Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft
File: UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft (raw, json)
Hash identifier: zHUJ52Z/km5ea6O5RBEONe3up2Aa/hDMrjAsh/YdvG4=
Subject key identifier: 36:F6:D4:18:5D:A3:E3:D4:03:3D:E6:F9:C9:AF:1C:E2:86:07:A2:6F
Authority key identifier: 52:DC:49:FE:93:A3:F6:2A:DD:4C:E9:89:1D:90:33:EA:D8:3D:98:8C
Certificate issuer: /CN=52dc49fe93a3f62add4ce9891d9033ead83d988c
Certificate serial: 019853B22D9479EDF63DF2F6701EFD8B2F9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtxJ_pOj9irdTOmJHZAz6tg9mIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft
Manifest number: 024F
Signing time: Tue 29 Jul 2025 01:00:42 +0000
Manifest this update: Tue 29 Jul 2025 01:00:42 +0000
Manifest next update: Wed 30 Jul 2025 01:00:42 +0000
Files and hashes: 1: UtxJ_pOj9irdTOmJHZAz6tg9mIw.crl (hash: quJdfTUePaMKQeG3CDarNHKCIap7JMPRCJC5vw1LflI=)
2: sFWfVthQNGnQ49NcUCzLqzLKdLQ.roa (hash: 0QY65Rfkx/7KLARI1qnwkNUIqsM8Lktn3TNsmFMFb3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UtxJ_pOj9irdTOmJHZAz6tg9mIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:b2:2d:94:79:ed:f6:3d:f2:f6:70:1e:fd:8b:2f:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52dc49fe93a3f62add4ce9891d9033ead83d988c
Validity
Not Before: Jul 29 01:00:42 2025 GMT
Not After : Jul 30 01:00:42 2025 GMT
Subject: CN=36f6d4185da3e3d4033de6f9c9af1ce28607a26f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:26:02:c3:94:c4:9c:20:62:80:d7:cf:e3:1c:
86:9e:24:ea:a0:46:82:3d:13:b5:91:cd:b8:e4:af:
d0:17:79:7a:02:45:9b:ec:cc:4f:78:f4:87:5f:00:
c4:98:04:c3:2d:da:66:73:77:55:ad:cc:16:65:0c:
fd:06:49:95:3e:e8:22:73:ac:80:39:de:79:b1:fa:
9e:c3:2d:84:04:46:39:b4:97:3a:90:c7:24:56:bf:
08:c9:e5:d9:2d:16:58:cc:45:c9:f4:ae:b9:e5:c7:
34:37:c1:b1:2d:2f:89:2b:b8:eb:81:09:bf:f1:1d:
42:ee:86:2a:6a:96:2a:86:fb:e7:89:58:ac:a9:11:
95:b1:8f:4e:94:2d:fc:49:4f:0e:0b:8b:f4:df:89:
2f:79:f6:35:50:51:7c:43:ed:31:04:20:84:ec:b3:
97:9e:1c:4b:e2:d4:e1:0e:b4:9d:d3:7b:79:90:ad:
1a:ec:5b:00:52:87:37:7b:5f:ff:70:20:cc:ec:bf:
15:9a:8a:08:f8:2b:7b:50:d2:2f:a7:25:9f:cd:08:
44:5b:f7:98:62:39:95:3b:f3:eb:4b:68:8c:15:13:
32:dc:03:3e:f9:2a:8b:57:b8:19:14:54:c4:d7:13:
2f:3a:70:57:48:60:e7:2c:c7:96:51:0f:20:7b:29:
f4:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F6:D4:18:5D:A3:E3:D4:03:3D:E6:F9:C9:AF:1C:E2:86:07:A2:6F
X509v3 Authority Key Identifier:
keyid:52:DC:49:FE:93:A3:F6:2A:DD:4C:E9:89:1D:90:33:EA:D8:3D:98:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtxJ_pOj9irdTOmJHZAz6tg9mIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:56:91:29:56:16:28:d9:45:54:9e:96:43:4c:f9:e3:15:3c:
9f:d2:9c:fa:8e:92:da:30:20:43:cc:2f:30:d8:95:39:b2:10:
f7:0b:70:3a:ce:f5:fb:46:51:30:df:14:52:56:a9:06:df:ec:
03:74:5e:d8:8b:18:2e:69:de:3d:a1:3e:51:b1:0c:61:09:73:
3f:4a:01:ff:e5:b1:be:cc:23:dd:5a:0d:1d:50:16:c9:dc:28:
6c:e7:b6:51:60:66:ab:67:f0:61:9b:52:24:ad:72:fa:2f:d0:
65:96:d3:2e:61:ec:a9:b7:b7:35:88:1f:04:c9:0a:19:b1:d8:
33:69:dc:5e:67:a1:03:94:47:eb:59:10:01:d2:e0:03:99:46:
9f:0b:9c:8e:4d:8d:f0:b1:8e:34:43:c4:6c:32:66:d2:86:54:
d1:eb:89:54:21:2d:fc:3b:d6:6b:7c:59:b2:98:2f:c3:75:9e:
fd:a5:82:ee:fb:a6:ee:c1:d0:f1:bb:72:73:f9:28:72:b1:ae:
d9:e8:74:c3:88:88:f8:ae:01:34:3e:b6:52:a7:64:17:6d:cc:
0e:1c:50:e6:98:cc:75:d1:41:7c:00:b5:4f:0b:5d:13:67:05:
4c:e2:27:cb:1d:11:57:2f:38:4b:e6:9c:9c:c7:ef:3e:3b:30:
6e:a3:b1:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:01:10 2025 by rpki-client