Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft
File: Xx_UTMxUtc6zp5yzeUucZq62fkk.mft (raw, json)
Hash identifier: Zu2bd8TwP6vR+gjoRMKnjXejcaqHB/bWhImnIcof96Y=
Subject key identifier: 7A:2B:9B:73:40:CF:68:34:A2:51:EE:25:00:A6:9D:75:DF:FA:98:E4
Authority key identifier: 5F:1F:D4:4C:CC:54:B5:CE:B3:A7:9C:B3:79:4B:9C:66:AE:B6:7E:49
Certificate issuer: /CN=5f1fd44ccc54b5ceb3a79cb3794b9c66aeb67e49
Certificate serial: 019936811215671E8EF98778F44F7C7751E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xx_UTMxUtc6zp5yzeUucZq62fkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft
Manifest number: 1679
Signing time: Thu 11 Sep 2025 02:00:52 +0000
Manifest this update: Thu 11 Sep 2025 02:00:52 +0000
Manifest next update: Fri 12 Sep 2025 02:00:52 +0000
Files and hashes: 1: B2IUwm0uaSZHaP7DnPbSBjUieo4.roa (hash: BOlqjJDT24t6aaQsferoPEnSoT/e6IPUh40XBnWzYhY=)
2: Xx_UTMxUtc6zp5yzeUucZq62fkk.crl (hash: Q5c2MsYxwclpveQUkP50UJ5+PAayCvVXwtbILdLtMpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xx_UTMxUtc6zp5yzeUucZq62fkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 02:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:81:12:15:67:1e:8e:f9:87:78:f4:4f:7c:77:51:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1fd44ccc54b5ceb3a79cb3794b9c66aeb67e49
Validity
Not Before: Sep 11 02:00:52 2025 GMT
Not After : Sep 12 02:00:52 2025 GMT
Subject: CN=7a2b9b7340cf6834a251ee2500a69d75dffa98e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ff:3e:53:9f:86:3c:ab:7c:51:8e:01:40:a8:
73:21:01:c9:60:fe:0a:0e:f5:23:c4:c6:4c:34:34:
65:eb:6d:c0:ba:4c:e4:e2:f8:36:8f:61:9a:c7:c5:
03:bd:1c:54:40:8d:63:60:9e:d6:0a:59:15:10:66:
27:46:49:65:a3:18:98:3d:4b:74:33:15:ac:32:d6:
e2:2f:3a:0f:58:c5:54:d2:d6:92:85:cf:fd:22:70:
06:3a:d6:cb:fd:ed:c2:de:d9:9a:de:34:36:96:8b:
8e:99:2c:21:b9:63:21:73:e8:33:76:96:95:8c:53:
cb:1b:c1:be:86:01:fe:6a:cd:de:46:35:a8:0f:21:
81:d1:2b:db:77:bb:50:e6:62:89:0c:20:c6:13:0a:
81:d8:14:09:f5:1b:90:a9:90:f9:9d:7e:16:42:3d:
f8:3e:e7:3f:86:08:de:55:4a:8a:24:e9:36:05:76:
12:cb:4a:70:88:ff:df:f9:6d:67:91:a4:e5:1c:53:
3a:ec:48:55:09:08:54:74:ae:5a:65:f6:f6:72:82:
4a:0a:29:e4:90:b2:5a:e1:19:ab:ab:5e:40:43:49:
07:4c:37:67:53:cb:0c:51:6a:17:13:03:cc:2b:f6:
5d:17:5a:e8:50:94:73:4c:79:0c:d4:29:ae:6c:b1:
32:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:2B:9B:73:40:CF:68:34:A2:51:EE:25:00:A6:9D:75:DF:FA:98:E4
X509v3 Authority Key Identifier:
keyid:5F:1F:D4:4C:CC:54:B5:CE:B3:A7:9C:B3:79:4B:9C:66:AE:B6:7E:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx_UTMxUtc6zp5yzeUucZq62fkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:9b:1a:06:e1:79:ef:d4:0e:f0:18:b7:0e:67:e5:b1:ca:f5:
42:13:85:cd:8d:44:85:5a:14:ff:f0:bb:8f:7c:12:02:26:83:
5d:8c:dd:1a:93:ca:4b:73:ae:54:6e:77:86:78:11:39:cb:77:
4a:88:3c:a4:9d:8e:ec:b3:d2:01:16:8d:03:16:2f:45:e1:05:
19:01:8a:86:2d:ff:8f:c8:b8:ac:02:7c:bd:8d:25:7c:32:c9:
68:bb:51:0c:71:56:ff:d7:d6:56:5b:13:a5:62:0f:d6:9b:02:
6b:5c:64:e7:bb:27:cd:36:d7:32:fe:19:87:69:45:1a:70:d9:
19:75:3a:03:0a:a6:e2:6a:24:89:67:ab:8e:81:9a:e1:84:01:
e1:fe:f8:87:94:44:33:9f:70:38:d4:ae:5c:5f:eb:9c:ae:ea:
a4:81:d0:42:ff:79:b8:f1:eb:48:7a:b5:d2:70:8c:33:e2:77:
83:6c:d9:75:e8:a3:4f:10:f9:4c:39:29:db:be:f4:1e:2e:d1:
ac:6f:f5:ec:a1:fd:6e:e9:3b:fb:c9:29:3e:3d:26:e3:2a:fb:
f2:86:41:07:b7:28:5e:88:a5:ca:a9:4d:bf:5c:70:2f:68:73:
df:de:08:1a:d5:80:05:bc:3c:55:3b:c7:18:09:39:13:7e:f6:
8b:cd:4d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 11:45:10 2025 by rpki-client