Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/4ff275-6892-4690-8f68-30d4c5729146/1/UtAEYyC9KzE3QouZzMNLGEoGrKo.mft
File: UtAEYyC9KzE3QouZzMNLGEoGrKo.mft (raw, json)
Hash identifier: 0TL5/EsPkNKFMQD6NLbR+QrFMPXcxk3PcKah5Nhlluc=
Subject key identifier: 00:45:17:AA:0B:02:04:56:80:A8:B5:09:1C:0E:3C:B5:0B:0B:59:1E
Authority key identifier: 52:D0:04:63:20:BD:2B:31:37:42:8B:99:CC:C3:4B:18:4A:06:AC:AA
Certificate issuer: /CN=52d0046320bd2b3137428b99ccc34b184a06acaa
Certificate serial: 019A7112C7F99D558EF9E7D2B4F93C462E23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtAEYyC9KzE3QouZzMNLGEoGrKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/4ff275-6892-4690-8f68-30d4c5729146/1/UtAEYyC9KzE3QouZzMNLGEoGrKo.mft
Manifest number: 0174
Signing time: Tue 11 Nov 2025 04:00:47 +0000
Manifest this update: Tue 11 Nov 2025 04:00:47 +0000
Manifest next update: Wed 12 Nov 2025 04:00:47 +0000
Files and hashes: 1: UtAEYyC9KzE3QouZzMNLGEoGrKo.crl (hash: EYQ3EO37l0hLAZqXu2tbCSbVOotsVDCcIJ5JEbx+X0k=)
2: aRt1vYt8aGjm4T2P_cchcqkhKi4.roa (hash: akOfuFfDuYlZDl5i1xYQCB4WC7oFit9P5KLda+bnyYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/4ff275-6892-4690-8f68-30d4c5729146/1/UtAEYyC9KzE3QouZzMNLGEoGrKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/4ff275-6892-4690-8f68-30d4c5729146/1/UtAEYyC9KzE3QouZzMNLGEoGrKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UtAEYyC9KzE3QouZzMNLGEoGrKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:c7:f9:9d:55:8e:f9:e7:d2:b4:f9:3c:46:2e:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52d0046320bd2b3137428b99ccc34b184a06acaa
Validity
Not Before: Nov 11 04:00:47 2025 GMT
Not After : Nov 12 04:00:47 2025 GMT
Subject: CN=004517aa0b02045680a8b5091c0e3cb50b0b591e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4b:39:46:3b:a0:9c:da:51:a9:d0:e3:cd:a9:
f8:ba:49:6d:a7:65:e7:97:a1:ac:42:3b:fe:d1:51:
61:33:1a:c3:46:36:96:63:fe:4f:e0:d5:a3:98:cb:
93:5f:1e:0a:75:34:42:18:ca:e4:18:34:b5:54:94:
28:98:42:0d:48:e6:c1:21:43:af:fa:c7:ee:59:03:
fb:1c:54:ce:9c:e2:da:3b:fb:f9:c3:c1:13:ca:a5:
8d:7a:ec:42:3a:49:4e:e7:f4:3c:44:82:8e:eb:5b:
00:92:48:49:df:df:4e:09:08:fd:fc:d7:53:42:fc:
59:d9:62:89:d1:9b:5a:b8:7d:80:43:5a:8e:00:99:
d7:49:e0:4e:1d:3c:e5:05:73:84:ac:b9:6e:3f:ef:
f4:94:41:49:b5:2f:37:87:f8:09:e6:b9:97:43:6e:
fb:2b:20:b0:14:f6:cd:bb:fe:79:ea:76:3f:05:a5:
b2:a8:c4:f1:6f:16:b2:ac:d1:4e:a3:67:4c:b1:c8:
e3:8e:e9:a6:e8:e8:f7:e9:59:e1:29:f3:24:4a:b1:
70:e6:66:3c:5e:a7:e7:45:3f:8e:41:c6:34:40:24:
16:81:72:6b:6b:fa:fa:d1:67:72:8a:c6:b5:13:ef:
be:b9:fe:ea:7c:d9:c9:89:c8:68:c7:34:14:e3:97:
5d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:45:17:AA:0B:02:04:56:80:A8:B5:09:1C:0E:3C:B5:0B:0B:59:1E
X509v3 Authority Key Identifier:
keyid:52:D0:04:63:20:BD:2B:31:37:42:8B:99:CC:C3:4B:18:4A:06:AC:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtAEYyC9KzE3QouZzMNLGEoGrKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/4ff275-6892-4690-8f68-30d4c5729146/1/UtAEYyC9KzE3QouZzMNLGEoGrKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/4ff275-6892-4690-8f68-30d4c5729146/1/UtAEYyC9KzE3QouZzMNLGEoGrKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:12:69:a6:b7:40:a7:05:fa:5e:62:e9:48:80:bc:c9:5e:c6:
89:46:cb:d5:36:7b:2d:21:26:a4:bb:c5:9d:1b:de:e0:0f:a4:
41:ad:bc:8b:6a:e3:87:56:83:c7:46:20:2f:a4:ea:57:1c:8c:
df:00:68:07:d3:d5:c0:32:30:9f:8e:08:5b:80:58:66:21:b0:
f6:12:b4:11:90:11:87:09:07:16:aa:8f:65:23:1a:d2:49:dd:
12:b9:c9:37:60:bd:97:3b:5a:39:45:85:f3:c6:54:d7:b1:52:
ca:04:9c:ff:8f:b8:b9:97:ce:19:8b:ad:37:de:65:29:c4:cb:
b0:13:f4:1f:8d:f2:ba:f5:3d:51:31:d1:ae:45:b4:f0:bc:60:
98:0e:e2:48:e8:4b:ec:ae:a7:a7:cc:7f:a3:77:f1:56:aa:5e:
93:e2:27:81:26:d1:e4:38:57:76:39:71:24:95:f9:1f:a2:fb:
9e:9f:69:99:a0:fc:82:91:16:4d:af:65:a6:72:f7:2a:6d:61:
15:03:74:c9:8e:47:ff:e7:1c:3b:b8:8c:6e:81:9d:95:63:5e:
59:88:4e:38:a9:39:ba:39:97:54:b7:8b:aa:9d:4c:3c:06:22:
b7:30:bb:17:3e:6d:77:a6:bf:5b:ad:6b:38:bf:a5:53:91:f9:
cc:12:69:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:52 2025 by rpki-client