Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/4ff275-6892-4690-8f68-30d4c5729146/1/UtAEYyC9KzE3QouZzMNLGEoGrKo.mft
File: UtAEYyC9KzE3QouZzMNLGEoGrKo.mft (raw, json)
Hash identifier: 0L3/lqDisNM/rhv00/ovoE7x7HIYWcuTN2Wf+E4XQ4I=
Subject key identifier: E0:D2:8E:FF:09:3C:5E:38:B0:8B:2B:88:01:A0:57:F5:26:C5:78:DA
Authority key identifier: 52:D0:04:63:20:BD:2B:31:37:42:8B:99:CC:C3:4B:18:4A:06:AC:AA
Certificate issuer: /CN=52d0046320bd2b3137428b99ccc34b184a06acaa
Certificate serial: 0198D7A976782953F016C03CE8601ED32073
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtAEYyC9KzE3QouZzMNLGEoGrKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/4ff275-6892-4690-8f68-30d4c5729146/1/UtAEYyC9KzE3QouZzMNLGEoGrKo.mft
Manifest number: A0
Signing time: Sat 23 Aug 2025 16:01:04 +0000
Manifest this update: Sat 23 Aug 2025 16:01:04 +0000
Manifest next update: Sun 24 Aug 2025 16:01:04 +0000
Files and hashes: 1: UtAEYyC9KzE3QouZzMNLGEoGrKo.crl (hash: 9HONE0JE52tE2Edfv98aTWmgZYcm9u85ppDfEZSSoWs=)
2: aRt1vYt8aGjm4T2P_cchcqkhKi4.roa (hash: akOfuFfDuYlZDl5i1xYQCB4WC7oFit9P5KLda+bnyYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/4ff275-6892-4690-8f68-30d4c5729146/1/UtAEYyC9KzE3QouZzMNLGEoGrKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/4ff275-6892-4690-8f68-30d4c5729146/1/UtAEYyC9KzE3QouZzMNLGEoGrKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UtAEYyC9KzE3QouZzMNLGEoGrKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a9:76:78:29:53:f0:16:c0:3c:e8:60:1e:d3:20:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52d0046320bd2b3137428b99ccc34b184a06acaa
Validity
Not Before: Aug 23 16:01:04 2025 GMT
Not After : Aug 24 16:01:04 2025 GMT
Subject: CN=e0d28eff093c5e38b08b2b8801a057f526c578da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f4:86:ba:dd:a7:43:b3:2c:0b:30:21:c9:dc:
ad:78:f4:31:a1:d7:40:c8:1f:df:d1:ca:17:4d:93:
62:18:2d:e2:aa:68:58:b3:25:8c:bd:46:24:38:ed:
28:7c:69:6d:65:c8:27:36:2f:be:82:89:8b:75:93:
3a:32:17:b7:fa:b8:08:14:37:35:24:3a:27:bb:79:
af:1c:83:8a:5d:fc:93:00:4f:7e:f2:81:4c:14:dc:
16:51:87:28:1a:b5:54:b7:41:94:55:9f:2b:07:ec:
b1:7e:d0:dc:49:e2:93:5a:bb:4a:e5:c9:95:e1:91:
cd:fe:90:0d:9b:6d:0a:ce:37:25:aa:d5:41:28:97:
50:bd:9f:12:e2:be:e6:c0:64:d4:02:c0:fa:27:a1:
b0:a4:88:fa:7f:be:57:3f:54:2c:83:a3:a3:bc:26:
98:c1:99:03:66:06:08:72:12:24:d4:07:ba:4d:0a:
86:d1:00:e4:49:57:5c:73:77:3c:fa:1a:3a:ee:ac:
58:09:2a:49:bf:cd:d0:73:40:08:02:80:73:7d:db:
87:d4:70:99:75:8e:a4:fc:22:7e:6c:9f:67:24:8a:
9a:1c:2d:4f:bc:3a:0a:4a:30:22:97:e8:a0:ac:c9:
8a:6d:12:a3:c1:8c:a2:89:34:16:69:77:25:7e:eb:
5b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:D2:8E:FF:09:3C:5E:38:B0:8B:2B:88:01:A0:57:F5:26:C5:78:DA
X509v3 Authority Key Identifier:
