Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft
File: UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft (raw, json)
Hash identifier: KCvxS6o0Nsl9VmznRfv0hxza3awXJdrdULjPG9BMBVI=
Subject key identifier: 12:12:69:73:E9:CE:19:FE:3E:89:9E:D0:F5:2E:C5:0C:7A:69:C9:42
Authority key identifier: 52:DC:49:FE:93:A3:F6:2A:DD:4C:E9:89:1D:90:33:EA:D8:3D:98:8C
Certificate issuer: /CN=52dc49fe93a3f62add4ce9891d9033ead83d988c
Certificate serial: 0197B745A31C6BCE0C7EDFA94E54153113D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtxJ_pOj9irdTOmJHZAz6tg9mIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft
Manifest number: 01FE
Signing time: Sat 28 Jun 2025 16:01:23 +0000
Manifest this update: Sat 28 Jun 2025 16:01:23 +0000
Manifest next update: Sun 29 Jun 2025 16:01:23 +0000
Files and hashes: 1: UtxJ_pOj9irdTOmJHZAz6tg9mIw.crl (hash: 4OEb/Vbgo/2UAMURpnwDRgM5e8/lR1yYRNruW+hhMvQ=)
2: sFWfVthQNGnQ49NcUCzLqzLKdLQ.roa (hash: 0QY65Rfkx/7KLARI1qnwkNUIqsM8Lktn3TNsmFMFb3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UtxJ_pOj9irdTOmJHZAz6tg9mIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:a3:1c:6b:ce:0c:7e:df:a9:4e:54:15:31:13:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52dc49fe93a3f62add4ce9891d9033ead83d988c
Validity
Not Before: Jun 28 16:01:23 2025 GMT
Not After : Jun 29 16:01:23 2025 GMT
Subject: CN=12126973e9ce19fe3e899ed0f52ec50c7a69c942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ff:30:e4:32:97:9e:a6:bb:6e:3f:65:50:2b:
39:c6:65:a6:fb:34:53:ea:0d:fb:f6:1b:e9:41:67:
67:ed:cb:7c:85:1e:5f:fe:f9:bd:60:13:bf:65:96:
7c:f1:0b:1a:ff:26:72:f5:39:81:89:2b:76:84:0c:
64:0f:0a:3b:34:f0:48:88:a4:4b:c6:db:51:56:a3:
a4:f3:4e:3f:c6:c6:3c:2c:aa:63:f6:31:3d:69:95:
db:59:e0:73:c7:82:49:c4:30:3e:9a:b1:7d:16:66:
d5:53:12:6f:0f:3d:cb:31:d7:28:80:28:42:db:b8:
cb:4a:cd:a0:f2:ff:1b:04:0e:17:75:0a:d8:a9:86:
d2:3e:b1:b9:3c:0a:98:c5:c2:c9:ba:62:7d:fd:13:
fb:09:af:ef:37:82:b8:c3:73:9a:07:f6:1c:80:e8:
97:f5:05:20:35:56:12:24:0d:df:90:1b:cc:7b:75:
37:22:6e:a7:d1:37:f8:04:71:d0:74:e4:1d:28:b6:
5b:d0:71:7c:dd:9d:ff:e2:c0:3b:56:7b:65:77:2b:
24:4f:0c:eb:30:2a:82:0c:21:09:53:67:de:66:11:
27:90:2d:69:6e:be:b7:f5:e8:26:30:20:b8:ad:c5:
dd:4b:57:9a:13:c1:e0:5a:1f:ee:4f:4e:39:6f:9c:
67:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:12:69:73:E9:CE:19:FE:3E:89:9E:D0:F5:2E:C5:0C:7A:69:C9:42
X509v3 Authority Key Identifier:
keyid:52:DC:49:FE:93:A3:F6:2A:DD:4C:E9:89:1D:90:33:EA:D8:3D:98:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtxJ_pOj9irdTOmJHZAz6tg9mIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:40:85:27:77:d8:70:c9:b7:b5:eb:87:7d:f3:98:45:03:62:
32:c8:60:1c:77:3f:96:e4:7a:53:e2:71:7a:14:5e:04:82:ba:
48:52:3a:14:84:56:c2:f9:7f:4b:1c:e8:9f:2b:07:c4:89:31:
00:36:e2:91:22:7f:92:db:46:e5:e0:01:a0:99:50:1e:08:73:
e6:2a:2f:ec:48:4d:fe:13:fa:11:d7:b6:42:05:2e:b2:2b:6d:
b0:64:4b:2f:4d:04:9b:ec:67:5e:23:e8:ab:e0:f4:47:aa:16:
d4:6b:b6:d5:4e:c6:d4:47:84:b7:d7:c8:bb:fb:0c:97:7d:4c:
7a:fc:d6:29:86:b0:58:ab:40:ff:03:ac:99:d2:9b:b3:9c:db:
79:52:60:c9:f1:c6:be:d9:39:66:de:8f:78:41:e6:8a:9b:b0:
e2:b9:63:6d:63:25:17:6f:30:74:8c:68:95:6f:d2:5a:8f:09:
27:20:c2:d1:1a:2a:5a:97:85:d2:17:5c:52:8b:55:cb:58:39:
43:2c:5e:71:0a:a9:01:ad:8b:67:c7:2c:ce:61:d9:50:d1:6d:
8b:2b:11:65:dd:b6:04:a3:6a:69:7d:4e:1f:2a:f1:e4:d0:d6:
bd:3e:88:5e:9a:51:ff:f5:48:3a:80:4b:b5:8d:14:e8:57:b1:
f8:09:b6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:55:49 2025 by rpki-client