
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/4ff275-6892-4690-8f68-30d4c5729146/1/UtAEYyC9KzE3QouZzMNLGEoGrKo.mft
File: UtAEYyC9KzE3QouZzMNLGEoGrKo.mft (raw, json)
Hash identifier: OJT+kKrQpDUVA1tRBmBqVguCMW0FU1Y1uFrISoU7/5k=
Subject key identifier: A7:62:93:0B:90:A6:9F:CF:8A:F4:0C:7F:2D:CA:39:0C:AF:EE:50:C4
Authority key identifier: 52:D0:04:63:20:BD:2B:31:37:42:8B:99:CC:C3:4B:18:4A:06:AC:AA
Certificate issuer: /CN=52d0046320bd2b3137428b99ccc34b184a06acaa
Certificate serial: 019827EC0C8CC826870B573B68FA9998A41C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtAEYyC9KzE3QouZzMNLGEoGrKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/4ff275-6892-4690-8f68-30d4c5729146/1/UtAEYyC9KzE3QouZzMNLGEoGrKo.mft
Manifest number: 45
Signing time: Sun 20 Jul 2025 13:00:37 +0000
Manifest this update: Sun 20 Jul 2025 13:00:37 +0000
Manifest next update: Mon 21 Jul 2025 13:00:37 +0000
Files and hashes: 1: UtAEYyC9KzE3QouZzMNLGEoGrKo.crl (hash: yALGa45LFUeXa1dolWCYeXPAn5WCi6fyFlrQCXmd5es=)
2: aRt1vYt8aGjm4T2P_cchcqkhKi4.roa (hash: akOfuFfDuYlZDl5i1xYQCB4WC7oFit9P5KLda+bnyYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/4ff275-6892-4690-8f68-30d4c5729146/1/UtAEYyC9KzE3QouZzMNLGEoGrKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/4ff275-6892-4690-8f68-30d4c5729146/1/UtAEYyC9KzE3QouZzMNLGEoGrKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UtAEYyC9KzE3QouZzMNLGEoGrKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:ec:0c:8c:c8:26:87:0b:57:3b:68:fa:99:98:a4:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52d0046320bd2b3137428b99ccc34b184a06acaa
Validity
Not Before: Jul 20 13:00:37 2025 GMT
Not After : Jul 21 13:00:37 2025 GMT
Subject: CN=a762930b90a69fcf8af40c7f2dca390cafee50c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:54:42:db:98:0f:4f:42:dd:c1:6c:01:16:c5:
f0:e4:b8:0e:0a:2f:8e:22:b9:dd:04:a3:4c:55:04:
77:78:6f:1f:8d:9b:08:85:bb:3f:fc:69:f8:e5:d0:
74:c1:8d:ed:ba:08:eb:93:c2:7d:71:e4:77:6c:d9:
8f:e5:52:f8:fa:dd:5e:e8:d4:04:1b:cc:9c:63:c2:
7b:4d:34:f7:87:92:e8:00:33:8f:c8:51:71:4c:9d:
57:f5:38:38:a7:34:1e:f7:e9:b4:e5:31:72:fa:32:
65:f1:f0:fe:87:94:bb:01:33:78:fd:4b:db:66:16:
4f:30:a1:58:13:22:ef:57:87:46:92:19:6a:62:7b:
d9:d1:07:66:bf:8d:6f:71:aa:4c:d7:b3:53:fd:f0:
11:11:c5:db:7d:d4:0d:75:88:dd:a0:b2:52:e4:73:
63:b9:de:2f:b4:c1:ac:03:7f:dc:f4:19:d1:9e:0a:
29:fa:65:cc:83:e9:d2:9c:57:b8:4d:1e:9a:42:1b:
23:8d:e2:df:ee:d5:08:70:b0:7b:33:7e:a8:fa:93:
26:5d:19:b5:6e:c4:96:fe:da:f1:f3:f1:3a:3d:fa:
85:77:08:80:d1:cc:86:55:22:6e:84:20:84:61:14:
28:e8:fd:66:7f:a0:05:eb:95:f8:43:b7:f3:d0:b3:
ee:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:62:93:0B:90:A6:9F:CF:8A:F4:0C:7F:2D:CA:39:0C:AF:EE:50:C4
X509v3 Authority Key Identifier:
