Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/UTBvX0bb20E2BCor440F0iKnx2E.mft
File: UTBvX0bb20E2BCor440F0iKnx2E.mft (raw, json)
Hash identifier: gURdKNX4iFGuinZRdniwaKgMUAQLb/ENrN+WFu0A0SE=
Subject key identifier: 67:77:DF:CD:5A:C4:8F:95:BA:88:57:D0:77:3A:B3:F9:24:54:97:8C
Authority key identifier: 51:30:6F:5F:46:DB:DB:41:36:04:2A:2B:E3:8D:05:D2:22:A7:C7:61
Certificate issuer: /CN=51306f5f46dbdb4136042a2be38d05d222a7c761
Certificate serial: 019A71EECEC42E24764BCC78800BEADCA83A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UTBvX0bb20E2BCor440F0iKnx2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/UTBvX0bb20E2BCor440F0iKnx2E.mft
Manifest number: AB
Signing time: Tue 11 Nov 2025 08:01:07 +0000
Manifest this update: Tue 11 Nov 2025 08:01:07 +0000
Manifest next update: Wed 12 Nov 2025 08:01:07 +0000
Files and hashes: 1: UTBvX0bb20E2BCor440F0iKnx2E.crl (hash: QyEusvTPJonLaHqWvmIpINqtw+uk1XEfk+vgj0Hw3oo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/UTBvX0bb20E2BCor440F0iKnx2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/UTBvX0bb20E2BCor440F0iKnx2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/UTBvX0bb20E2BCor440F0iKnx2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:ce:c4:2e:24:76:4b:cc:78:80:0b:ea:dc:a8:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51306f5f46dbdb4136042a2be38d05d222a7c761
Validity
Not Before: Nov 11 08:01:07 2025 GMT
Not After : Nov 12 08:01:07 2025 GMT
Subject: CN=6777dfcd5ac48f95ba8857d0773ab3f92454978c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:6f:6f:9a:b1:b8:19:b1:e9:74:54:c8:81:d4:
ab:c6:1b:77:3b:6a:2b:4d:8a:1b:09:67:2d:39:77:
c9:d4:a3:41:d1:b6:27:e6:37:36:4f:c0:e7:5b:3f:
18:ef:f2:94:c4:44:b6:fc:37:3a:fb:b1:2c:20:ad:
81:15:d8:b2:8b:de:6b:be:6f:60:b1:56:05:ad:11:
82:79:97:fc:9c:cf:f6:42:ce:dc:30:df:d0:fd:1e:
e4:2b:61:aa:9a:d5:d5:cf:e1:a3:45:e0:24:25:74:
66:7c:48:2b:ad:90:dd:fe:52:f9:4c:38:78:f6:a0:
5d:a1:ca:3d:90:30:59:39:27:00:2e:66:7e:dc:dd:
fe:b0:e4:2f:29:ff:2f:33:39:5d:60:30:93:89:c6:
d0:41:df:cb:1e:bc:3a:73:c6:d6:c6:34:f6:de:33:
58:4d:d0:00:0f:59:35:85:41:76:65:b4:77:00:52:
6f:33:8b:65:36:68:43:3a:f6:09:b9:d5:09:fe:26:
f6:e0:bd:ac:9f:ae:1f:02:9e:c5:8e:13:19:31:63:
3f:82:be:61:73:bb:90:a4:40:9f:d9:3f:24:b8:b9:
70:7e:19:7e:8f:f2:cd:a2:e0:c4:ce:38:e6:0b:8e:
39:e3:ac:f3:22:56:c6:7b:1d:2f:6b:7a:63:ac:dd:
fe:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:77:DF:CD:5A:C4:8F:95:BA:88:57:D0:77:3A:B3:F9:24:54:97:8C
X509v3 Authority Key Identifier:
keyid:51:30:6F:5F:46:DB:DB:41:36:04:2A:2B:E3:8D:05:D2:22:A7:C7:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTBvX0bb20E2BCor440F0iKnx2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/UTBvX0bb20E2BCor440F0iKnx2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2743eb-c96e-4924-85fc-60b3a59c6077/1/UTBvX0bb20E2BCor440F0iKnx2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:a6:04:cd:a8:97:76:4b:98:3d:91:79:f4:5c:9f:7d:de:26:
35:41:f1:24:60:9d:ff:9b:de:3b:df:43:2a:63:08:0e:0e:60:
19:75:7a:6d:f2:d8:26:82:c5:a8:35:c9:4a:42:9d:6e:80:00:
3f:5a:0c:27:bf:fa:45:a2:db:81:5e:b5:1b:c7:b7:32:4d:23:
bd:36:82:19:23:2c:3f:58:8d:06:8d:93:1b:75:d4:84:ef:9b:
37:af:e3:02:e4:9e:c2:a4:64:a6:3d:ea:0a:46:ea:e2:30:7a:
2b:95:e5:bf:60:3e:d8:6b:59:78:d8:1e:b1:4a:7c:ac:91:4c:
6d:60:f8:ca:bc:cb:9e:8b:5d:64:b8:89:d2:65:1b:88:95:d6:
7f:ae:c0:51:9f:5d:25:17:fc:85:02:63:c8:aa:2d:ef:1e:16:
da:36:af:17:e0:61:a8:51:cc:71:ba:d2:14:8b:c5:a3:7b:52:
86:f2:7b:f5:2f:2c:bb:5a:8e:57:fd:6a:41:b5:1a:cb:b5:c3:
f3:55:03:c4:94:05:e4:29:18:a5:99:d8:eb:dd:05:40:a5:74:
4a:1c:e4:7c:36:a4:ef:5e:d6:da:5f:c6:b3:b5:de:b4:73:cb:
b9:fe:29:c8:f5:f0:75:65:19:d7:87:63:28:8e:a1:7f:52:84:
80:61:59:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:36 2025 by rpki-client