Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/42b317-12c8-4dd1-9c55-bfa969e567b1/1/UTNdj7orxzOYOV-90-DW8_89G2Q.mft
File: UTNdj7orxzOYOV-90-DW8_89G2Q.mft (raw, json)
Hash identifier: ozEb9rh9X53oxK+mBikSK32LIxWu3Vy7m32JgUUtbkk=
Subject key identifier: 9F:33:8B:EA:B1:99:D2:3B:78:1B:19:2C:5B:3C:8C:B3:F0:84:A4:7E
Authority key identifier: 51:33:5D:8F:BA:2B:C7:33:98:39:5F:BD:D3:E0:D6:F3:FF:3D:1B:64
Certificate issuer: /CN=51335d8fba2bc73398395fbdd3e0d6f3ff3d1b64
Certificate serial: 01976C2B4B3821378C2A4E688BA279619B3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UTNdj7orxzOYOV-90-DW8_89G2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/42b317-12c8-4dd1-9c55-bfa969e567b1/1/UTNdj7orxzOYOV-90-DW8_89G2Q.mft
Manifest number: 1122
Signing time: Sat 14 Jun 2025 02:01:05 +0000
Manifest this update: Sat 14 Jun 2025 02:01:05 +0000
Manifest next update: Sun 15 Jun 2025 02:01:05 +0000
Files and hashes: 1: UTNdj7orxzOYOV-90-DW8_89G2Q.crl (hash: VlcIQD4kVM1lqKYfVQqOKbq7m0/T1xIuozDSS1jKt84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/42b317-12c8-4dd1-9c55-bfa969e567b1/1/UTNdj7orxzOYOV-90-DW8_89G2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/42b317-12c8-4dd1-9c55-bfa969e567b1/1/UTNdj7orxzOYOV-90-DW8_89G2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/UTNdj7orxzOYOV-90-DW8_89G2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2b:4b:38:21:37:8c:2a:4e:68:8b:a2:79:61:9b:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51335d8fba2bc73398395fbdd3e0d6f3ff3d1b64
Validity
Not Before: Jun 14 02:01:05 2025 GMT
Not After : Jun 15 02:01:05 2025 GMT
Subject: CN=9f338beab199d23b781b192c5b3c8cb3f084a47e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:06:7e:24:af:53:82:ed:f3:cb:40:11:ac:8d:
87:91:a1:3d:84:d0:5c:89:bb:b2:1c:bc:08:b5:20:
0e:65:60:cc:a9:46:b7:a4:b9:c2:d5:47:9e:a1:77:
35:c4:3b:ad:cd:c5:18:30:f6:d6:d3:19:21:2d:05:
81:0a:45:bc:4a:cc:65:19:5d:51:15:a2:57:bc:d3:
a6:86:f8:1d:25:f7:eb:3b:cf:35:8f:6d:2d:d1:4b:
6e:8b:00:55:88:24:69:02:fd:85:67:4a:a8:ae:e4:
d3:a1:88:38:f0:30:2a:03:3e:cb:42:56:74:d2:76:
fb:a9:49:17:b8:d5:e0:ad:05:6d:85:f2:fa:63:eb:
16:f5:0b:82:23:c6:0a:ee:8e:2c:02:44:ad:10:d7:
11:ea:41:ce:46:0c:b6:4b:41:50:86:9c:af:1b:dd:
16:95:98:d7:c6:83:f9:a1:1b:ad:ca:19:f5:c8:6f:
26:71:fe:ad:b7:eb:05:63:48:ad:f1:34:db:74:e3:
e9:13:29:d1:72:8d:a0:af:f5:62:70:91:3c:22:6d:
35:91:40:d6:37:df:b6:cd:0b:6e:93:cc:ab:70:29:
92:7e:47:2b:11:16:ee:91:ee:ab:0b:ec:38:99:7c:
2f:25:af:c0:b2:57:42:b8:41:c7:a4:c8:d9:7a:7f:
11:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:33:8B:EA:B1:99:D2:3B:78:1B:19:2C:5B:3C:8C:B3:F0:84:A4:7E
X509v3 Authority Key Identifier:
keyid:51:33:5D:8F:BA:2B:C7:33:98:39:5F:BD:D3:E0:D6:F3:FF:3D:1B:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTNdj7orxzOYOV-90-DW8_89G2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/42b317-12c8-4dd1-9c55-bfa969e567b1/1/UTNdj7orxzOYOV-90-DW8_89G2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/42b317-12c8-4dd1-9c55-bfa969e567b1/1/UTNdj7orxzOYOV-90-DW8_89G2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:c2:71:a0:cd:6d:55:16:fe:cb:a5:b9:8a:d7:ca:26:bf:d3:
e6:73:91:11:fc:b5:ef:85:a1:90:b1:dd:31:94:9b:bd:bf:e7:
a8:b0:15:16:1c:19:50:c8:da:dc:1d:c0:1b:7c:0e:96:77:e2:
3b:ab:e1:02:dc:14:62:f1:cc:49:54:1d:97:1d:ca:27:2a:88:
0d:03:8d:49:da:e3:f1:48:3d:25:77:f4:90:27:10:30:ff:b8:
2c:19:e5:2f:84:97:c4:04:5b:16:58:3b:ac:99:c7:04:16:f1:
e2:8b:92:d8:f6:91:85:d4:1e:6c:af:aa:6e:bd:ea:69:79:fd:
b5:24:e4:f1:9b:de:ae:2b:92:9f:83:b0:c8:a1:40:9a:4c:f5:
2e:1d:34:88:6d:57:51:fd:fb:04:9a:b1:cd:42:df:5c:41:96:
1e:18:92:da:e8:f5:15:dc:9a:10:a5:b8:3d:8e:e3:11:9c:e1:
53:87:90:bb:8e:19:1a:93:3e:7f:d6:e6:36:05:8e:69:3d:b7:
8e:ad:44:87:b6:07:31:eb:01:ce:6b:ea:35:1b:02:04:02:4f:
a9:40:ea:93:b0:37:e3:8c:6e:b5:3c:9e:2e:40:73:df:42:5d:
ad:08:c2:46:02:bb:de:1f:6b:06:a3:ea:7c:73:3b:e2:3e:c8:
72:88:e1:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsK0s4ITeMKk5oi6J5YZs7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxMzM1ZDhmYmEyYmM3MzM5ODM5NWZiZGQzZTBkNmYzZmYz
ZDFiNjQwHhcNMjUwNjE0MDIwMTA1WhcNMjUwNjE1MDIwMTA1WjAzMTEwLwYDVQQD
Eyg5ZjMzOGJlYWIxOTlkMjNiNzgxYjE5MmM1YjNjOGNiM2YwODRhNDdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQZ+JK9Tgu3zy0ARrI2HkaE9hNBc
ibuyHLwItSAOZWDMqUa3pLnC1UeeoXc1xDutzcUYMPbW0xkhLQWBCkW8SsxlGV1R
FaJXvNOmhvgdJffrO881j20t0UtuiwBViCRpAv2FZ0qoruTToYg48DAqAz7LQlZ0
0nb7qUkXuNXgrQVthfL6Y+sW9QuCI8YK7o4sAkStENcR6kHORgy2S0FQhpyvG90W
lZjXxoP5oRutyhn1yG8mcf6tt+sFY0it8TTbdOPpEynRco2gr/VicJE8Im01kUDW
N9+2zQtuk8yrcCmSfkcrERbuke6rC+w4mXwvJa/AsldCuEHHpMjZen8RuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ8zi+qxmdI7eBsZLFs8jLPwhKR+MB8GA1UdIwQY
MBaAFFEzXY+6K8czmDlfvdPg1vP/PRtkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVROZGo3b3J4ek9ZT1YtOTAtRFc4Xzg5RzJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS80MmIzMTctMTJjOC00ZGQxLTljNTUt
YmZhOTY5ZTU2N2IxLzEvVVROZGo3b3J4ek9ZT1YtOTAtRFc4Xzg5RzJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS80MmIzMTctMTJjOC00ZGQxLTljNTUtYmZhOTY5ZTU2N2Ix
LzEvVVROZGo3b3J4ek9ZT1YtOTAtRFc4Xzg5RzJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfMJxoM1t
VRb+y6W5itfKJr/T5nOREfy174WhkLHdMZSbvb/nqLAVFhwZUMja3B3AG3wOlnfi
O6vhAtwUYvHMSVQdlx3KJyqIDQONSdrj8Ug9JXf0kCcQMP+4LBnlL4SXxARbFlg7
rJnHBBbx4ouS2PaRhdQebK+qbr3qaXn9tSTk8ZveriuSn4OwyKFAmkz1Lh00iG1X
Uf37BJqxzULfXEGWHhiS2uj1FdyaEKW4PY7jEZzhU4eQu44ZGpM+f9bmNgWOaT23
jq1Eh7YHMesBzmvqNRsCBAJPqUDqk7A344xutTyeLkBz30JdrQjCRgK73h9rBqPq
fHM74j7Icojhww==
-----END CERTIFICATE-----
Generated at Sat Jun 14 13:03:23 2025 by rpki-client