Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft
File: UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft (raw, json)
Hash identifier: YpwJm7eRZpYr68N1TElGJLMbqe8iUwEBfG/Rzq2ie4w=
Subject key identifier: 6F:41:32:E3:4C:E5:E0:52:7A:49:48:1C:2C:3F:EF:E2:6A:B8:8E:2C
Authority key identifier: 52:DC:49:FE:93:A3:F6:2A:DD:4C:E9:89:1D:90:33:EA:D8:3D:98:8C
Certificate issuer: /CN=52dc49fe93a3f62add4ce9891d9033ead83d988c
Certificate serial: 01974EFC7538457DC60AEAAB0B09F3CEDF6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtxJ_pOj9irdTOmJHZAz6tg9mIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft
Manifest number: 01C8
Signing time: Sun 08 Jun 2025 10:00:57 +0000
Manifest this update: Sun 08 Jun 2025 10:00:57 +0000
Manifest next update: Mon 09 Jun 2025 10:00:57 +0000
Files and hashes: 1: UtxJ_pOj9irdTOmJHZAz6tg9mIw.crl (hash: Pwmjg6Nz5qkjv3Myuth5rGL1kwkr6IoedG/9uZzs9jA=)
2: sFWfVthQNGnQ49NcUCzLqzLKdLQ.roa (hash: 0QY65Rfkx/7KLARI1qnwkNUIqsM8Lktn3TNsmFMFb3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UtxJ_pOj9irdTOmJHZAz6tg9mIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 10:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:fc:75:38:45:7d:c6:0a:ea:ab:0b:09:f3:ce:df:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52dc49fe93a3f62add4ce9891d9033ead83d988c
Validity
Not Before: Jun 8 10:00:57 2025 GMT
Not After : Jun 9 10:00:57 2025 GMT
Subject: CN=6f4132e34ce5e0527a49481c2c3fefe26ab88e2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:aa:15:ea:46:0b:4f:91:5b:e4:c1:16:7b:c6:
2f:3d:a0:34:41:3b:a5:6f:23:21:2a:66:10:0e:88:
81:fc:37:66:86:22:47:b2:34:fc:34:c7:6e:bb:51:
5f:27:8c:e3:43:7c:53:64:2b:08:8f:b1:34:57:c6:
69:91:4f:87:d4:70:7e:d9:58:73:6d:49:aa:ee:3d:
37:54:db:a4:28:4c:15:ab:ed:5c:c2:51:38:32:76:
6d:c8:b2:84:de:e6:fe:e0:29:82:17:5e:3c:37:9b:
44:09:5f:16:35:6a:ae:de:73:d6:b1:74:e2:3e:b8:
cd:35:d1:68:d2:1b:fa:a9:db:a5:44:b4:ea:dd:1f:
cf:9b:4c:f5:f5:49:92:88:1d:60:b4:75:b7:d9:97:
42:0b:14:78:ff:12:2d:12:4d:1f:9e:ea:a1:ed:52:
2b:d1:2d:c3:36:1e:74:32:48:37:79:69:59:70:4b:
35:ef:38:ee:87:80:70:95:6f:65:29:01:15:d3:90:
37:51:94:84:46:a5:18:ae:04:f6:76:c2:db:5f:01:
45:bb:09:73:97:df:98:3d:7e:b9:1b:ba:52:be:85:
2a:c6:3c:e1:e8:46:98:e8:b2:d1:c0:80:ef:56:ac:
f4:43:78:bf:48:1d:18:bc:5c:c7:4c:1d:88:46:f9:
f4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:41:32:E3:4C:E5:E0:52:7A:49:48:1C:2C:3F:EF:E2:6A:B8:8E:2C
X509v3 Authority Key Identifier:
keyid:52:DC:49:FE:93:A3:F6:2A:DD:4C:E9:89:1D:90:33:EA:D8:3D:98:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtxJ_pOj9irdTOmJHZAz6tg9mIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:f5:72:70:d7:33:0b:80:1f:a5:38:4f:5e:3b:75:15:80:26:
b4:36:0c:86:fa:21:3c:f3:be:c8:cd:39:c3:68:99:df:56:e9:
1e:7a:62:9d:38:de:5d:dc:ec:8c:82:c7:a3:6d:52:81:f2:53:
f2:c5:bb:79:1e:d3:1a:1d:78:08:47:75:db:dc:db:97:10:30:
e2:44:50:4c:a5:fd:ed:38:da:db:15:d7:d1:02:be:19:b6:39:
63:f5:4d:86:b7:2f:61:98:d9:9a:f7:59:79:d7:fc:5f:d2:0f:
53:00:74:02:ff:43:66:dc:22:ad:b0:7d:b6:9c:fa:a7:ec:76:
b6:d3:f1:a8:13:96:ec:9b:d9:5b:7c:07:94:c2:c8:cc:44:7d:
b6:08:33:9f:37:a9:b9:50:a5:8d:57:f1:22:25:fd:cb:95:d3:
ac:27:b1:92:ed:2f:1e:0d:75:50:be:81:e9:4a:40:30:ab:ac:
8b:41:ee:15:ce:23:67:96:ae:0f:92:ce:b0:78:61:db:9e:66:
5d:7b:fc:c2:f5:f7:d5:62:b7:47:3d:80:3c:5e:bd:34:78:03:
62:78:5c:55:0d:86:33:f0:c7:44:85:33:4d:01:61:58:eb:80:
68:d5:06:4c:db:7c:26:ac:4c:6d:23:9f:1c:b9:3b:26:88:12:
dd:12:2d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:24:36 2025 by rpki-client