Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/42b317-12c8-4dd1-9c55-bfa969e567b1/1/UTNdj7orxzOYOV-90-DW8_89G2Q.mft
File: UTNdj7orxzOYOV-90-DW8_89G2Q.mft (raw, json)
Hash identifier: jL0QZ2ARxkASSc9n6zb8ndVH2k492GJ+Y5JuJLMz83U=
Subject key identifier: 8C:3A:17:42:5D:48:4C:C0:7E:29:29:F3:3E:0E:07:B7:94:37:50:65
Authority key identifier: 51:33:5D:8F:BA:2B:C7:33:98:39:5F:BD:D3:E0:D6:F3:FF:3D:1B:64
Certificate issuer: /CN=51335d8fba2bc73398395fbdd3e0d6f3ff3d1b64
Certificate serial: 0199FAD7F840D235FE6BD4525BE785090D37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UTNdj7orxzOYOV-90-DW8_89G2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/42b317-12c8-4dd1-9c55-bfa969e567b1/1/UTNdj7orxzOYOV-90-DW8_89G2Q.mft
Manifest number: 1275
Signing time: Sun 19 Oct 2025 05:01:21 +0000
Manifest this update: Sun 19 Oct 2025 05:01:21 +0000
Manifest next update: Mon 20 Oct 2025 05:01:21 +0000
Files and hashes: 1: UTNdj7orxzOYOV-90-DW8_89G2Q.crl (hash: RuaIe0ozlFsy9+L/gmQsCm/ViLjN7oECid2QjxBSggk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/42b317-12c8-4dd1-9c55-bfa969e567b1/1/UTNdj7orxzOYOV-90-DW8_89G2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/42b317-12c8-4dd1-9c55-bfa969e567b1/1/UTNdj7orxzOYOV-90-DW8_89G2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/UTNdj7orxzOYOV-90-DW8_89G2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:f8:40:d2:35:fe:6b:d4:52:5b:e7:85:09:0d:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51335d8fba2bc73398395fbdd3e0d6f3ff3d1b64
Validity
Not Before: Oct 19 05:01:21 2025 GMT
Not After : Oct 20 05:01:21 2025 GMT
Subject: CN=8c3a17425d484cc07e2929f33e0e07b794375065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:79:5e:84:7c:fb:10:5b:62:a6:f4:4e:7d:80:
1a:5a:b4:ea:b9:3b:d2:9b:ac:7e:6f:69:51:88:d8:
1b:2e:a7:9e:2e:be:73:cc:ff:74:c7:51:b9:49:1e:
6d:7a:84:f8:a6:40:63:89:56:f3:dc:a5:09:67:e2:
75:ba:3b:42:42:00:90:c6:f9:f7:3a:42:88:39:04:
78:ad:0e:3b:16:70:5f:e4:dc:79:7d:5f:20:ad:98:
f1:c3:01:34:ec:2b:df:79:4a:1d:04:33:8e:61:5f:
cd:fd:cf:c5:92:47:44:ca:61:f2:73:c4:cd:19:0e:
11:ae:83:a2:a4:79:bc:03:49:19:a7:25:35:e6:01:
5e:0b:06:0b:5f:2f:75:54:d7:52:d3:cc:73:dd:f4:
08:b8:6f:8b:7e:eb:0a:44:26:3d:7e:75:b4:9b:9c:
10:c2:b5:c0:2e:76:29:e0:8a:cb:e3:35:a0:f7:a1:
76:87:64:c7:27:fd:bb:b9:c0:63:93:16:9a:a8:85:
41:c8:1f:10:5b:69:62:e7:5e:a8:dd:63:90:3b:a8:
ba:b2:05:4b:4f:e6:8a:d0:8c:03:1d:f5:cd:10:14:
63:a1:83:0b:b8:73:4c:b5:a7:aa:df:84:75:93:14:
5e:a9:85:e1:fa:13:57:fa:44:3e:aa:a7:c8:4c:d0:
48:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:3A:17:42:5D:48:4C:C0:7E:29:29:F3:3E:0E:07:B7:94:37:50:65
X509v3 Authority Key Identifier:
keyid:51:33:5D:8F:BA:2B:C7:33:98:39:5F:BD:D3:E0:D6:F3:FF:3D:1B:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTNdj7orxzOYOV-90-DW8_89G2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/42b317-12c8-4dd1-9c55-bfa969e567b1/1/UTNdj7orxzOYOV-90-DW8_89G2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/42b317-12c8-4dd1-9c55-bfa969e567b1/1/UTNdj7orxzOYOV-90-DW8_89G2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:e8:10:0f:f7:80:4d:3c:74:2f:bd:1a:a6:ed:2a:78:e9:bf:
be:4e:c3:d4:21:6c:c0:40:58:6d:54:61:39:ba:03:9e:14:c4:
23:30:58:47:ac:00:c0:2a:f1:64:83:62:31:c1:b2:df:96:60:
7d:73:75:44:6a:13:27:16:46:6f:8a:7c:5e:32:ab:9e:1f:ee:
06:09:cd:ac:c0:1b:9e:79:e1:cc:40:bf:be:d4:21:b7:3e:8f:
03:b1:11:b1:e2:c8:6c:3b:16:ad:bb:5b:98:59:e8:fa:92:e8:
b3:10:4c:9e:d1:a1:c9:3b:8d:01:db:98:f2:c6:66:e5:7c:56:
8a:3f:78:9a:f7:e8:72:1f:14:03:6c:44:85:25:04:48:74:ff:
7b:55:ed:c2:f0:b1:f0:cc:8a:71:af:9d:b5:5c:1c:4e:b3:6b:
24:5a:0c:75:67:a6:f2:21:c3:5d:2b:d2:26:9d:4b:e8:ec:4d:
78:1d:73:24:9e:0a:75:2e:85:a5:79:2a:2e:97:9f:c0:fa:b9:
8f:b3:f9:c0:d5:8d:bc:9c:31:4a:01:71:18:6e:50:c7:44:17:
14:40:39:21:5e:b0:44:99:0c:c9:ea:5f:a0:a6:7d:bd:c9:6a:
4e:a3:6f:11:73:50:f1:d7:1b:2d:95:70:ee:dd:85:7f:15:e0:
aa:35:43:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn61/hA0jX+a9RSW+eFCQ03MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxMzM1ZDhmYmEyYmM3MzM5ODM5NWZiZGQzZTBkNmYzZmYz
ZDFiNjQwHhcNMjUxMDE5MDUwMTIxWhcNMjUxMDIwMDUwMTIxWjAzMTEwLwYDVQQD
Eyg4YzNhMTc0MjVkNDg0Y2MwN2UyOTI5ZjMzZTBlMDdiNzk0Mzc1MDY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXlehHz7EFtipvROfYAaWrTquTvS
m6x+b2lRiNgbLqeeLr5zzP90x1G5SR5teoT4pkBjiVbz3KUJZ+J1ujtCQgCQxvn3
OkKIOQR4rQ47FnBf5Nx5fV8grZjxwwE07CvfeUodBDOOYV/N/c/FkkdEymHyc8TN
GQ4RroOipHm8A0kZpyU15gFeCwYLXy91VNdS08xz3fQIuG+LfusKRCY9fnW0m5wQ
wrXALnYp4IrL4zWg96F2h2THJ/27ucBjkxaaqIVByB8QW2li516o3WOQO6i6sgVL
T+aK0IwDHfXNEBRjoYMLuHNMtaeq34R1kxReqYXh+hNX+kQ+qqfITNBIAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIw6F0JdSEzAfikp8z4OB7eUN1BlMB8GA1UdIwQY
MBaAFFEzXY+6K8czmDlfvdPg1vP/PRtkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVROZGo3b3J4ek9ZT1YtOTAtRFc4Xzg5RzJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS80MmIzMTctMTJjOC00ZGQxLTljNTUt
YmZhOTY5ZTU2N2IxLzEvVVROZGo3b3J4ek9ZT1YtOTAtRFc4Xzg5RzJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS80MmIzMTctMTJjOC00ZGQxLTljNTUtYmZhOTY5ZTU2N2Ix
LzEvVVROZGo3b3J4ek9ZT1YtOTAtRFc4Xzg5RzJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlOgQD/eA
TTx0L70apu0qeOm/vk7D1CFswEBYbVRhOboDnhTEIzBYR6wAwCrxZINiMcGy35Zg
fXN1RGoTJxZGb4p8XjKrnh/uBgnNrMAbnnnhzEC/vtQhtz6PA7ERseLIbDsWrbtb
mFno+pLosxBMntGhyTuNAduY8sZm5XxWij94mvfoch8UA2xEhSUESHT/e1XtwvCx
8MyKca+dtVwcTrNrJFoMdWem8iHDXSvSJp1L6OxNeB1zJJ4KdS6FpXkqLpefwPq5
j7P5wNWNvJwxSgFxGG5Qx0QXFEA5IV6wRJkMyepfoKZ9vclqTqNvEXNQ8dcbLZVw
7t2FfxXgqjVDDw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:39 2025 by rpki-client