Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft
File: UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft (raw, json)
Hash identifier: heoZ+jLsIIqjy5XHTzRTxOoQeBDKiWLha39RVf30R2A=
Subject key identifier: 89:F0:C2:32:26:65:1E:A4:10:A5:11:A2:B1:05:0A:30:C1:30:5E:55
Authority key identifier: 52:DC:49:FE:93:A3:F6:2A:DD:4C:E9:89:1D:90:33:EA:D8:3D:98:8C
Certificate issuer: /CN=52dc49fe93a3f62add4ce9891d9033ead83d988c
Certificate serial: 01976FD14B303F8ADF0A5036799375084BF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtxJ_pOj9irdTOmJHZAz6tg9mIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft
Manifest number: 01D9
Signing time: Sat 14 Jun 2025 19:01:16 +0000
Manifest this update: Sat 14 Jun 2025 19:01:16 +0000
Manifest next update: Sun 15 Jun 2025 19:01:16 +0000
Files and hashes: 1: UtxJ_pOj9irdTOmJHZAz6tg9mIw.crl (hash: 6/0lOjXWoXsFsNlxTTn/avj9xFYAMW6LnhC1nlO1Y1o=)
2: sFWfVthQNGnQ49NcUCzLqzLKdLQ.roa (hash: 0QY65Rfkx/7KLARI1qnwkNUIqsM8Lktn3TNsmFMFb3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UtxJ_pOj9irdTOmJHZAz6tg9mIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d1:4b:30:3f:8a:df:0a:50:36:79:93:75:08:4b:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52dc49fe93a3f62add4ce9891d9033ead83d988c
Validity
Not Before: Jun 14 19:01:16 2025 GMT
Not After : Jun 15 19:01:16 2025 GMT
Subject: CN=89f0c23226651ea410a511a2b1050a30c1305e55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d2:8f:16:93:8e:b3:57:98:53:b7:50:c4:52:
ea:be:4e:21:12:bf:84:ee:f7:fd:bf:57:7b:c6:9a:
c3:ac:61:9a:b9:a2:8d:4a:ce:fa:a0:93:3f:08:e5:
37:16:e4:75:c3:9b:65:88:ab:40:a1:6b:38:4b:87:
26:3d:8d:b0:b0:5f:28:49:8c:e1:61:4a:ab:3d:c7:
3a:9f:5b:64:bf:10:27:fe:60:fa:8f:f6:b8:82:09:
e8:48:bc:d1:dc:f7:b7:f0:1f:d4:30:e0:22:30:d1:
a9:7e:20:7d:d5:92:92:7a:db:83:22:86:f0:b2:8e:
14:95:89:86:4d:88:12:3a:1b:ed:02:5e:15:dc:07:
9f:1f:4c:4e:6f:88:a1:aa:55:aa:b5:3a:1b:70:a4:
e3:f3:4f:cf:ff:a0:ff:30:a8:69:2d:d0:fd:51:52:
ba:19:cd:7d:1f:17:2d:26:5c:55:a1:e2:7f:00:1c:
d4:34:db:a8:79:3a:dd:e3:c9:2d:6c:b2:3f:bd:7a:
ba:2a:ed:cb:2b:ac:53:e9:6c:72:55:6f:74:00:1e:
c2:1a:8b:f9:5e:47:cd:cc:c5:68:99:0c:95:7a:6b:
10:e5:68:b1:43:c1:40:24:3f:60:8f:d6:89:9d:eb:
a0:21:0d:bc:f0:d9:4f:52:9f:96:32:74:da:82:45:
9f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F0:C2:32:26:65:1E:A4:10:A5:11:A2:B1:05:0A:30:C1:30:5E:55
X509v3 Authority Key Identifier:
keyid:52:DC:49:FE:93:A3:F6:2A:DD:4C:E9:89:1D:90:33:EA:D8:3D:98:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtxJ_pOj9irdTOmJHZAz6tg9mIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/32ae3e-d848-45f1-9cc1-6dec46994ba4/1/UtxJ_pOj9irdTOmJHZAz6tg9mIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:d7:d5:c3:02:53:8c:54:86:f6:04:af:4f:bc:f5:77:25:36:
66:d9:07:fe:69:51:b4:c7:fa:63:c0:e7:17:aa:91:fd:ec:63:
45:a0:4e:d9:a5:ad:e1:dc:54:9e:cc:e2:9a:e9:be:af:36:f5:
d7:05:2b:c8:cf:dc:1a:f9:40:7c:df:2d:3a:a9:72:ec:6b:ef:
36:da:fe:d1:7c:b3:3c:87:d6:8b:28:e1:44:4d:a8:bb:c0:d7:
83:65:1c:72:89:8c:2d:c0:36:a2:90:15:15:81:d1:3c:76:ef:
4f:25:39:d4:25:1c:e7:44:d9:f5:8c:d5:21:af:53:ab:05:8f:
89:ef:77:98:51:71:fd:4a:25:d5:9f:b7:5b:ea:70:9c:bd:87:
36:0e:10:08:71:fb:9e:2f:c5:25:24:76:ea:32:58:6f:4c:7b:
51:74:59:8c:5e:08:c8:18:ec:f0:2a:04:fe:91:59:23:b3:75:
7f:17:cd:98:b8:d0:c1:5e:b6:5f:fe:0d:13:f9:ef:51:d3:8b:
64:37:b6:72:af:00:00:69:e5:fc:89:36:84:aa:e2:da:10:e8:
f8:48:15:84:30:66:a0:31:6d:68:7f:32:e4:20:58:93:fc:07:
2a:19:7d:fd:68:d9:b4:43:75:0f:63:21:5d:0e:a1:c3:d6:04:
3a:40:49:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:20:59 2025 by rpki-client