Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft
File: UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft (raw, json)
Hash identifier: u8YNFJ2j7jEiDHMWhHMqW+bhLSrawFIkrva17JYWB5U=
Subject key identifier: 22:8D:FC:CC:0A:F4:FF:B4:33:35:BC:CE:CA:53:9D:F4:C4:FD:CA:34
Authority key identifier: 52:DC:49:FE:93:A3:F6:2A:DD:4C:E9:89:1D:90:33:EA:D8:3D:98:8C
Certificate issuer: /CN=52dc49fe93a3f62add4ce9891d9033ead83d988c
Certificate serial: 0199FC8FC315E46C0EC63818F92523417606
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtxJ_pOj9irdTOmJHZAz6tg9mIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft
Manifest number: 032B
Signing time: Sun 19 Oct 2025 13:01:44 +0000
Manifest this update: Sun 19 Oct 2025 13:01:44 +0000
Manifest next update: Mon 20 Oct 2025 13:01:44 +0000
Files and hashes: 1: UtxJ_pOj9irdTOmJHZAz6tg9mIw.crl (hash: KvqzHKyBT+n7KNRG+kzbGoNpbG5rKWatWH3gWgFNVok=)
2: sFWfVthQNGnQ49NcUCzLqzLKdLQ.roa (hash: 0QY65Rfkx/7KLARI1qnwkNUIqsM8Lktn3TNsmFMFb3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UtxJ_pOj9irdTOmJHZAz6tg9mIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:c3:15:e4:6c:0e:c6:38:18:f9:25:23:41:76:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52dc49fe93a3f62add4ce9891d9033ead83d988c
Validity
Not Before: Oct 19 13:01:44 2025 GMT
Not After : Oct 20 13:01:44 2025 GMT
Subject: CN=228dfccc0af4ffb43335bcceca539df4c4fdca34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:2e:55:74:ba:6c:44:88:f4:fd:d3:ee:50:33:
e7:0d:42:73:f0:33:24:a1:fb:8d:39:12:1e:f1:27:
9f:c3:93:f2:37:d8:69:0d:30:ad:96:dd:5a:fa:07:
8b:89:1f:ce:c3:f9:fd:c1:a1:9e:55:9a:59:69:55:
8c:d3:82:6c:0d:0c:88:2f:ab:c3:1c:f4:be:ad:e0:
b1:4b:7b:18:3e:4a:b8:a1:9f:36:eb:e1:1d:b5:76:
5f:24:2c:78:75:aa:63:05:52:fc:15:cb:96:3b:a1:
9d:c0:85:e9:53:14:a0:84:2b:27:62:51:fb:35:8a:
b3:32:8c:cf:d7:3e:ed:db:9c:fd:bd:c6:1a:0d:b3:
de:b4:b9:6d:2f:a0:e7:d4:5f:db:f0:79:88:8a:eb:
bd:71:35:41:82:c7:0d:79:dd:e6:ab:5c:aa:4d:02:
0d:63:cf:2f:39:03:b0:fd:b7:7d:f8:6e:6a:ba:f9:
ac:2b:d9:cf:48:4f:6b:f2:37:34:a3:a3:2c:c7:37:
db:78:12:33:1e:b4:2f:6b:c8:16:fd:d7:20:30:61:
7c:6b:e2:96:88:6e:55:f1:be:ce:0e:b0:cc:5e:d2:
06:1a:65:b9:00:57:ae:5e:69:fe:90:4b:02:cb:78:
13:e9:40:7c:a5:60:4a:b1:eb:d8:a1:c5:d4:50:85:
7e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:8D:FC:CC:0A:F4:FF:B4:33:35:BC:CE:CA:53:9D:F4:C4:FD:CA:34
X509v3 Authority Key Identifier:
keyid:52:DC:49:FE:93:A3:F6:2A:DD:4C:E9:89:1D:90:33:EA:D8:3D:98:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtxJ_pOj9irdTOmJHZAz6tg9mIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:94:f4:77:53:58:ef:ed:bc:80:aa:37:b1:a9:b1:a1:71:88:
33:bb:2f:69:a5:25:70:d6:90:de:bb:01:58:1b:2f:50:98:be:
7a:8b:19:d5:41:a3:2e:6a:28:aa:91:19:fc:57:e4:ef:58:db:
3b:49:97:c6:bf:30:e4:94:a7:a0:c6:20:a5:69:93:f7:4d:6e:
3c:9f:8b:92:c7:39:17:82:24:42:29:a6:b8:e2:b5:ac:b2:14:
00:bd:6a:77:59:c3:19:6b:66:53:4f:44:be:70:ed:dd:d5:79:
b2:00:bd:cf:3a:bc:b8:7b:5c:63:29:75:44:99:ee:08:e7:b5:
86:ee:ed:6b:17:9c:cb:b6:26:5a:72:24:f7:b3:5a:34:31:e8:
29:44:43:a2:f4:ea:79:e6:67:0d:78:f6:03:45:d4:a1:4e:03:
4b:9b:69:9f:21:23:73:4c:c6:84:9c:3c:9e:a7:e8:bd:02:7b:
1d:af:ed:75:d8:a8:e8:ee:ba:bd:c5:88:26:5e:c2:8b:49:89:
c2:c2:ad:2b:50:17:44:96:8d:f2:e0:71:3c:a0:f3:bf:62:fe:
73:5f:16:5f:28:5a:8d:c4:86:6d:4f:00:24:75:95:dd:cc:2e:
bd:ef:40:10:b2:02:d2:d4:34:f2:49:38:cd:17:63:92:90:a0:
cf:0c:7c:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j8MV5GwOxjgY+SUjQXYGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyZGM0OWZlOTNhM2Y2MmFkZDRjZTk4OTFkOTAzM2VhZDgz
ZDk4OGMwHhcNMjUxMDE5MTMwMTQ0WhcNMjUxMDIwMTMwMTQ0WjAzMTEwLwYDVQQD
EygyMjhkZmNjYzBhZjRmZmI0MzMzNWJjY2VjYTUzOWRmNGM0ZmRjYTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhi5VdLpsRIj0/dPuUDPnDUJz8DMk
ofuNORIe8Sefw5PyN9hpDTCtlt1a+geLiR/Ow/n9waGeVZpZaVWM04JsDQyIL6vD
HPS+reCxS3sYPkq4oZ826+EdtXZfJCx4dapjBVL8FcuWO6GdwIXpUxSghCsnYlH7
NYqzMozP1z7t25z9vcYaDbPetLltL6Dn1F/b8HmIiuu9cTVBgscNed3mq1yqTQIN
Y88vOQOw/bd9+G5quvmsK9nPSE9r8jc0o6MsxzfbeBIzHrQva8gW/dcgMGF8a+KW
iG5V8b7ODrDMXtIGGmW5AFeuXmn+kEsCy3gT6UB8pWBKsevYocXUUIV+3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCKN/MwK9P+0MzW8zspTnfTE/co0MB8GA1UdIwQY
MBaAFFLcSf6To/Yq3UzpiR2QM+rYPZiMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXR4Sl9wT2o5aXJkVE9tSkhaQXo2dGc5bUl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8zMmFlM2UtZDg0OC00NWYxLTljYzEt
NmRlYzQ2OTk0YmE0LzEvVXR4Sl9wT2o5aXJkVE9tSkhaQXo2dGc5bUl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8zMmFlM2UtZDg0OC00NWYxLTljYzEtNmRlYzQ2OTk0YmE0
LzEvVXR4Sl9wT2o5aXJkVE9tSkhaQXo2dGc5bUl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT5T0d1NY
7+28gKo3samxoXGIM7svaaUlcNaQ3rsBWBsvUJi+eosZ1UGjLmooqpEZ/Ffk71jb
O0mXxr8w5JSnoMYgpWmT901uPJ+Lksc5F4IkQimmuOK1rLIUAL1qd1nDGWtmU09E
vnDt3dV5sgC9zzq8uHtcYyl1RJnuCOe1hu7taxecy7YmWnIk97NaNDHoKURDovTq
eeZnDXj2A0XUoU4DS5tpnyEjc0zGhJw8nqfovQJ7Ha/tddio6O66vcWIJl7Ci0mJ
wsKtK1AXRJaN8uBxPKDzv2L+c18WXyhajcSGbU8AJHWV3cwuve9AELIC0tQ08kk4
zRdjkpCgzwx8SA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:22 2025 by rpki-client