34:56:8f:cf:ed:98:f7:07:d2:26:ed:86:f6:88:37:18:23:59:
83:89:c6:b7:ed:29:c1:f9:67:48:54:49:98:f5:7d:84:21:eb:
37:ac:02:7d:01:1e:ac:ca:1f:4b:67:e5:58:48:29:3b:b0:2b:
aa:80:fd:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:12 2025 by rpki-client