Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft
File: UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft (raw, json)
Hash identifier: X+KTFTI5AepTeHBW1sF4Cyvb+8DW3gXkmjNh/r5Qd9Y=
Subject key identifier: E7:27:22:79:69:2B:D4:CA:30:EE:07:54:96:44:38:1C:A4:EF:92:F8
Authority key identifier: 52:DC:49:FE:93:A3:F6:2A:DD:4C:E9:89:1D:90:33:EA:D8:3D:98:8C
Certificate issuer: /CN=52dc49fe93a3f62add4ce9891d9033ead83d988c
Certificate serial: 0198D515A91B13F0976547CB530FAA3AB34C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtxJ_pOj9irdTOmJHZAz6tg9mIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft
Manifest number: 0292
Signing time: Sat 23 Aug 2025 04:00:23 +0000
Manifest this update: Sat 23 Aug 2025 04:00:23 +0000
Manifest next update: Sun 24 Aug 2025 04:00:23 +0000
Files and hashes: 1: UtxJ_pOj9irdTOmJHZAz6tg9mIw.crl (hash: OKZ4q92CzQX5n5AHxd10fZBSzfiR2FKS3FyLY/r0T78=)
2: sFWfVthQNGnQ49NcUCzLqzLKdLQ.roa (hash: 0QY65Rfkx/7KLARI1qnwkNUIqsM8Lktn3TNsmFMFb3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UtxJ_pOj9irdTOmJHZAz6tg9mIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:a9:1b:13:f0:97:65:47:cb:53:0f:aa:3a:b3:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52dc49fe93a3f62add4ce9891d9033ead83d988c
Validity
Not Before: Aug 23 04:00:23 2025 GMT
Not After : Aug 24 04:00:23 2025 GMT
Subject: CN=e7272279692bd4ca30ee07549644381ca4ef92f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:33:c9:7b:c3:00:ee:3f:9a:7c:4b:93:21:59:
f2:5f:a4:68:01:4e:b4:50:a6:80:05:14:bc:79:98:
13:43:94:7b:b0:b9:9c:c0:e9:90:3c:6c:e2:da:70:
31:82:fa:8f:22:20:cb:04:aa:9b:67:da:43:d2:0e:
cd:7e:fc:b8:eb:32:80:cf:a7:75:25:d3:8c:a7:79:
73:18:79:df:40:d9:86:fe:aa:aa:45:a5:e4:b9:47:
59:ed:16:4c:8c:72:a1:b2:8b:32:f6:6d:cd:aa:56:
e0:ce:df:d8:56:89:be:d0:2e:70:be:49:6e:27:76:
e7:99:f2:e7:b1:40:4f:50:0b:f6:01:4d:65:8f:ba:
d3:09:bb:ed:59:59:b3:24:e9:06:07:22:17:62:99:
bb:ba:e0:e1:e9:ef:59:af:72:53:3a:a6:f6:a1:0e:
4e:d2:45:30:9c:fb:ba:12:00:08:93:dd:50:0a:31:
80:7f:19:df:6b:93:30:cf:f3:05:ee:ea:91:c6:1d:
7e:d0:ed:46:5c:ef:9c:c0:68:15:ec:55:af:86:54:
a0:3b:f1:39:8f:6d:1f:8d:7d:53:de:62:47:49:5d:
df:2d:20:a0:0f:e6:fb:53:c4:f7:38:2e:f4:d3:e0:
0b:83:b5:fc:97:b1:cf:86:59:72:e2:79:1b:3d:f5:
10:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:27:22:79:69:2B:D4:CA:30:EE:07:54:96:44:38:1C:A4:EF:92:F8
X509v3 Authority Key Identifier:
keyid:52:DC:49:FE:93:A3:F6:2A:DD:4C:E9:89:1D:90:33:EA:D8:3D:98:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtxJ_pOj9irdTOmJHZAz6tg9mIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:59:5a:7f:a5:4e:db:a5:38:84:90:01:12:f7:f3:f6:64:05:
4c:1a:1f:9f:a4:e9:1f:46:26:c4:69:52:84:f7:e9:97:55:26:
bf:95:1e:ea:25:c2:e8:ea:01:db:23:3e:18:f8:f4:80:ea:b9:
df:6c:93:3f:ca:66:17:48:51:6a:36:ee:43:df:4d:3c:76:69:
27:65:7c:a1:fb:1e:a2:cf:07:cd:32:8d:41:b3:6c:e8:0f:69:
50:19:59:03:22:86:5e:ed:a0:da:7a:2e:4a:8f:97:86:5f:5a:
0c:4d:ef:5b:30:9e:ac:43:82:18:71:6a:2a:a0:e9:ef:05:72:
1a:a1:83:2f:9a:98:78:9e:9f:af:62:a4:36:e5:65:89:b4:50:
67:b7:1d:01:8c:f5:f1:c8:8a:94:88:5a:d2:33:59:58:0e:e8:
89:a4:b1:33:dd:a7:87:95:b2:c6:bc:55:8b:db:80:50:3a:9d:
43:e8:99:5a:18:9b:f4:10:78:01:6b:40:dc:c3:d9:83:26:11:
c0:19:e3:23:5f:87:59:e6:a0:3e:f5:b9:44:e2:31:31:0f:e9:
1b:08:cc:fe:fd:7e:56:85:00:52:ae:cf:0e:6a:86:a6:d5:62:
3e:77:ff:0e:2b:3f:74:d9:bd:6f:a7:7a:10:03:c7:2d:0e:5f:
31:19:d6:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:39:37 2025 by rpki-client