Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/4ff275-6892-4690-8f68-30d4c5729146/1/UtAEYyC9KzE3QouZzMNLGEoGrKo.mft
File: UtAEYyC9KzE3QouZzMNLGEoGrKo.mft (raw, json)
Hash identifier: VpT1gwT3Za/v26dxZUyp/6hacPrXpYD/UpzRxxhxpW8=
Subject key identifier: 6A:54:FF:81:C9:CC:5E:E5:C0:23:F1:28:4C:1E:69:6C:30:81:75:3F
Authority key identifier: 52:D0:04:63:20:BD:2B:31:37:42:8B:99:CC:C3:4B:18:4A:06:AC:AA
Certificate issuer: /CN=52d0046320bd2b3137428b99ccc34b184a06acaa
Certificate serial: 01989411DC2418D50CB98C5D067010DDE71D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtAEYyC9KzE3QouZzMNLGEoGrKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/4ff275-6892-4690-8f68-30d4c5729146/1/UtAEYyC9KzE3QouZzMNLGEoGrKo.mft
Manifest number: 7D
Signing time: Sun 10 Aug 2025 13:00:55 +0000
Manifest this update: Sun 10 Aug 2025 13:00:55 +0000
Manifest next update: Mon 11 Aug 2025 13:00:55 +0000
Files and hashes: 1: UtAEYyC9KzE3QouZzMNLGEoGrKo.crl (hash: ZCGSrQQnJLaNLePbyt7IkeaKitvpciBSUb83xS4lkEA=)
2: aRt1vYt8aGjm4T2P_cchcqkhKi4.roa (hash: akOfuFfDuYlZDl5i1xYQCB4WC7oFit9P5KLda+bnyYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/4ff275-6892-4690-8f68-30d4c5729146/1/UtAEYyC9KzE3QouZzMNLGEoGrKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/4ff275-6892-4690-8f68-30d4c5729146/1/UtAEYyC9KzE3QouZzMNLGEoGrKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UtAEYyC9KzE3QouZzMNLGEoGrKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:11:dc:24:18:d5:0c:b9:8c:5d:06:70:10:dd:e7:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52d0046320bd2b3137428b99ccc34b184a06acaa
Validity
Not Before: Aug 10 13:00:55 2025 GMT
Not After : Aug 11 13:00:55 2025 GMT
Subject: CN=6a54ff81c9cc5ee5c023f1284c1e696c3081753f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3e:b8:53:4c:78:13:7d:e8:01:c0:fd:fc:1f:
d4:1d:12:b5:f6:ab:7d:78:21:83:de:1a:14:cc:da:
a6:ca:e4:bf:45:bf:2b:2a:a9:d2:b6:1f:a9:fa:83:
1b:94:3f:34:5d:3a:7b:a9:dd:2e:ca:00:39:45:72:
7a:43:0b:87:da:2e:d1:d7:9f:f9:4b:da:1d:ca:24:
0e:6a:24:63:9f:44:d0:2d:84:eb:3d:8d:9a:db:26:
f8:f0:dc:66:01:7b:cc:9d:09:cd:bb:a4:68:77:ac:
9d:2c:e3:28:7a:c6:46:2e:b0:07:6b:5a:e1:f6:8c:
77:c5:a1:db:d8:1f:e1:21:d1:7c:4c:89:49:ae:52:
2b:ee:af:1c:bf:3e:1b:36:bd:a2:de:92:7a:ff:91:
70:28:58:30:80:a4:9c:ff:31:1c:dd:96:27:78:f5:
12:f2:e6:eb:db:2f:f4:e8:07:f2:ae:6d:b3:9d:f7:
1d:91:bd:c9:b4:20:98:9b:28:3d:1b:9c:6b:67:62:
e3:ec:ff:13:c5:bf:4d:f4:4a:39:e5:68:88:01:9c:
17:24:46:79:93:c4:00:80:be:2a:fa:62:98:06:d7:
4f:79:7b:c7:2c:38:7f:7c:9c:8d:b0:f4:73:19:57:
bd:39:e1:98:0d:a2:43:c3:44:05:49:6b:63:da:ec:
c5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:54:FF:81:C9:CC:5E:E5:C0:23:F1:28:4C:1E:69:6C:30:81:75:3F
X509v3 Authority Key Identifier:
keyid:52:D0:04:63:20:BD:2B:31:37:42:8B:99:CC:C3:4B:18:4A:06:AC:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtAEYyC9KzE3QouZzMNLGEoGrKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/4ff275-6892-4690-8f68-30d4c5729146/1/UtAEYyC9KzE3QouZzMNLGEoGrKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/4ff275-6892-4690-8f68-30d4c5729146/1/UtAEYyC9KzE3QouZzMNLGEoGrKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:7f:82:a2:09:19:f5:ae:1b:94:15:05:ea:7b:0d:15:5a:a4:
48:ea:64:21:97:74:e6:5d:88:09:37:58:ae:50:9c:27:8f:87:
29:6e:d2:01:6e:63:a0:2f:2b:dc:c4:99:42:f2:24:d9:e6:44:
e9:92:4e:6b:a9:3d:37:5d:e9:f3:f1:a4:f7:d5:31:f8:3e:d2:
6c:98:62:dd:76:06:8e:ed:fe:c2:22:f5:d5:68:23:03:3d:c0:
32:cc:c5:70:45:88:4c:8d:db:ff:34:70:05:d1:61:14:84:18:
90:3b:44:5c:da:96:fc:1d:82:4b:08:88:9f:9e:ae:ce:17:80:
1d:61:c7:d6:9b:57:c6:5d:66:c7:07:f7:ce:92:89:40:5d:44:
93:5f:36:41:53:02:c2:76:1c:85:61:b3:49:40:fa:c4:5e:7e:
9f:a1:10:6f:34:9d:b9:21:71:16:29:32:92:7c:01:34:8a:9e:
b0:ae:28:45:ad:c8:57:2a:a6:d3:13:91:6e:6a:a1:d6:2b:58:
2f:79:88:c1:57:f4:05:1f:4d:8b:e4:e6:08:49:7a:dc:50:20:
11:d8:86:e6:66:0c:4a:d9:7f:04:53:a7:9f:d9:56:ac:1b:ea:
35:f6:88:9b:c7:7c:2d:2b:78:72:61:60:67:0f:18:43:bc:57:
64:5a:17:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:12:13 2025 by rpki-client