Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft
File: UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft (raw, json)
Hash identifier: KfTXb8R044qEtNRM/rKj1nbiPbFfGbHMEE94uWTWy58=
Subject key identifier: FF:BE:B0:51:E6:A5:5C:C7:DC:2F:29:EC:BD:EA:48:29:8B:A1:8B:8F
Authority key identifier: 52:DC:49:FE:93:A3:F6:2A:DD:4C:E9:89:1D:90:33:EA:D8:3D:98:8C
Certificate issuer: /CN=52dc49fe93a3f62add4ce9891d9033ead83d988c
Certificate serial: 01987298F4E068191B5292D48F8F1EE8F81C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtxJ_pOj9irdTOmJHZAz6tg9mIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft
Manifest number: 025F
Signing time: Mon 04 Aug 2025 01:01:23 +0000
Manifest this update: Mon 04 Aug 2025 01:01:23 +0000
Manifest next update: Tue 05 Aug 2025 01:01:23 +0000
Files and hashes: 1: UtxJ_pOj9irdTOmJHZAz6tg9mIw.crl (hash: iAJ2frBQz0duw659MR2BTZDiMILs2iFGWtOT4kT0Qmo=)
2: sFWfVthQNGnQ49NcUCzLqzLKdLQ.roa (hash: 0QY65Rfkx/7KLARI1qnwkNUIqsM8Lktn3TNsmFMFb3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UtxJ_pOj9irdTOmJHZAz6tg9mIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:f4:e0:68:19:1b:52:92:d4:8f:8f:1e:e8:f8:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52dc49fe93a3f62add4ce9891d9033ead83d988c
Validity
Not Before: Aug 4 01:01:23 2025 GMT
Not After : Aug 5 01:01:23 2025 GMT
Subject: CN=ffbeb051e6a55cc7dc2f29ecbdea48298ba18b8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f3:d5:31:2f:09:b3:ec:38:7c:69:bf:da:d2:
fd:1c:06:8a:15:51:5f:45:bf:73:b9:35:c2:35:fd:
40:12:8c:f0:60:6a:55:e8:e1:ee:21:2f:5e:32:48:
a7:52:c2:cb:81:a7:f4:75:34:46:84:db:37:a6:76:
68:97:66:89:b5:70:22:da:ec:d9:da:39:a6:27:22:
2a:55:f5:a1:b7:ab:9c:a9:bd:62:db:34:a6:0f:1b:
ac:81:a7:9a:f2:86:09:37:a3:8f:df:99:60:03:cd:
15:14:96:66:f0:ba:bb:50:c8:a6:67:dc:43:7e:3c:
0a:a0:3e:98:85:87:45:08:b4:f4:dd:a9:69:f5:c4:
48:ca:76:d7:fd:dd:19:17:6b:21:83:67:ea:ef:a0:
70:d7:21:6b:7d:fd:68:a0:fa:f1:c6:a2:61:43:6c:
99:55:05:df:b9:76:02:02:f5:c7:74:0e:94:2f:75:
7a:a1:54:02:6c:71:71:e2:03:9c:63:f9:b5:8d:6a:
85:40:20:42:b6:58:2f:a6:65:50:e4:47:1e:50:08:
ca:ca:fe:a7:11:a4:5a:80:5d:a6:de:66:52:5e:93:
62:58:98:5e:6f:27:b1:29:1f:55:b0:f7:34:09:2b:
2e:5f:95:e2:a3:b2:0c:d3:23:df:0f:05:8a:31:12:
b8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:BE:B0:51:E6:A5:5C:C7:DC:2F:29:EC:BD:EA:48:29:8B:A1:8B:8F
X509v3 Authority Key Identifier:
keyid:52:DC:49:FE:93:A3:F6:2A:DD:4C:E9:89:1D:90:33:EA:D8:3D:98:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtxJ_pOj9irdTOmJHZAz6tg9mIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:5b:bd:48:1d:1a:9a:41:86:d2:be:ee:ec:43:16:8a:18:c4:
