Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft
File: UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft (raw, json)
Hash identifier: +G1QYo/amSApIsr3V5+FwCVK7/GqFTAQ0yT5I5FiQ6M=
Subject key identifier: 67:E5:BD:89:6C:5F:A6:23:B1:9A:96:C1:91:B5:88:1A:1C:53:CA:7E
Authority key identifier: 52:D6:61:A9:48:F2:BF:34:90:E8:9D:82:52:F2:CC:C8:74:7C:E5:C7
Certificate issuer: /CN=52d661a948f2bf3490e89d8252f2ccc8747ce5c7
Certificate serial: 019A2778F62CB10B660DF83E594231898F50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtZhqUjyvzSQ6J2CUvLMyHR85cc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft
Manifest number: 14D5
Signing time: Mon 27 Oct 2025 21:00:29 +0000
Manifest this update: Mon 27 Oct 2025 21:00:29 +0000
Manifest next update: Tue 28 Oct 2025 21:00:29 +0000
Files and hashes: 1: En0AxaNswsA9xI4lqkSKkt-F7C0.roa (hash: q8FwSEiSjvslMUXDVxvqWzOjw6rMu6h87zO4Dcum1yM=)
2: UtZhqUjyvzSQ6J2CUvLMyHR85cc.crl (hash: Ux4/4i3zUqIjjbtqpcTFQt0d6P0BelyibAMhqqAaE2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft
rsync://rpki.ripe.net/repository/DEFAULT/UtZhqUjyvzSQ6J2CUvLMyHR85cc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 21:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:27:78:f6:2c:b1:0b:66:0d:f8:3e:59:42:31:89:8f:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52d661a948f2bf3490e89d8252f2ccc8747ce5c7
Validity
Not Before: Oct 27 21:00:29 2025 GMT
Not After : Oct 28 21:00:29 2025 GMT
Subject: CN=67e5bd896c5fa623b19a96c191b5881a1c53ca7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cc:04:be:3d:09:5c:4b:a3:bd:11:01:52:a6:
9c:9b:ec:7d:4f:3b:91:3d:94:39:9f:82:d3:39:31:
52:21:02:7a:c0:bb:17:fb:1d:2e:b6:8e:a7:94:ab:
b7:88:4a:ff:f4:08:76:14:59:99:f9:87:8c:45:1c:
06:27:1e:55:4b:37:23:7d:eb:6c:b0:b9:e2:a1:de:
28:50:f7:a4:e6:39:00:d2:3a:15:55:a7:29:d1:fa:
ea:d5:95:06:cc:0b:2a:54:b3:a1:35:4c:aa:d4:d2:
72:ff:32:8f:01:c9:55:0e:19:3f:7c:c8:b3:20:96:
30:11:16:0c:1d:f9:8f:be:bb:0f:a4:c4:3b:cc:c9:
ac:b3:b8:25:e3:8b:82:fc:a4:f2:2d:2a:61:d3:d1:
87:a1:c2:79:17:ce:f9:86:d3:2d:b7:46:d3:cb:5b:
1d:f1:66:43:7e:fa:e3:1b:91:14:b6:2a:66:6d:12:
ca:9e:fc:08:da:07:c4:0a:2f:dc:37:50:dc:83:04:
0f:0e:4a:c5:1d:42:b4:0c:ec:fc:60:e6:e1:77:72:
f2:2d:0c:1e:6e:dd:0c:c0:88:69:c3:8f:d1:9a:35:
dd:96:28:b2:52:2e:88:e5:49:95:98:a8:25:18:a6:
68:40:50:1d:11:ea:8e:93:34:4d:30:9e:9a:7d:00:
e8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:E5:BD:89:6C:5F:A6:23:B1:9A:96:C1:91:B5:88:1A:1C:53:CA:7E
X509v3 Authority Key Identifier:
keyid:52:D6:61:A9:48:F2:BF:34:90:E8:9D:82:52:F2:CC:C8:74:7C:E5:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtZhqUjyvzSQ6J2CUvLMyHR85cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:a4:59:90:60:c1:b1:29:41:d5:b6:bc:c8:ee:2e:5f:ca:ce:
63:ca:9a:6a:bd:61:66:b3:1f:e4:ac:2a:17:25:52:88:90:8b:
39:bb:b7:29:54:51:3f:52:eb:b8:c4:97:87:82:10:c4:bd:02:
7d:70:32:d8:6d:c0:54:92:53:09:00:94:94:21:04:96:61:51:
65:de:76:22:87:d6:a5:f7:11:e0:27:3f:9b:14:1a:57:f7:0e:
b6:e7:18:f2:d9:c4:2c:0b:a5:67:3f:8e:e8:20:6f:a1:0d:56:
42:d6:d7:64:46:7a:64:2b:91:d4:9c:ca:93:d1:21:47:90:6b:
6e:2e:13:ac:4e:78:61:e5:0c:0f:78:9c:31:47:18:71:06:53:
36:a6:06:85:7c:e3:a1:61:46:89:02:a9:1c:43:cd:55:c6:ca:
6d:b8:64:dc:96:75:71:11:9e:fc:fd:e9:1e:16:4c:22:42:fc:
64:74:24:04:2e:b2:8e:ca:6c:68:11:af:a3:f4:4d:5a:4b:f6:
5d:94:eb:4d:75:58:1f:a0:48:a7:55:6a:fa:7d:ae:00:3b:2b:
60:08:1e:24:af:1e:82:ba:78:54:55:44:ab:af:98:ae:d9:be:
63:bc:fc:cf:2e:b6:07:f0:80:4f:0d:f5:b5:ce:41:6a:0f:5e:
91:3e:5d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 04:41:00 2025 by rpki-client