keyid:52:D0:04:63:20:BD:2B:31:37:42:8B:99:CC:C3:4B:18:4A:06:AC:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtAEYyC9KzE3QouZzMNLGEoGrKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/4ff275-6892-4690-8f68-30d4c5729146/1/UtAEYyC9KzE3QouZzMNLGEoGrKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/4ff275-6892-4690-8f68-30d4c5729146/1/UtAEYyC9KzE3QouZzMNLGEoGrKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:00:58:08:ad:ec:46:e9:e6:8e:c5:95:c4:26:43:a2:be:32:
bc:52:7b:03:38:a3:e3:39:69:2f:8c:8c:b9:b4:54:fd:35:40:
00:e1:09:5d:37:44:71:a9:a7:b1:75:b0:9e:00:a6:f0:4a:2d:
d0:33:54:c6:cd:9d:a4:13:49:15:99:aa:81:9f:b2:94:9f:1e:
da:37:2b:94:85:e8:ab:ba:b2:95:77:99:3a:bf:42:ec:d2:ac:
b3:67:d3:d8:af:00:63:ec:f3:be:ae:ec:ba:c4:70:66:06:d3:
e5:bc:6b:8e:fe:d7:09:29:90:32:b3:58:23:dd:2b:28:0b:37:
92:04:e2:21:bf:53:d6:95:e6:29:26:84:e6:51:52:31:df:b7:
6c:23:3f:0b:cd:90:60:c9:33:41:fe:d7:98:f8:fb:1f:2a:ee:
95:44:de:6f:c0:d3:a1:0f:76:e7:b5:16:17:7e:6c:12:f0:3b:
24:44:68:f5:33:d9:91:d0:44:5b:24:8d:68:0e:39:65:39:2c:
34:51:25:7c:13:c8:d0:70:4b:d1:13:d7:51:9f:a1:ec:63:59:
70:97:7e:cf:54:03:99:18:2d:cf:58:59:bf:d8:db:b8:86:a2:
4f:55:55:1f:f4:3e:7b:97:ae:3e:fe:9f:38:e6:49:49:eb:46:
ad:0f:98:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZgn7AyMyCaHC1c7aPqZmKQcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyZDAwNDYzMjBiZDJiMzEzNzQyOGI5OWNjYzM0YjE4NGEw
NmFjYWEwHhcNMjUwNzIwMTMwMDM3WhcNMjUwNzIxMTMwMDM3WjAzMTEwLwYDVQQD
EyhhNzYyOTMwYjkwYTY5ZmNmOGFmNDBjN2YyZGNhMzkwY2FmZWU1MGM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVRC25gPT0LdwWwBFsXw5LgOCi+O
IrndBKNMVQR3eG8fjZsIhbs//Gn45dB0wY3tugjrk8J9ceR3bNmP5VL4+t1e6NQE
G8ycY8J7TTT3h5LoADOPyFFxTJ1X9Tg4pzQe9+m05TFy+jJl8fD+h5S7ATN4/Uvb
ZhZPMKFYEyLvV4dGkhlqYnvZ0Qdmv41vcapM17NT/fAREcXbfdQNdYjdoLJS5HNj
ud4vtMGsA3/c9BnRngop+mXMg+nSnFe4TR6aQhsjjeLf7tUIcLB7M36o+pMmXRm1
bsSW/trx8/E6PfqFdwiA0cyGVSJuhCCEYRQo6P1mf6AF65X4Q7fz0LPutQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKdikwuQpp/PivQMfy3KOQyv7lDEMB8GA1UdIwQY
MBaAFFLQBGMgvSsxN0KLmczDSxhKBqyqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXRBRVl5QzlLekUzUW91WnpNTkxHRW9HcktvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi80ZmYyNzUtNjg5Mi00NjkwLThmNjgt
MzBkNGM1NzI5MTQ2LzEvVXRBRVl5QzlLekUzUW91WnpNTkxHRW9HcktvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi80ZmYyNzUtNjg5Mi00NjkwLThmNjgtMzBkNGM1NzI5MTQ2
LzEvVXRBRVl5QzlLekUzUW91WnpNTkxHRW9HcktvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAggBYCK3s
RunmjsWVxCZDor4yvFJ7Azij4zlpL4yMubRU/TVAAOEJXTdEcamnsXWwngCm8Eot
0DNUxs2dpBNJFZmqgZ+ylJ8e2jcrlIXoq7qylXeZOr9C7NKss2fT2K8AY+zzvq7s
usRwZgbT5bxrjv7XCSmQMrNYI90rKAs3kgTiIb9T1pXmKSaE5lFSMd+3bCM/C82Q
YMkzQf7XmPj7HyrulUTeb8DToQ9257UWF35sEvA7JERo9TPZkdBEWySNaA45ZTks
NFElfBPI0HBL0RPXUZ+h7GNZcJd+z1QDmRgtz1hZv9jbuIaiT1VVH/Q+e5euPv6f
OOZJSetGrQ+Yqw==
-----END CERTIFICATE-----
Generated at Sun Jul 20 16:33:50 2025 by rpki-client