Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/42b317-12c8-4dd1-9c55-bfa969e567b1/1/UTNdj7orxzOYOV-90-DW8_89G2Q.mft
File: UTNdj7orxzOYOV-90-DW8_89G2Q.mft (raw, json)
Hash identifier: eZBjonarLPLU7XOxNLHCe07q02zmc773Fql/gjQufvk=
Subject key identifier: F4:DE:01:46:52:D3:0C:21:57:2E:85:36:78:F2:3D:DA:BE:4C:60:ED
Authority key identifier: 51:33:5D:8F:BA:2B:C7:33:98:39:5F:BD:D3:E0:D6:F3:FF:3D:1B:64
Certificate issuer: /CN=51335d8fba2bc73398395fbdd3e0d6f3ff3d1b64
Certificate serial: 0198D54EB2F454607FDD315EE0BCE72C3782
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UTNdj7orxzOYOV-90-DW8_89G2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/42b317-12c8-4dd1-9c55-bfa969e567b1/1/UTNdj7orxzOYOV-90-DW8_89G2Q.mft
Manifest number: 11DD
Signing time: Sat 23 Aug 2025 05:02:41 +0000
Manifest this update: Sat 23 Aug 2025 05:02:41 +0000
Manifest next update: Sun 24 Aug 2025 05:02:41 +0000
Files and hashes: 1: UTNdj7orxzOYOV-90-DW8_89G2Q.crl (hash: V9/fz7ZpF57BQtaIkOm/9TdcNemTn/+1d/34e3D1+yU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/42b317-12c8-4dd1-9c55-bfa969e567b1/1/UTNdj7orxzOYOV-90-DW8_89G2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/42b317-12c8-4dd1-9c55-bfa969e567b1/1/UTNdj7orxzOYOV-90-DW8_89G2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/UTNdj7orxzOYOV-90-DW8_89G2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:b2:f4:54:60:7f:dd:31:5e:e0:bc:e7:2c:37:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51335d8fba2bc73398395fbdd3e0d6f3ff3d1b64
Validity
Not Before: Aug 23 05:02:41 2025 GMT
Not After : Aug 24 05:02:41 2025 GMT
Subject: CN=f4de014652d30c21572e853678f23ddabe4c60ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:52:70:ec:18:9f:e9:b8:69:7a:5d:6d:48:7a:
e6:9c:17:b6:43:e9:d6:51:18:6d:c8:a2:c6:19:85:
49:a7:1d:ff:b9:27:08:c3:ae:86:30:70:34:c8:46:
73:60:d8:5f:ab:52:20:fe:6a:65:ec:5f:49:5a:71:
77:f7:be:fe:39:9f:81:02:89:aa:f3:10:ed:8b:6e:
13:3e:2c:0d:20:29:a0:7b:fd:e9:d6:31:1c:22:03:
42:44:fc:84:98:e1:43:a0:bd:6b:e1:3d:1c:87:d0:
45:c5:ac:63:f6:2b:9c:0d:71:f9:bd:ba:40:d1:0d:
cf:b8:e3:c5:37:d2:d0:eb:52:10:bc:e9:3e:9e:9c:
eb:3f:58:35:42:bc:59:33:f6:3e:31:aa:78:88:b7:
9e:57:e7:57:e9:6b:9a:d1:bd:4c:64:26:f9:72:0c:
fe:3c:7f:af:bf:d3:30:c1:70:a3:8d:c0:98:c0:f2:
8b:f5:64:a6:c4:eb:51:2a:d0:68:02:ea:f2:31:ef:
5d:e0:78:96:ac:8b:0c:a4:e6:2d:f3:61:19:3a:cb:
4b:89:7a:ab:43:1f:7d:7a:a8:a4:d9:d4:59:80:8c:
31:06:da:17:a4:f4:20:fc:bd:31:63:c9:c3:50:a2:
38:5c:98:56:4e:3a:4a:00:e2:df:c0:a4:3c:a1:fb:
72:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:DE:01:46:52:D3:0C:21:57:2E:85:36:78:F2:3D:DA:BE:4C:60:ED
X509v3 Authority Key Identifier:
keyid:51:33:5D:8F:BA:2B:C7:33:98:39:5F:BD:D3:E0:D6:F3:FF:3D:1B:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTNdj7orxzOYOV-90-DW8_89G2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/42b317-12c8-4dd1-9c55-bfa969e567b1/1/UTNdj7orxzOYOV-90-DW8_89G2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/42b317-12c8-4dd1-9c55-bfa969e567b1/1/UTNdj7orxzOYOV-90-DW8_89G2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:93:fb:03:6a:35:25:40:16:5d:22:ff:07:53:94:9f:48:7f:
c8:6a:bb:ce:ff:a8:eb:fc:b0:7d:4f:1b:1e:f9:40:20:93:d7:
6a:86:6d:4c:2f:6a:86:0e:f6:cf:27:14:eb:db:75:b0:61:b0:
0c:9b:67:82:ac:f2:20:de:d7:95:17:d8:62:d4:ab:2f:36:ff:
68:f8:5c:c9:87:0f:11:33:3f:a7:c2:d7:85:82:46:db:7b:48:
4a:5f:a6:35:d2:84:75:e1:ca:61:4c:6c:ed:63:69:2f:44:16:
c7:ac:4b:71:e4:e6:ea:0e:0e:fd:61:6d:6a:1a:2b:06:b2:0b:
2b:81:69:1e:a9:c6:e9:10:7a:73:31:a5:d0:e1:f6:2d:c0:1b:
92:1e:f6:d2:fe:fd:4a:35:e9:85:a5:4b:c3:98:81:d8:c2:e8:
af:ab:f7:0f:ad:d9:08:89:fe:88:a1:41:fa:54:7a:54:b6:cb:
5b:e8:0c:67:12:0a:1e:2c:87:d7:01:bd:10:75:55:4e:8f:0c:
7f:69:f2:47:fd:dc:3f:c8:79:cf:f1:07:33:fe:9d:f8:17:d7:
e9:47:aa:dd:07:3f:a3:7a:6a:08:42:2e:11:f4:b8:b2:4b:a5:
23:56:ea:9a:fb:e4:43:a1:f8:f2:f3:eb:0c:9b:1a:cb:86:98:
29:7f:47:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:32:03 2025 by rpki-client