Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft
File: UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft (raw, json)
Hash identifier: N+Bnt+4Z4n3bUe0umq6lT19+WBEW8ivX+8Ignxd89n8=
Subject key identifier: 14:F7:BD:C3:13:DF:10:15:B1:D9:5E:B7:F2:57:96:9A:47:A2:5D:3C
Authority key identifier: 52:DC:49:FE:93:A3:F6:2A:DD:4C:E9:89:1D:90:33:EA:D8:3D:98:8C
Certificate issuer: /CN=52dc49fe93a3f62add4ce9891d9033ead83d988c
Certificate serial: 0196520002174B66EBAE4BD89C90EA44FB52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtxJ_pOj9irdTOmJHZAz6tg9mIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft
Manifest number: 0145
Signing time: Sun 20 Apr 2025 07:00:54 +0000
Manifest this update: Sun 20 Apr 2025 07:00:54 +0000
Manifest next update: Mon 21 Apr 2025 07:00:54 +0000
Files and hashes: 1: UtxJ_pOj9irdTOmJHZAz6tg9mIw.crl (hash: TmpLSYeIHAvL1Dw4TLsGpa6e6c0AoIWcUcIPpYzy89E=)
2: sFWfVthQNGnQ49NcUCzLqzLKdLQ.roa (hash: 0QY65Rfkx/7KLARI1qnwkNUIqsM8Lktn3TNsmFMFb3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UtxJ_pOj9irdTOmJHZAz6tg9mIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:00:02:17:4b:66:eb:ae:4b:d8:9c:90:ea:44:fb:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52dc49fe93a3f62add4ce9891d9033ead83d988c
Validity
Not Before: Apr 20 07:00:54 2025 GMT
Not After : Apr 21 07:00:54 2025 GMT
Subject: CN=14f7bdc313df1015b1d95eb7f257969a47a25d3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:61:ab:a2:d7:5f:90:20:73:0b:e1:45:7d:e0:
22:df:69:e8:ab:36:73:ba:f1:06:36:19:c3:4c:10:
aa:78:be:3d:e9:3b:e2:7a:0d:f9:f7:e6:b1:79:40:
a0:f9:02:ef:84:9f:75:5f:be:27:36:49:f8:d4:02:
fe:d1:95:9e:cf:7f:ea:b7:cd:40:1d:4a:c5:db:fe:
1e:3a:7c:b7:74:5a:2f:dc:64:a8:0c:2f:4e:23:5b:
4b:be:17:f5:ad:e0:bc:4d:d2:b3:0e:2f:d1:0c:c2:
cc:3f:17:96:5d:85:95:4e:94:b1:37:4b:91:ae:04:
13:52:9e:95:28:e0:41:6f:9c:1e:cb:c6:17:65:af:
32:f7:de:88:0b:b5:99:fc:6b:4a:98:c3:d0:78:8f:
94:98:c3:ad:ab:36:6b:c0:0f:ee:17:a5:9f:f1:f4:
b9:91:e0:12:98:b8:d2:e3:5c:b0:bd:57:fd:e7:ca:
04:df:15:ca:6b:6e:2c:da:6e:a8:79:f8:04:60:3d:
47:0f:b9:56:61:f5:43:25:31:05:ec:8c:12:ae:97:
82:2b:57:a7:a6:b3:11:f7:ee:77:31:21:be:e9:9a:
5c:40:10:a4:4d:01:db:9b:97:f2:28:b2:e2:17:98:
3e:bd:87:f7:55:de:18:ed:14:4f:0d:d3:d9:b2:62:
ee:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F7:BD:C3:13:DF:10:15:B1:D9:5E:B7:F2:57:96:9A:47:A2:5D:3C
X509v3 Authority Key Identifier:
keyid:52:DC:49:FE:93:A3:F6:2A:DD:4C:E9:89:1D:90:33:EA:D8:3D:98:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtxJ_pOj9irdTOmJHZAz6tg9mIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:d3:6f:91:5f:a3:7e:b9:57:c7:f4:9d:ec:fa:3c:ab:f7:da:
