Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft
File: UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft (raw, json)
Hash identifier: 3aDgiiI2dCgLWVloJHgPxR//3leDSMfv4LhEx+ZbtT4=
Subject key identifier: 8D:FE:31:80:CA:DF:79:74:0B:D7:54:79:8E:A9:DA:1E:4A:6E:BC:97
Authority key identifier: 52:DC:49:FE:93:A3:F6:2A:DD:4C:E9:89:1D:90:33:EA:D8:3D:98:8C
Certificate issuer: /CN=52dc49fe93a3f62add4ce9891d9033ead83d988c
Certificate serial: 019A232EB126BEEA919C673869DA1D81DB85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtxJ_pOj9irdTOmJHZAz6tg9mIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft
Manifest number: 033F
Signing time: Mon 27 Oct 2025 01:00:53 +0000
Manifest this update: Mon 27 Oct 2025 01:00:53 +0000
Manifest next update: Tue 28 Oct 2025 01:00:53 +0000
Files and hashes: 1: UtxJ_pOj9irdTOmJHZAz6tg9mIw.crl (hash: UU0mIGRGjZjIlN/I+iUqJQl3o6bxBJc/xNCoAVu0A/E=)
2: sFWfVthQNGnQ49NcUCzLqzLKdLQ.roa (hash: 0QY65Rfkx/7KLARI1qnwkNUIqsM8Lktn3TNsmFMFb3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UtxJ_pOj9irdTOmJHZAz6tg9mIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:2e:b1:26:be:ea:91:9c:67:38:69:da:1d:81:db:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52dc49fe93a3f62add4ce9891d9033ead83d988c
Validity
Not Before: Oct 27 01:00:53 2025 GMT
Not After : Oct 28 01:00:53 2025 GMT
Subject: CN=8dfe3180cadf79740bd754798ea9da1e4a6ebc97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:12:ee:aa:13:77:e4:ac:3f:92:7b:fa:5a:1e:
bc:75:75:db:87:2b:c3:78:98:4c:2f:a2:4a:68:e4:
62:8f:46:9c:fd:89:ad:88:25:7e:75:03:43:a7:75:
f1:c0:43:1f:03:97:96:ad:37:d8:f0:b8:00:8e:a0:
0d:43:85:bd:00:a7:03:47:a8:5c:04:c8:66:20:13:
08:a9:d3:af:bc:ef:6e:a3:e5:0f:59:8c:38:ca:d0:
27:42:85:b0:ef:bd:62:66:37:44:be:39:93:3c:0a:
fe:ea:2e:e8:11:3d:00:a2:ab:e0:b6:75:10:41:37:
a8:7c:33:2a:7e:b2:b5:ff:0b:47:83:8e:f6:18:61:
f2:c3:d7:fe:75:71:51:f2:0e:5d:1d:60:05:9f:93:
b4:34:d9:e1:b8:11:b2:cc:30:e7:26:b8:ed:1c:20:
ec:62:64:82:30:f1:cf:39:33:b9:ee:82:bc:97:26:
6a:44:11:f7:df:f6:65:60:6f:9c:66:0e:1f:b7:b3:
90:d3:86:61:52:b0:8c:87:aa:bf:bd:45:0c:18:63:
5f:65:59:2a:7f:78:65:26:3d:b4:ae:be:dd:e2:93:
35:2e:0b:a0:b0:75:48:fa:ea:be:b6:f2:d4:c2:eb:
04:6d:bc:0d:18:52:33:10:34:82:5d:d4:c2:70:1c:
c8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:FE:31:80:CA:DF:79:74:0B:D7:54:79:8E:A9:DA:1E:4A:6E:BC:97
X509v3 Authority Key Identifier:
keyid:52:DC:49:FE:93:A3:F6:2A:DD:4C:E9:89:1D:90:33:EA:D8:3D:98:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtxJ_pOj9irdTOmJHZAz6tg9mIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:fd:50:a5:a1:f2:26:d8:4a:48:8c:be:b7:20:ee:6a:b7:0e:
83:30:a9:73:0f:72:10:9c:1e:ff:8b:50:46:14:d1:13:e3:9c:
4b:81:f8:a7:b6:44:8a:6c:a9:77:96:dc:77:0d:09:2d:4f:b7:
70:81:78:2f:05:4b:22:a8:a8:64:a1:c6:fa:fe:43:e8:59:19:
17:91:f6:79:a0:36:20:b7:a1:c8:f3:e4:31:1f:e1:9b:45:76:
dd:d2:33:d8:d7:ba:b3:fd:cb:b8:cb:be:54:98:d6:e6:5d:ce:
02:bf:fe:c3:9e:03:0d:0c:35:00:7e:5f:31:8b:3b:d9:53:4a:
35:92:0e:46:7b:7a:7d:33:f2:bb:6b:c4:e2:55:a0:90:23:be:
45:6f:05:2f:8a:e4:cc:b0:b3:51:ba:7e:ae:f0:80:6c:d0:dd:
cf:3e:33:ad:12:e1:12:85:bb:60:77:d0:91:2a:75:c1:8d:d5:
3e:3d:d1:42:15:ac:28:89:65:6a:15:b7:88:ca:ca:21:88:15:
26:54:e1:e1:2c:4d:db:0e:c8:f3:6b:dc:c7:87:c5:b3:e8:79:
49:95:3a:ab:e6:7d:9a:ad:50:4e:ab:3c:20:d2:b0:81:da:6b:
ae:2c:42:cf:96:db:8f:a3:0f:d1:ed:cc:78:3c:91:8c:8b:65:
ff:73:86:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZojLrEmvuqRnGc4adodgduFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyZGM0OWZlOTNhM2Y2MmFkZDRjZTk4OTFkOTAzM2VhZDgz
ZDk4OGMwHhcNMjUxMDI3MDEwMDUzWhcNMjUxMDI4MDEwMDUzWjAzMTEwLwYDVQQD
Eyg4ZGZlMzE4MGNhZGY3OTc0MGJkNzU0Nzk4ZWE5ZGExZTRhNmViYzk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRLuqhN35Kw/knv6Wh68dXXbhyvD
eJhML6JKaORij0ac/YmtiCV+dQNDp3XxwEMfA5eWrTfY8LgAjqANQ4W9AKcDR6hc
BMhmIBMIqdOvvO9uo+UPWYw4ytAnQoWw771iZjdEvjmTPAr+6i7oET0AoqvgtnUQ
QTeofDMqfrK1/wtHg472GGHyw9f+dXFR8g5dHWAFn5O0NNnhuBGyzDDnJrjtHCDs
YmSCMPHPOTO57oK8lyZqRBH33/ZlYG+cZg4ft7OQ04ZhUrCMh6q/vUUMGGNfZVkq
f3hlJj20rr7d4pM1LgugsHVI+uq+tvLUwusEbbwNGFIzEDSCXdTCcBzIkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI3+MYDK33l0C9dUeY6p2h5KbryXMB8GA1UdIwQY
MBaAFFLcSf6To/Yq3UzpiR2QM+rYPZiMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXR4Sl9wT2o5aXJkVE9tSkhaQXo2dGc5bUl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8zMmFlM2UtZDg0OC00NWYxLTljYzEt
NmRlYzQ2OTk0YmE0LzEvVXR4Sl9wT2o5aXJkVE9tSkhaQXo2dGc5bUl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8zMmFlM2UtZDg0OC00NWYxLTljYzEtNmRlYzQ2OTk0YmE0
LzEvVXR4Sl9wT2o5aXJkVE9tSkhaQXo2dGc5bUl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD/1QpaHy
JthKSIy+tyDuarcOgzCpcw9yEJwe/4tQRhTRE+OcS4H4p7ZEimypd5bcdw0JLU+3
cIF4LwVLIqioZKHG+v5D6FkZF5H2eaA2ILehyPPkMR/hm0V23dIz2Ne6s/3LuMu+
VJjW5l3OAr/+w54DDQw1AH5fMYs72VNKNZIORnt6fTPyu2vE4lWgkCO+RW8FL4rk
zLCzUbp+rvCAbNDdzz4zrRLhEoW7YHfQkSp1wY3VPj3RQhWsKIllahW3iMrKIYgV
JlTh4SxN2w7I82vcx4fFs+h5SZU6q+Z9mq1QTqs8INKwgdprrixCz5bbj6MP0e3M
eDyRjItl/3OGbQ==
-----END CERTIFICATE-----
Generated at Mon Oct 27 04:21:59 2025 by rpki-client