69:fe:55:c9:22:94:30:dc:23:61:2e:d8:da:4e:de:b1:6b:2e:
eb:1e:e4:12:36:2a:fc:7a:e1:85:0c:8d:3d:03:35:ec:cb:e0:
11:f5:f2:ad:89:1b:ca:05:93:c9:d6:08:49:46:07:69:fc:28:
8f:25:83:01:da:a1:4d:c1:29:a3:26:74:19:53:6e:c6:86:1e:
ad:c7:77:b2:e1:e5:1b:a1:40:a7:df:6c:19:1c:99:8f:84:bf:
56:48:89:d6:8a:27:c9:0f:be:03:88:2f:27:4d:9d:f6:16:b3:
9f:bc:7c:c5:96:6d:0c:77:c4:21:2d:cd:af:0d:ae:4e:71:27:
71:be:cf:ce:29:d8:09:1e:b6:ff:26:4c:85:ec:1e:38:92:e5:
f0:c1:23:8f:ac:97:98:f1:29:6e:03:cd:f4:1a:d2:3b:54:a0:
9e:ce:7d:38:a8:9b:bb:c3:3e:0e:ca:63:69:96:0e:2c:57:3d:
99:5d:85:14:65:3f:bc:d7:60:80:6f:23:0b:44:a0:a9:0a:5b:
2d:b3:68:4b:f9:a1:a4:9b:94:04:80:48:08:9b:90:97:81:fa:
88:72:ce:ea:d4:8f:84:cb:be:80:18:d0:0d:56:73:f8:d9:b7:
2b:a4:eb:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhymPTgaBkbUpLUj48e6PgcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyZGM0OWZlOTNhM2Y2MmFkZDRjZTk4OTFkOTAzM2VhZDgz
ZDk4OGMwHhcNMjUwODA0MDEwMTIzWhcNMjUwODA1MDEwMTIzWjAzMTEwLwYDVQQD
EyhmZmJlYjA1MWU2YTU1Y2M3ZGMyZjI5ZWNiZGVhNDgyOThiYTE4YjhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfPVMS8Js+w4fGm/2tL9HAaKFVFf
Rb9zuTXCNf1AEozwYGpV6OHuIS9eMkinUsLLgaf0dTRGhNs3pnZol2aJtXAi2uzZ
2jmmJyIqVfWht6ucqb1i2zSmDxusgaea8oYJN6OP35lgA80VFJZm8Lq7UMimZ9xD
fjwKoD6YhYdFCLT03alp9cRIynbX/d0ZF2shg2fq76Bw1yFrff1ooPrxxqJhQ2yZ
VQXfuXYCAvXHdA6UL3V6oVQCbHFx4gOcY/m1jWqFQCBCtlgvpmVQ5EceUAjKyv6n
EaRagF2m3mZSXpNiWJhebyexKR9VsPc0CSsuX5Xio7IM0yPfDwWKMRK4lwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP++sFHmpVzH3C8p7L3qSCmLoYuPMB8GA1UdIwQY
MBaAFFLcSf6To/Yq3UzpiR2QM+rYPZiMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXR4Sl9wT2o5aXJkVE9tSkhaQXo2dGc5bUl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8zMmFlM2UtZDg0OC00NWYxLTljYzEt
NmRlYzQ2OTk0YmE0LzEvVXR4Sl9wT2o5aXJkVE9tSkhaQXo2dGc5bUl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8zMmFlM2UtZDg0OC00NWYxLTljYzEtNmRlYzQ2OTk0YmE0
LzEvVXR4Sl9wT2o5aXJkVE9tSkhaQXo2dGc5bUl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmlu9SB0a
mkGG0r7u7EMWihjEaf5VySKUMNwjYS7Y2k7esWsu6x7kEjYq/HrhhQyNPQM17Mvg
EfXyrYkbygWTydYISUYHafwojyWDAdqhTcEpoyZ0GVNuxoYercd3suHlG6FAp99s
GRyZj4S/VkiJ1oonyQ++A4gvJ02d9hazn7x8xZZtDHfEIS3Nrw2uTnEncb7PzinY
CR62/yZMheweOJLl8MEjj6yXmPEpbgPN9BrSO1Sgns59OKibu8M+DspjaZYOLFc9
mV2FFGU/vNdggG8jC0SgqQpbLbNoS/mhpJuUBIBICJuQl4H6iHLO6tSPhMu+gBjQ
DVZz+Nm3K6TrvA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:18:08 2025 by rpki-client