1d:27:4b:aa:52:c9:8f:b3:7e:b2:f7:f4:71:79:d9:7c:e9:08:
cd:92:4c:ef:70:03:67:50:c0:e0:a0:d2:f7:80:ad:fb:ac:8d:
d3:49:02:6e:b2:1e:d2:a5:5e:e3:20:dc:9d:ad:74:cf:a6:89:
8f:20:a4:a4:96:9a:bc:42:49:74:f2:cb:91:77:97:23:a4:9d:
50:6e:d9:97:8d:94:f5:69:43:89:b6:70:ef:2a:b6:fc:22:3c:
84:66:e5:15:92:b8:45:65:36:cf:36:a2:72:4d:5c:24:d3:3d:
db:0f:b0:11:2e:4c:b5:67:02:b8:8d:e7:3f:89:2e:e4:7b:a6:
f8:bd:b3:c4:39:01:d1:6d:02:c9:b1:5a:0b:9c:2b:fe:25:67:
e0:86:09:3d:2e:db:4a:56:1d:32:b1:4a:9d:d8:90:36:50:28:
ad:fd:df:57:15:d2:37:29:68:88:4d:74:d4:f1:9f:d4:07:f2:
7f:de:79:e4:7b:7f:c4:0e:39:30:d3:b0:e1:2d:13:f9:95:98:
9d:51:ad:23:90:25:63:ab:ca:9c:4c:1e:fc:8e:dc:79:90:8a:
83:92:e4:65:70:20:b3:d8:41:5b:5d:0c:ee:fe:3a:b6:e3:2a:
82:1d:60:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZSAAIXS2brrkvYnJDqRPtSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyZGM0OWZlOTNhM2Y2MmFkZDRjZTk4OTFkOTAzM2VhZDgz
ZDk4OGMwHhcNMjUwNDIwMDcwMDU0WhcNMjUwNDIxMDcwMDU0WjAzMTEwLwYDVQQD
EygxNGY3YmRjMzEzZGYxMDE1YjFkOTVlYjdmMjU3OTY5YTQ3YTI1ZDNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGGrotdfkCBzC+FFfeAi32noqzZz
uvEGNhnDTBCqeL496Tvieg359+axeUCg+QLvhJ91X74nNkn41AL+0ZWez3/qt81A
HUrF2/4eOny3dFov3GSoDC9OI1tLvhf1reC8TdKzDi/RDMLMPxeWXYWVTpSxN0uR
rgQTUp6VKOBBb5wey8YXZa8y996IC7WZ/GtKmMPQeI+UmMOtqzZrwA/uF6Wf8fS5
keASmLjS41ywvVf958oE3xXKa24s2m6oefgEYD1HD7lWYfVDJTEF7IwSrpeCK1en
prMR9+53MSG+6ZpcQBCkTQHbm5fyKLLiF5g+vYf3Vd4Y7RRPDdPZsmLutQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBT3vcMT3xAVsdlet/JXlppHol08MB8GA1UdIwQY
MBaAFFLcSf6To/Yq3UzpiR2QM+rYPZiMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXR4Sl9wT2o5aXJkVE9tSkhaQXo2dGc5bUl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8zMmFlM2UtZDg0OC00NWYxLTljYzEt
NmRlYzQ2OTk0YmE0LzEvVXR4Sl9wT2o5aXJkVE9tSkhaQXo2dGc5bUl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8zMmFlM2UtZDg0OC00NWYxLTljYzEtNmRlYzQ2OTk0YmE0
LzEvVXR4Sl9wT2o5aXJkVE9tSkhaQXo2dGc5bUl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj9NvkV+j
frlXx/Sd7Po8q/faHSdLqlLJj7N+svf0cXnZfOkIzZJM73ADZ1DA4KDS94Ct+6yN
00kCbrIe0qVe4yDcna10z6aJjyCkpJaavEJJdPLLkXeXI6SdUG7Zl42U9WlDibZw
7yq2/CI8hGblFZK4RWU2zzaick1cJNM92w+wES5MtWcCuI3nP4ku5Hum+L2zxDkB
0W0CybFaC5wr/iVn4IYJPS7bSlYdMrFKndiQNlAorf3fVxXSNyloiE101PGf1Afy
f9555Ht/xA45MNOw4S0T+ZWYnVGtI5AlY6vKnEwe/I7ceZCKg5LkZXAgs9hBW10M
7v46tuMqgh1gBQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 17:36:16 2025 by rpki-client