Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/4ff275-6892-4690-8f68-30d4c5729146/1/UtAEYyC9KzE3QouZzMNLGEoGrKo.mft
File: UtAEYyC9KzE3QouZzMNLGEoGrKo.mft (raw, json)
Hash identifier: 9KgYAjLCzKrv/ZKoqzcsZ8+UcQBOWV0Fg3L3UihoWwk=
Subject key identifier: BB:B6:A4:EA:5B:08:16:CF:9F:A4:91:1D:94:FE:94:30:E4:94:D7:2D
Authority key identifier: 52:D0:04:63:20:BD:2B:31:37:42:8B:99:CC:C3:4B:18:4A:06:AC:AA
Certificate issuer: /CN=52d0046320bd2b3137428b99ccc34b184a06acaa
Certificate serial: 019922FA1A3059E16A057FE427D8A41F6A12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtAEYyC9KzE3QouZzMNLGEoGrKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/4ff275-6892-4690-8f68-30d4c5729146/1/UtAEYyC9KzE3QouZzMNLGEoGrKo.mft
Manifest number: C7
Signing time: Sun 07 Sep 2025 07:00:39 +0000
Manifest this update: Sun 07 Sep 2025 07:00:39 +0000
Manifest next update: Mon 08 Sep 2025 07:00:39 +0000
Files and hashes: 1: UtAEYyC9KzE3QouZzMNLGEoGrKo.crl (hash: OaPHGXBlGkZfcfzsXnZsiABfsLfcXHk+qC3kWjLso3Q=)
2: aRt1vYt8aGjm4T2P_cchcqkhKi4.roa (hash: akOfuFfDuYlZDl5i1xYQCB4WC7oFit9P5KLda+bnyYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/4ff275-6892-4690-8f68-30d4c5729146/1/UtAEYyC9KzE3QouZzMNLGEoGrKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/4ff275-6892-4690-8f68-30d4c5729146/1/UtAEYyC9KzE3QouZzMNLGEoGrKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UtAEYyC9KzE3QouZzMNLGEoGrKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:1a:30:59:e1:6a:05:7f:e4:27:d8:a4:1f:6a:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52d0046320bd2b3137428b99ccc34b184a06acaa
Validity
Not Before: Sep 7 07:00:39 2025 GMT
Not After : Sep 8 07:00:39 2025 GMT
Subject: CN=bbb6a4ea5b0816cf9fa4911d94fe9430e494d72d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:12:76:b1:7e:bf:68:24:62:c2:31:71:61:3f:
5e:2b:03:50:db:83:5d:86:75:6f:b9:7a:f7:09:1b:
23:1d:0e:d5:63:cf:7d:8a:6b:ae:12:9e:7d:74:06:
1c:ba:85:cf:44:24:c6:24:82:a9:38:be:c6:88:f6:
49:71:a4:61:49:f7:33:17:e1:9d:2b:5a:51:dc:c9:
24:1d:97:cb:ac:a7:82:1f:f2:6a:a5:89:6d:a4:a0:
8d:cb:15:ce:cd:7b:18:14:1d:2a:b7:9e:b3:90:c2:
ac:46:3f:17:23:8c:bf:59:8d:5a:eb:60:36:f9:72:
61:0b:67:17:ff:2d:af:d3:90:2b:eb:2c:ba:4f:3d:
8c:84:d9:72:ed:11:21:0b:55:63:ea:2f:cd:98:22:
5a:fb:10:44:fc:f4:34:01:bd:78:3a:7c:4e:41:cc:
e1:53:8e:a9:a8:b8:50:6a:0c:d4:2a:cf:03:0e:34:
8a:f7:b8:de:e0:06:37:5c:d0:dc:65:79:a1:5a:a4:
2c:20:e2:90:40:28:64:39:77:88:45:8c:3f:89:0a:
88:2c:7f:67:c6:84:4f:47:09:93:ce:96:7a:a1:97:
f7:3d:0c:c3:43:f9:6a:d1:21:22:ba:f5:ce:ca:7a:
9c:2f:60:bd:60:36:82:bb:00:6b:2c:5f:df:fc:07:
7d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:B6:A4:EA:5B:08:16:CF:9F:A4:91:1D:94:FE:94:30:E4:94:D7:2D
X509v3 Authority Key Identifier:
keyid:52:D0:04:63:20:BD:2B:31:37:42:8B:99:CC:C3:4B:18:4A:06:AC:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtAEYyC9KzE3QouZzMNLGEoGrKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/4ff275-6892-4690-8f68-30d4c5729146/1/UtAEYyC9KzE3QouZzMNLGEoGrKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/4ff275-6892-4690-8f68-30d4c5729146/1/UtAEYyC9KzE3QouZzMNLGEoGrKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:bd:d0:a7:13:4c:9f:91:ee:60:86:bf:60:be:8c:a6:8f:22:
b1:4e:a8:ab:18:25:b6:24:58:24:34:24:36:37:4d:b5:fb:f0:
73:fd:43:bc:e4:8b:9d:17:51:3b:f6:cd:51:79:82:95:bb:aa:
28:16:37:07:c2:00:97:33:d9:8e:53:01:2f:f9:31:40:9c:45:
9e:c4:bd:c6:f2:00:d8:00:68:b0:27:59:26:9e:97:0b:c5:5c:
f9:06:ef:fc:4c:87:e3:f6:5b:10:74:1c:1f:c4:2d:10:c8:59:
17:e2:81:bf:d8:6d:fc:b7:44:bf:8b:8e:46:19:8b:84:92:22:
92:f6:8a:23:a4:4e:36:9a:d2:78:7d:58:53:bf:d4:b5:a9:28:
0d:02:f3:74:e0:4a:d4:9c:d1:33:b1:de:3e:aa:ec:9f:ea:f6:
a0:45:70:31:ee:7a:6e:40:11:0e:a6:a2:2d:48:2c:70:7f:c2:
87:2a:1c:5b:2d:4d:cb:78:03:05:cb:77:d2:a5:03:98:56:73:
d8:95:a2:c0:61:55:95:03:b1:da:57:68:9f:e9:73:1a:95:19:
7d:7f:4f:8d:b1:82:1a:67:f9:e9:d4:98:e8:42:52:e3:31:57:
1c:b0:b8:a7:3a:52:67:29:54:8d:f0:e7:8f:ed:1c:28:99:d0:
9f:c4:84:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:49:45 2025 by rpki-client