Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft
File: UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft (raw, json)
Hash identifier: ypOIzkEqQjsFtWTALQyS5VWCzRACJxNEuAz5JHw75kY=
Subject key identifier: CD:F8:A4:34:C1:3B:D5:6D:74:95:30:48:FA:BA:C6:E3:B0:CD:84:62
Authority key identifier: 52:D6:61:A9:48:F2:BF:34:90:E8:9D:82:52:F2:CC:C8:74:7C:E5:C7
Certificate issuer: /CN=52d661a948f2bf3490e89d8252f2ccc8747ce5c7
Certificate serial: 0198469B19E93D6C0AC62C5EB3F24A5A8F94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtZhqUjyvzSQ6J2CUvLMyHR85cc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft
Manifest number: 13DC
Signing time: Sat 26 Jul 2025 12:00:26 +0000
Manifest this update: Sat 26 Jul 2025 12:00:26 +0000
Manifest next update: Sun 27 Jul 2025 12:00:26 +0000
Files and hashes: 1: En0AxaNswsA9xI4lqkSKkt-F7C0.roa (hash: q8FwSEiSjvslMUXDVxvqWzOjw6rMu6h87zO4Dcum1yM=)
2: UtZhqUjyvzSQ6J2CUvLMyHR85cc.crl (hash: dr3jD0sfXxHCKccQsps+RH+NH+7C+wUdeXP2XGlScHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft
rsync://rpki.ripe.net/repository/DEFAULT/UtZhqUjyvzSQ6J2CUvLMyHR85cc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:9b:19:e9:3d:6c:0a:c6:2c:5e:b3:f2:4a:5a:8f:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52d661a948f2bf3490e89d8252f2ccc8747ce5c7
Validity
Not Before: Jul 26 12:00:26 2025 GMT
Not After : Jul 27 12:00:26 2025 GMT
Subject: CN=cdf8a434c13bd56d74953048fabac6e3b0cd8462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:49:bb:84:d0:14:f6:30:63:ca:0f:e3:4e:d8:
7e:c3:53:fc:2e:e5:6e:58:22:3f:11:e0:60:7e:0f:
ab:af:a2:2e:1a:df:c6:b3:0a:aa:da:43:41:08:36:
01:81:eb:dd:64:a7:73:2e:6b:2a:5c:85:c7:f0:fe:
7d:90:f1:9b:15:63:a6:6d:99:29:1f:0e:24:7f:27:
ba:d0:34:df:88:50:c2:49:f9:9b:17:50:c0:fe:76:
68:24:5c:7b:0f:a4:23:27:07:58:44:4c:f1:f0:24:
33:97:62:ca:05:7d:14:6a:83:84:f9:51:50:b1:fb:
e3:20:45:5f:e0:b2:38:b2:5e:a2:38:54:d4:59:11:
38:08:80:5f:c0:d2:68:42:06:b0:e8:a7:b9:90:11:
f5:cb:93:82:73:34:6f:34:3a:43:98:95:37:70:c8:
a6:ba:09:24:5f:11:fb:09:b0:7b:9f:55:48:2f:58:
db:ca:39:8a:cb:bf:fe:01:1d:97:3f:51:f6:26:36:
5a:6c:0a:ae:4b:aa:eb:43:4c:ce:36:f6:68:1f:e3:
5a:34:cb:52:51:a9:82:19:ee:a3:90:71:89:d9:b2:
ee:01:9f:41:5e:56:45:a5:23:03:57:90:fa:fc:68:
4e:58:cb:01:86:85:ef:4f:31:38:cf:22:b0:1a:7e:
82:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:F8:A4:34:C1:3B:D5:6D:74:95:30:48:FA:BA:C6:E3:B0:CD:84:62
X509v3 Authority Key Identifier:
keyid:52:D6:61:A9:48:F2:BF:34:90:E8:9D:82:52:F2:CC:C8:74:7C:E5:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtZhqUjyvzSQ6J2CUvLMyHR85cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:e1:04:f6:b6:ee:7c:15:d5:1a:c0:9c:f0:09:37:f4:58:42:
a9:bb:93:4b:a8:08:f9:14:e0:37:f1:aa:c1:9d:99:0b:f9:bb:
8d:68:3f:a3:73:87:88:4b:bb:e7:7a:74:e6:36:00:d8:6c:73:
62:e4:88:b4:aa:c0:c1:01:76:d4:a7:9a:51:07:9e:64:f5:bb:
30:33:ce:76:b1:1c:14:cb:3c:8d:94:96:01:9b:88:ce:31:76:
5e:e3:8c:50:09:4b:be:9d:d6:8c:72:2d:b0:05:63:18:f5:2a:
20:3b:e1:7b:26:58:31:d1:3a:c8:38:32:7b:6a:01:50:90:49:
e8:03:22:71:f5:da:ba:cc:37:d3:19:b8:7e:d3:4b:74:ed:3e:
3b:8b:54:45:8c:ea:74:9f:35:80:96:07:7f:9d:20:ff:9f:85:
f8:38:f8:68:cd:a4:89:b2:3d:f6:d9:9d:1e:57:c0:52:5e:e7:
de:45:91:3e:4b:f0:ef:8f:aa:3d:a4:34:eb:56:73:de:b5:7f:
c3:6b:81:d6:3b:70:b7:cc:9d:42:7a:2a:4d:94:51:f8:52:69:
65:6d:63:c3:f7:af:2d:30:fb:3c:db:98:f2:3d:e2:a9:d5:fd:
ce:ec:19:73:80:a1:71:95:31:0b:77:2e:59:8c:49:90:78:ac:
30:c1:d4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:46:52 2025 by rpki-client