Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/f58cf3-6909-458a-a51a-5914f9d3378b/1/UTIqxJAgylfHTzsUi8BBAsq63IM.mft
File: UTIqxJAgylfHTzsUi8BBAsq63IM.mft (raw, json)
Hash identifier: BVyv4KYecpLMJRy9qjlYeMWuhbjdHia969tDzLfhTeA=
Subject key identifier: DA:82:72:2A:E6:1C:09:2E:7F:02:AF:90:06:D5:1F:1E:B1:52:C1:31
Authority key identifier: 51:32:2A:C4:90:20:CA:57:C7:4F:3B:14:8B:C0:41:02:CA:BA:DC:83
Certificate issuer: /CN=51322ac49020ca57c74f3b148bc04102cabadc83
Certificate serial: 0197782F5A7F3C8FDF6E94F495EB605BC58F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UTIqxJAgylfHTzsUi8BBAsq63IM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/f58cf3-6909-458a-a51a-5914f9d3378b/1/UTIqxJAgylfHTzsUi8BBAsq63IM.mft
Manifest number: 1070
Signing time: Mon 16 Jun 2025 10:00:58 +0000
Manifest this update: Mon 16 Jun 2025 10:00:58 +0000
Manifest next update: Tue 17 Jun 2025 10:00:58 +0000
Files and hashes: 1: UTIqxJAgylfHTzsUi8BBAsq63IM.crl (hash: njvZajcUPo3uVazbdAj4+BgqVCooNAKjOnF1HXfmIYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/f58cf3-6909-458a-a51a-5914f9d3378b/1/UTIqxJAgylfHTzsUi8BBAsq63IM.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/f58cf3-6909-458a-a51a-5914f9d3378b/1/UTIqxJAgylfHTzsUi8BBAsq63IM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UTIqxJAgylfHTzsUi8BBAsq63IM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:2f:5a:7f:3c:8f:df:6e:94:f4:95:eb:60:5b:c5:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51322ac49020ca57c74f3b148bc04102cabadc83
Validity
Not Before: Jun 16 10:00:58 2025 GMT
Not After : Jun 17 10:00:58 2025 GMT
Subject: CN=da82722ae61c092e7f02af9006d51f1eb152c131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:42:48:a0:39:07:67:a1:ee:03:0e:00:eb:0e:
ee:ae:ec:19:1d:30:e1:82:f2:ac:9a:bb:6b:3b:89:
51:cc:e0:b6:74:29:e3:aa:32:5d:0b:42:1b:0f:18:
77:77:95:3e:c5:3a:15:10:97:03:4c:ed:46:cd:a4:
b0:d4:66:0d:01:ba:c3:98:90:10:f0:99:49:ca:91:
d7:b5:66:89:95:63:19:68:05:fa:60:2c:38:a4:6b:
af:4d:19:20:eb:6c:1b:0d:81:8e:67:11:df:65:90:
69:1d:3a:2d:fd:08:4e:e8:6b:63:ff:89:f9:20:cb:
ee:e4:6d:60:8b:fe:b2:a9:95:cc:8c:78:bf:33:dc:
bc:31:b2:42:5f:88:29:9d:dc:ad:53:db:1c:3d:cb:
35:25:9c:9d:56:63:4b:5d:6e:f0:46:7b:9e:d0:9a:
62:c4:99:21:9c:62:0b:b8:a2:86:2a:3f:cf:28:0f:
22:bb:31:58:79:2c:c3:87:85:e8:a6:eb:f7:91:2f:
c9:32:b5:3a:5d:60:88:ce:aa:7e:a4:08:f6:e1:8a:
a8:db:70:99:76:5d:07:45:e9:01:1b:79:70:e1:a5:
3a:aa:1b:be:96:17:ce:d5:38:06:a9:06:68:58:6e:
9e:51:2b:84:0e:39:0b:52:8a:54:ba:42:8f:77:aa:
d6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:82:72:2A:E6:1C:09:2E:7F:02:AF:90:06:D5:1F:1E:B1:52:C1:31
X509v3 Authority Key Identifier:
keyid:51:32:2A:C4:90:20:CA:57:C7:4F:3B:14:8B:C0:41:02:CA:BA:DC:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTIqxJAgylfHTzsUi8BBAsq63IM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f58cf3-6909-458a-a51a-5914f9d3378b/1/UTIqxJAgylfHTzsUi8BBAsq63IM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f58cf3-6909-458a-a51a-5914f9d3378b/1/UTIqxJAgylfHTzsUi8BBAsq63IM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:30:33:0a:d9:99:ce:50:b6:37:95:88:ec:b5:1d:d6:3a:68:
a2:4c:0f:d6:f8:28:dd:1e:40:b5:28:d6:8d:24:61:ae:e6:f2:
3b:01:f7:b0:80:cf:e5:aa:89:66:a5:29:ab:c6:8e:86:c4:09:
5d:bf:3d:3f:6a:9b:de:df:1d:a3:4c:8c:22:87:30:60:7b:4f:
8c:e5:29:26:64:79:13:11:1e:5c:46:bc:4e:d1:83:8f:46:27:
18:b3:34:0c:f9:d7:70:c1:2c:9a:0c:c4:1a:91:27:79:50:fd:
10:7f:ea:4c:a9:ee:dd:9d:82:20:bd:69:d9:e2:28:27:da:69:
f9:be:44:8a:33:8d:47:49:33:99:f2:bd:b9:fc:09:ae:7c:27:
25:2d:2a:f6:5e:1b:06:18:f9:e8:07:25:38:9a:55:77:3d:73:
cf:92:20:63:9d:a0:c2:f2:43:fc:2b:97:19:73:e3:43:7a:36:
00:0e:d7:c2:ed:c5:d2:67:b8:00:19:57:88:ab:61:32:87:98:
0b:a3:0e:46:e2:c2:5f:cc:20:a7:c4:60:cd:f4:64:6d:07:30:
71:c2:d1:91:ce:67:77:b5:73:22:2d:9b:46:a4:bf:ad:5a:18:
30:b0:f1:ab:a6:b5:ca:2f:30:25:bd:22:90:ed:cf:af:1f:9b:
84:e7:47:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:56:14 2025 by rpki-client