Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/f58cf3-6909-458a-a51a-5914f9d3378b/1/UTIqxJAgylfHTzsUi8BBAsq63IM.mft
File: UTIqxJAgylfHTzsUi8BBAsq63IM.mft (raw, json)
Hash identifier: x2t63szPhVvgzRyaVyUUfTIcsX3QcONIBHgb2q7d1U4=
Subject key identifier: 33:CD:33:98:BA:C2:89:F4:11:CC:E5:C6:BC:42:BC:15:AA:1E:8B:37
Authority key identifier: 51:32:2A:C4:90:20:CA:57:C7:4F:3B:14:8B:C0:41:02:CA:BA:DC:83
Certificate issuer: /CN=51322ac49020ca57c74f3b148bc04102cabadc83
Certificate serial: 01984AAEF93465A5E992A0B4E7A07CFDD37B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UTIqxJAgylfHTzsUi8BBAsq63IM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/f58cf3-6909-458a-a51a-5914f9d3378b/1/UTIqxJAgylfHTzsUi8BBAsq63IM.mft
Manifest number: 10DD
Signing time: Sun 27 Jul 2025 07:00:37 +0000
Manifest this update: Sun 27 Jul 2025 07:00:37 +0000
Manifest next update: Mon 28 Jul 2025 07:00:37 +0000
Files and hashes: 1: UTIqxJAgylfHTzsUi8BBAsq63IM.crl (hash: tEVx8NZUMrAeHRfcyfWdlSq9+3ecDvDVSk0o4W0ruVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/f58cf3-6909-458a-a51a-5914f9d3378b/1/UTIqxJAgylfHTzsUi8BBAsq63IM.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/f58cf3-6909-458a-a51a-5914f9d3378b/1/UTIqxJAgylfHTzsUi8BBAsq63IM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UTIqxJAgylfHTzsUi8BBAsq63IM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:f9:34:65:a5:e9:92:a0:b4:e7:a0:7c:fd:d3:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51322ac49020ca57c74f3b148bc04102cabadc83
Validity
Not Before: Jul 27 07:00:37 2025 GMT
Not After : Jul 28 07:00:37 2025 GMT
Subject: CN=33cd3398bac289f411cce5c6bc42bc15aa1e8b37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:06:a6:6d:1d:52:21:c5:6e:4e:5f:0f:49:63:
88:ab:63:a3:1c:01:4a:40:c9:62:91:9c:67:3e:60:
08:e3:08:9d:f8:53:63:4b:e0:93:11:d3:f8:0e:aa:
2e:47:d7:83:c1:11:ee:da:b0:b7:a0:cf:2f:98:ba:
f3:c4:d2:13:90:23:1b:21:36:2f:11:f3:d9:64:cb:
7c:98:cf:a4:97:34:ae:1f:3d:0e:e9:0f:99:34:f8:
1e:cd:41:a8:32:18:b2:c5:aa:5d:dc:39:c3:1f:95:
77:c9:a4:e3:dd:13:eb:bc:7b:52:ef:a1:f0:2f:45:
49:10:9f:b6:c6:63:3e:3f:55:a3:b1:dd:5a:bb:86:
d6:5e:e3:1d:80:58:58:e3:c5:1b:7e:9f:6f:c4:83:
97:44:d4:73:51:d6:8c:5b:fa:eb:75:c9:83:b0:0c:
91:e9:04:19:a2:6b:f1:b7:e4:9f:bb:36:49:e1:2c:
2b:f9:9c:31:84:88:61:bb:68:5d:16:cf:9b:d0:09:
1f:2f:d8:18:f2:18:e2:92:9f:b0:68:41:0a:24:ad:
6a:1f:90:fd:2d:2a:8c:d6:ac:7c:db:71:e7:7e:ba:
53:01:b1:14:e9:6d:57:20:ae:56:87:1b:79:87:a7:
16:94:4d:72:b0:3c:79:30:f3:cd:e4:10:82:f3:94:
a2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:CD:33:98:BA:C2:89:F4:11:CC:E5:C6:BC:42:BC:15:AA:1E:8B:37
X509v3 Authority Key Identifier:
keyid:51:32:2A:C4:90:20:CA:57:C7:4F:3B:14:8B:C0:41:02:CA:BA:DC:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTIqxJAgylfHTzsUi8BBAsq63IM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f58cf3-6909-458a-a51a-5914f9d3378b/1/UTIqxJAgylfHTzsUi8BBAsq63IM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f58cf3-6909-458a-a51a-5914f9d3378b/1/UTIqxJAgylfHTzsUi8BBAsq63IM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:dc:c2:63:5e:8b:e0:52:31:8f:87:68:53:45:db:5e:dd:14:
ad:83:55:b4:a5:46:a4:68:09:ff:e9:75:27:39:6d:9e:5c:ea:
e3:10:53:88:3b:7e:ec:8d:5c:47:f9:66:b3:24:64:fb:0a:e7:
a7:90:3a:06:8f:8f:80:e1:c8:76:80:05:eb:38:9a:cf:b2:6c:
33:42:60:43:d1:98:91:f8:c1:46:37:d6:e2:d6:4a:bf:ae:74:
e3:54:ed:ad:2c:02:46:c4:32:07:2b:b7:ad:0b:5d:2b:22:1d:
9c:04:3a:79:7b:a4:b5:72:71:e5:64:bc:4d:60:df:ed:f4:6f:
b7:0d:98:8e:2a:70:c6:f8:8e:47:a7:57:49:ee:41:6c:f6:28:
c6:ef:7e:b6:e6:61:f6:7c:06:f1:42:06:ed:ef:93:96:f4:45:
2c:2e:be:18:3c:5c:07:b4:de:cd:df:4f:5c:ef:96:2c:d2:f6:
fd:9b:3c:b2:1d:9a:ba:cc:68:a5:f5:e2:84:77:61:d4:fc:27:
d3:14:3e:ae:b9:14:d0:21:12:30:4e:36:5e:cd:b1:5f:32:b4:
9e:bc:0b:cb:f0:f8:08:13:9d:c5:ae:9a:97:51:a1:31:87:de:
12:42:f6:b2:e9:3c:5c:74:3d:d5:79:32:c3:31:02:c9:45:5b:
e4:f0:00:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:36:17 2025 by rpki-client