Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/42b317-12c8-4dd1-9c55-bfa969e567b1/1/UTNdj7orxzOYOV-90-DW8_89G2Q.mft
File: UTNdj7orxzOYOV-90-DW8_89G2Q.mft (raw, json)
Hash identifier: IGiM75AQEClMeX/VDfGU0BWtl8t9V4nVstLP224PnWM=
Subject key identifier: 53:39:86:8C:6D:15:8E:99:70:62:08:DF:78:A2:80:06:8A:87:28:6B
Authority key identifier: 51:33:5D:8F:BA:2B:C7:33:98:39:5F:BD:D3:E0:D6:F3:FF:3D:1B:64
Certificate issuer: /CN=51335d8fba2bc73398395fbdd3e0d6f3ff3d1b64
Certificate serial: 0196C803D1A905CA233EBC8A727101B72F5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UTNdj7orxzOYOV-90-DW8_89G2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/42b317-12c8-4dd1-9c55-bfa969e567b1/1/UTNdj7orxzOYOV-90-DW8_89G2Q.mft
Manifest number: 10CD
Signing time: Tue 13 May 2025 05:00:15 +0000
Manifest this update: Tue 13 May 2025 05:00:15 +0000
Manifest next update: Wed 14 May 2025 05:00:15 +0000
Files and hashes: 1: UTNdj7orxzOYOV-90-DW8_89G2Q.crl (hash: s4XXRL3+2TvbfREXkzJZMfGVVd0uNFAmrI2pOsOwaPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/42b317-12c8-4dd1-9c55-bfa969e567b1/1/UTNdj7orxzOYOV-90-DW8_89G2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/42b317-12c8-4dd1-9c55-bfa969e567b1/1/UTNdj7orxzOYOV-90-DW8_89G2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/UTNdj7orxzOYOV-90-DW8_89G2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:03:d1:a9:05:ca:23:3e:bc:8a:72:71:01:b7:2f:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51335d8fba2bc73398395fbdd3e0d6f3ff3d1b64
Validity
Not Before: May 13 05:00:15 2025 GMT
Not After : May 14 05:00:15 2025 GMT
Subject: CN=5339868c6d158e99706208df78a280068a87286b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:45:5b:1c:0c:66:59:7c:25:45:46:74:ef:b2:
56:2b:6c:c1:01:1f:f8:22:fd:63:ef:b7:7a:9d:0d:
8c:f7:1e:44:3a:90:e5:b8:9c:30:f0:cc:75:fc:4c:
8c:f6:fd:4e:3f:2a:3c:d4:d7:55:d4:dc:ec:3c:5e:
d4:c5:9a:8b:0a:e6:8c:dc:ee:d3:63:49:08:12:45:
37:db:71:eb:c7:21:dc:63:41:aa:5a:5d:d1:4e:0a:
7c:bc:98:13:4f:da:d6:9e:05:0c:e9:db:0b:79:2a:
3a:a3:b3:fc:03:12:99:41:af:93:38:80:8c:3c:9d:
8e:9b:84:7b:54:b7:ed:5e:7d:aa:86:cb:2d:4d:30:
83:33:fa:9c:e0:33:f5:98:9c:86:38:99:1f:ce:89:
23:81:f6:2e:4c:8f:60:1f:db:1f:ad:4d:40:cb:9c:
f1:29:4b:06:d8:9b:a2:16:2e:95:1f:ba:22:80:80:
18:71:e7:e6:ed:eb:3c:26:54:3c:bd:84:af:43:77:
0c:69:ce:50:c8:63:36:d4:0c:af:f0:b5:72:44:7b:
50:58:21:fe:dd:09:15:1e:e3:ce:35:9d:d1:96:6c:
1d:64:27:63:27:9a:ac:10:0c:2e:ea:96:6c:22:d7:
b3:c4:de:dd:02:e1:f6:a4:1a:60:d6:8e:a4:48:ca:
b7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:39:86:8C:6D:15:8E:99:70:62:08:DF:78:A2:80:06:8A:87:28:6B
X509v3 Authority Key Identifier:
keyid:51:33:5D:8F:BA:2B:C7:33:98:39:5F:BD:D3:E0:D6:F3:FF:3D:1B:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTNdj7orxzOYOV-90-DW8_89G2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/42b317-12c8-4dd1-9c55-bfa969e567b1/1/UTNdj7orxzOYOV-90-DW8_89G2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/42b317-12c8-4dd1-9c55-bfa969e567b1/1/UTNdj7orxzOYOV-90-DW8_89G2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:38:d0:44:46:25:91:79:9a:b3:c8:7c:ca:22:e5:c7:c7:fc:
b7:8a:dc:e5:de:36:c5:38:12:b3:2f:c6:ad:d8:9c:a7:64:68:
1c:28:f8:58:04:4a:ac:9a:f8:60:b1:4f:b2:7e:8b:bf:d5:ea:
54:64:a2:b9:be:d9:dd:48:56:43:74:66:a3:6c:e5:e0:7b:34:
b4:37:1d:fc:75:55:e7:6c:d0:8f:aa:81:a1:5e:3f:29:0d:d4:
43:71:33:b0:e4:d1:39:39:3d:73:2e:8e:ce:76:a4:06:9c:0f:
a7:2f:c3:15:f1:4f:f4:2c:34:90:93:ac:d2:05:10:be:f9:1e:
c7:41:2e:09:ee:bb:66:bb:7e:24:bb:6d:54:27:7f:98:41:f4:
ea:c2:11:94:e4:b6:75:7d:df:82:85:00:16:48:72:24:8a:b8:
8c:b8:7a:3b:8d:88:31:0b:21:2b:7e:2b:91:0a:ef:08:e0:0b:
1b:c8:82:76:ab:11:90:67:dc:bc:fc:ff:32:ac:09:73:f8:eb:
08:71:bb:fe:ae:ee:f9:a7:1f:41:a2:1c:c6:14:3a:49:a6:de:
7c:38:53:b7:62:77:22:5b:c1:7b:d0:74:cf:77:ff:d2:1e:47:
2e:28:c5:9d:49:22:45:bb:57:30:c3:4c:21:a6:25:ae:44:e9:
ac:5a:83:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbIA9GpBcojPryKcnEBty9dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxMzM1ZDhmYmEyYmM3MzM5ODM5NWZiZGQzZTBkNmYzZmYz
ZDFiNjQwHhcNMjUwNTEzMDUwMDE1WhcNMjUwNTE0MDUwMDE1WjAzMTEwLwYDVQQD
Eyg1MzM5ODY4YzZkMTU4ZTk5NzA2MjA4ZGY3OGEyODAwNjhhODcyODZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0VbHAxmWXwlRUZ077JWK2zBAR/4
Iv1j77d6nQ2M9x5EOpDluJww8Mx1/EyM9v1OPyo81NdV1NzsPF7UxZqLCuaM3O7T
Y0kIEkU323HrxyHcY0GqWl3RTgp8vJgTT9rWngUM6dsLeSo6o7P8AxKZQa+TOICM
PJ2Om4R7VLftXn2qhsstTTCDM/qc4DP1mJyGOJkfzokjgfYuTI9gH9sfrU1Ay5zx
KUsG2JuiFi6VH7oigIAYcefm7es8JlQ8vYSvQ3cMac5QyGM21Ayv8LVyRHtQWCH+
3QkVHuPONZ3RlmwdZCdjJ5qsEAwu6pZsItezxN7dAuH2pBpg1o6kSMq3mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFM5hoxtFY6ZcGII33iigAaKhyhrMB8GA1UdIwQY
MBaAFFEzXY+6K8czmDlfvdPg1vP/PRtkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVROZGo3b3J4ek9ZT1YtOTAtRFc4Xzg5RzJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS80MmIzMTctMTJjOC00ZGQxLTljNTUt
YmZhOTY5ZTU2N2IxLzEvVVROZGo3b3J4ek9ZT1YtOTAtRFc4Xzg5RzJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS80MmIzMTctMTJjOC00ZGQxLTljNTUtYmZhOTY5ZTU2N2Ix
LzEvVVROZGo3b3J4ek9ZT1YtOTAtRFc4Xzg5RzJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUjjQREYl
kXmas8h8yiLlx8f8t4rc5d42xTgSsy/Grdicp2RoHCj4WARKrJr4YLFPsn6Lv9Xq
VGSiub7Z3UhWQ3Rmo2zl4Hs0tDcd/HVV52zQj6qBoV4/KQ3UQ3EzsOTROTk9cy6O
znakBpwPpy/DFfFP9Cw0kJOs0gUQvvkex0EuCe67Zrt+JLttVCd/mEH06sIRlOS2
dX3fgoUAFkhyJIq4jLh6O42IMQshK34rkQrvCOALG8iCdqsRkGfcvPz/MqwJc/jr
CHG7/q7u+acfQaIcxhQ6SabefDhTt2J3IlvBe9B0z3f/0h5HLijFnUkiRbtXMMNM
IaYlrkTprFqDag==
-----END CERTIFICATE-----
Generated at Tue May 13 10:06:42 2025 by rpki-client