
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/4ff275-6892-4690-8f68-30d4c5729146/1/UtAEYyC9KzE3QouZzMNLGEoGrKo.mft
File: UtAEYyC9KzE3QouZzMNLGEoGrKo.mft (raw, json)
Hash identifier: PbPhgELj9n39CVPFQeQxjQM7q3EIL7Sy41RyezBD4/A=
Subject key identifier: 05:5E:54:73:74:7F:AF:DB:3F:04:6C:F0:63:08:78:86:01:B1:54:AE
Authority key identifier: 52:D0:04:63:20:BD:2B:31:37:42:8B:99:CC:C3:4B:18:4A:06:AC:AA
Certificate issuer: /CN=52d0046320bd2b3137428b99ccc34b184a06acaa
Certificate serial: 0197B5FC6727555F71525DF84A6FD04CA828
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtAEYyC9KzE3QouZzMNLGEoGrKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/4ff275-6892-4690-8f68-30d4c5729146/1/UtAEYyC9KzE3QouZzMNLGEoGrKo.mft
Manifest number: 0A
Signing time: Sat 28 Jun 2025 10:01:46 +0000
Manifest this update: Sat 28 Jun 2025 10:01:46 +0000
Manifest next update: Sun 29 Jun 2025 10:01:46 +0000
Files and hashes: 1: UtAEYyC9KzE3QouZzMNLGEoGrKo.crl (hash: 9Mn1FZJDpC+DWy93eP+4SuUuSRQnmhxn0jB8+JOzzyc=)
2: aRt1vYt8aGjm4T2P_cchcqkhKi4.roa (hash: akOfuFfDuYlZDl5i1xYQCB4WC7oFit9P5KLda+bnyYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/4ff275-6892-4690-8f68-30d4c5729146/1/UtAEYyC9KzE3QouZzMNLGEoGrKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/4ff275-6892-4690-8f68-30d4c5729146/1/UtAEYyC9KzE3QouZzMNLGEoGrKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UtAEYyC9KzE3QouZzMNLGEoGrKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:67:27:55:5f:71:52:5d:f8:4a:6f:d0:4c:a8:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52d0046320bd2b3137428b99ccc34b184a06acaa
Validity
Not Before: Jun 28 10:01:46 2025 GMT
Not After : Jun 29 10:01:46 2025 GMT
Subject: CN=055e5473747fafdb3f046cf06308788601b154ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7f:9b:a3:f3:63:4f:4d:c7:c5:29:c2:a3:02:
1a:9b:6d:e9:e0:36:31:92:c6:7d:32:06:67:24:39:
e3:a7:9a:1b:22:ae:0b:91:f9:f9:51:80:1f:3a:0d:
fe:e3:96:98:21:fd:c0:ce:6c:34:81:2d:17:92:8d:
d1:4b:a4:42:9b:62:eb:de:11:24:22:14:a9:54:1c:
9f:db:f3:4b:74:12:73:61:71:20:40:4a:29:92:f3:
6f:65:1d:b1:8a:3b:45:fc:59:2f:d8:de:31:bd:6d:
52:a6:d2:b1:0c:c1:8d:b0:7f:c2:71:2a:ba:b8:eb:
43:ba:8d:46:39:d2:f4:55:fc:85:ea:02:bd:68:05:
bf:08:77:9c:fc:d3:bc:96:ab:64:e0:cf:91:47:71:
6a:d8:99:a8:ee:29:79:4a:d4:61:c1:db:89:38:8c:
bc:0a:f0:05:d8:c7:27:14:5b:5f:70:17:06:40:a0:
46:ba:5b:f4:47:79:06:a9:24:e0:64:2e:6e:0b:9c:
72:4c:b4:25:11:93:27:b9:33:8b:88:19:d4:1e:8e:
a8:64:98:82:3e:67:95:3b:ee:4b:18:03:e5:e6:c6:
c1:b3:50:c4:e0:bc:c4:9b:80:81:f1:dc:d0:d4:bc:
19:68:6d:aa:e5:df:e6:4e:a3:c2:95:6e:70:c6:18:
51:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:5E:54:73:74:7F:AF:DB:3F:04:6C:F0:63:08:78:86:01:B1:54:AE
X509v3 Authority Key Identifier:
keyid:52:D0:04:63:20:BD:2B:31:37:42:8B:99:CC:C3:4B:18:4A:06:AC:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtAEYyC9KzE3QouZzMNLGEoGrKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/4ff275-6892-4690-8f68-30d4c5729146/1/UtAEYyC9KzE3QouZzMNLGEoGrKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/4ff275-6892-4690-8f68-30d4c5729146/1/UtAEYyC9KzE3QouZzMNLGEoGrKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:87:f3:8b:2a:b4:41:c6:f0:6d:27:0a:76:1a:e3:a5:6a:2d:
00:21:7d:a5:49:0c:76:d3:b9:79:e8:ac:7b:c9:8d:44:47:51:
87:56:1e:61:37:4f:2a:60:d4:3d:9f:f1:ef:9a:83:cc:59:2a:
7d:68:d5:03:6f:4f:a9:11:c7:40:6e:27:96:1b:c2:6f:e5:c1:
ab:c1:ae:98:a0:44:d4:b6:9f:c0:ee:c2:10:5f:94:41:06:a7:
13:d9:78:0f:d3:10:f2:ee:a3:22:b9:ab:83:e0:ac:9c:b6:08:
2c:1a:51:65:34:de:49:3e:c1:5b:b1:bb:2e:b4:4f:3c:c7:04:
9d:44:ca:24:e2:3f:3d:bd:54:be:8b:e2:50:d3:26:1b:ec:1a:
e4:91:18:40:50:10:b6:3b:f4:49:44:ca:75:32:47:29:1c:3f:
12:16:8a:8f:63:02:69:14:18:d9:63:fa:cf:54:25:8d:90:bf:
02:fe:97:25:f7:d3:16:f2:84:f4:ab:0d:f5:68:3b:6a:aa:05:
03:b0:a9:05:38:f0:c7:f7:7e:9b:00:aa:8d:fa:e6:7d:39:49:
e8:44:10:df:2c:eb:d1:df:0e:6b:7b:0e:fe:2f:c9:53:e0:4f:
ac:62:20:0c:cc:93:1f:95:0f:bf:ec:eb:40:5f:50:90:54:c2:
eb:86:2e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:04:36 2025 by rpki-client