keyid:52:D0:04:63:20:BD:2B:31:37:42:8B:99:CC:C3:4B:18:4A:06:AC:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtAEYyC9KzE3QouZzMNLGEoGrKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/4ff275-6892-4690-8f68-30d4c5729146/1/UtAEYyC9KzE3QouZzMNLGEoGrKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/4ff275-6892-4690-8f68-30d4c5729146/1/UtAEYyC9KzE3QouZzMNLGEoGrKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:ce:68:df:cd:17:4c:55:f9:df:04:fc:f9:8c:c5:2b:1a:28:
81:6e:34:c7:dd:80:14:87:90:e8:9c:46:b8:62:e6:e6:d9:6e:
93:5b:1b:d7:44:ba:23:ec:59:3a:ca:64:df:1b:a5:4f:ba:8e:
96:82:ec:e1:d9:6a:e5:7f:a7:c3:40:7f:14:87:7c:09:ef:de:
d3:af:99:48:81:5c:ee:d8:af:55:8d:95:ef:2d:2a:ac:c9:a9:
70:2d:9b:20:7f:b3:75:78:ed:9f:60:08:a6:e3:52:9a:0d:c4:
70:0f:86:2c:c2:1f:55:82:58:7e:13:7d:2e:05:e2:b7:fd:11:
a1:ec:c7:67:b8:50:41:14:0e:b1:54:67:d4:c2:09:bf:a2:dc:
62:d2:b3:e1:c2:df:d0:f3:84:5c:2c:e9:2a:f5:60:bd:98:b0:
3e:32:75:ee:a4:0c:c9:81:8b:62:8d:63:71:ff:0d:e1:e9:98:
33:c9:80:d5:9c:59:12:f2:d4:0f:42:92:21:31:ad:3a:c3:18:
86:a1:f9:e8:c3:5a:61:71:0c:46:57:56:55:24:52:84:71:0a:
60:09:88:93:b4:2b:bf:f6:67:82:1c:23:40:cb:94:ff:9b:9f:
f1:df:18:45:04:4b:bc:d7:a7:c1:a6:e3:04:28:9a:c2:2f:4b:
11:88:3d:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXqXZ4KVPwFsA86GAe0yBzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyZDAwNDYzMjBiZDJiMzEzNzQyOGI5OWNjYzM0YjE4NGEw
NmFjYWEwHhcNMjUwODIzMTYwMTA0WhcNMjUwODI0MTYwMTA0WjAzMTEwLwYDVQQD
EyhlMGQyOGVmZjA5M2M1ZTM4YjA4YjJiODgwMWEwNTdmNTI2YzU3OGRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvSGut2nQ7MsCzAhydytePQxoddA
yB/f0coXTZNiGC3iqmhYsyWMvUYkOO0ofGltZcgnNi++gomLdZM6Mhe3+rgIFDc1
JDonu3mvHIOKXfyTAE9+8oFMFNwWUYcoGrVUt0GUVZ8rB+yxftDcSeKTWrtK5cmV
4ZHN/pANm20KzjclqtVBKJdQvZ8S4r7mwGTUAsD6J6GwpIj6f75XP1Qsg6OjvCaY
wZkDZgYIchIk1Ae6TQqG0QDkSVdcc3c8+ho67qxYCSpJv83Qc0AIAoBzfduH1HCZ
dY6k/CJ+bJ9nJIqaHC1PvDoKSjAil+igrMmKbRKjwYyiiTQWaXclfutb9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFODSjv8JPF44sIsriAGgV/UmxXjaMB8GA1UdIwQY
MBaAFFLQBGMgvSsxN0KLmczDSxhKBqyqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXRBRVl5QzlLekUzUW91WnpNTkxHRW9HcktvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi80ZmYyNzUtNjg5Mi00NjkwLThmNjgt
MzBkNGM1NzI5MTQ2LzEvVXRBRVl5QzlLekUzUW91WnpNTkxHRW9HcktvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi80ZmYyNzUtNjg5Mi00NjkwLThmNjgtMzBkNGM1NzI5MTQ2
LzEvVXRBRVl5QzlLekUzUW91WnpNTkxHRW9HcktvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATM5o380X
TFX53wT8+YzFKxoogW40x92AFIeQ6JxGuGLm5tluk1sb10S6I+xZOspk3xulT7qO
loLs4dlq5X+nw0B/FId8Ce/e06+ZSIFc7tivVY2V7y0qrMmpcC2bIH+zdXjtn2AI
puNSmg3EcA+GLMIfVYJYfhN9LgXit/0RoezHZ7hQQRQOsVRn1MIJv6LcYtKz4cLf
0POEXCzpKvVgvZiwPjJ17qQMyYGLYo1jcf8N4emYM8mA1ZxZEvLUD0KSITGtOsMY
hqH56MNaYXEMRldWVSRShHEKYAmIk7Qrv/ZnghwjQMuU/5uf8d8YRQRLvNenwabj
BCiawi9LEYg9bA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:33:20 2025 by rpki-client