Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/42b317-12c8-4dd1-9c55-bfa969e567b1/1/UTNdj7orxzOYOV-90-DW8_89G2Q.mft
File: UTNdj7orxzOYOV-90-DW8_89G2Q.mft (raw, json)
Hash identifier: rottfEioZ5neHQebXLtO+s2SU72Gp02gNWx/Ohk94Qs=
Subject key identifier: 82:B6:2C:86:FD:0C:8A:1F:B3:58:74:3E:6E:55:FC:32:DA:EE:C4:8A
Authority key identifier: 51:33:5D:8F:BA:2B:C7:33:98:39:5F:BD:D3:E0:D6:F3:FF:3D:1B:64
Certificate issuer: /CN=51335d8fba2bc73398395fbdd3e0d6f3ff3d1b64
Certificate serial: 01989F3A8A2802F92D4ED7D4F2FAB2B71A6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UTNdj7orxzOYOV-90-DW8_89G2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/42b317-12c8-4dd1-9c55-bfa969e567b1/1/UTNdj7orxzOYOV-90-DW8_89G2Q.mft
Manifest number: 11C1
Signing time: Tue 12 Aug 2025 17:01:10 +0000
Manifest this update: Tue 12 Aug 2025 17:01:10 +0000
Manifest next update: Wed 13 Aug 2025 17:01:10 +0000
Files and hashes: 1: UTNdj7orxzOYOV-90-DW8_89G2Q.crl (hash: NqtQYCNCAfMs+mA45XBBvjuDf3HmMByry83IlFJwBnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/42b317-12c8-4dd1-9c55-bfa969e567b1/1/UTNdj7orxzOYOV-90-DW8_89G2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/42b317-12c8-4dd1-9c55-bfa969e567b1/1/UTNdj7orxzOYOV-90-DW8_89G2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/UTNdj7orxzOYOV-90-DW8_89G2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:3a:8a:28:02:f9:2d:4e:d7:d4:f2:fa:b2:b7:1a:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51335d8fba2bc73398395fbdd3e0d6f3ff3d1b64
Validity
Not Before: Aug 12 17:01:10 2025 GMT
Not After : Aug 13 17:01:10 2025 GMT
Subject: CN=82b62c86fd0c8a1fb358743e6e55fc32daeec48a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:32:de:ba:76:3e:94:58:ae:80:b0:71:d3:4e:
d5:14:35:9a:ca:f0:75:24:a5:54:6b:35:9e:50:dd:
67:31:3e:c6:d6:82:bf:9d:b8:c4:f5:d7:3d:19:ea:
62:5a:ec:29:78:51:e8:ec:3a:f4:58:71:61:27:10:
02:5f:14:a4:9b:77:27:c5:43:14:97:be:e4:f0:cd:
7f:f0:97:47:2e:e9:5c:c1:3f:d9:ff:ce:2d:1c:7f:
93:7f:1f:2c:dc:b4:ed:c1:3f:3f:fb:85:4b:f3:64:
8e:8c:b8:4c:66:91:84:59:35:bd:9d:02:4a:e1:2f:
c4:29:fc:75:2f:af:a6:11:60:06:f7:37:e8:97:87:
1d:c7:13:73:7a:ec:5d:e8:d0:78:b2:26:0e:a5:a1:
e2:0f:ab:fc:89:e6:56:c3:2a:90:66:72:dd:9f:44:
ba:d9:13:c9:aa:20:91:5d:de:8f:fa:0d:1c:da:76:
4e:8e:60:6a:2f:6f:ac:46:b8:68:dc:49:2d:e2:f2:
ce:09:93:2b:25:45:a5:48:2a:ed:41:65:01:f3:c7:
1c:8b:4c:4a:2c:21:f3:e1:78:ff:1d:d4:69:70:f7:
fe:0f:bf:01:e2:88:37:02:e1:29:49:39:99:d9:b9:
8d:6f:ac:80:c9:dc:d7:5e:6c:aa:bd:6e:a8:95:3c:
96:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B6:2C:86:FD:0C:8A:1F:B3:58:74:3E:6E:55:FC:32:DA:EE:C4:8A
X509v3 Authority Key Identifier:
keyid:51:33:5D:8F:BA:2B:C7:33:98:39:5F:BD:D3:E0:D6:F3:FF:3D:1B:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTNdj7orxzOYOV-90-DW8_89G2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/42b317-12c8-4dd1-9c55-bfa969e567b1/1/UTNdj7orxzOYOV-90-DW8_89G2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/42b317-12c8-4dd1-9c55-bfa969e567b1/1/UTNdj7orxzOYOV-90-DW8_89G2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:9d:8a:81:46:97:f2:ae:fb:d0:62:68:55:e6:f1:f6:2a:6a:
12:df:17:8c:35:a0:96:83:9c:1e:b6:8a:54:51:cd:02:67:a1:
9c:67:68:b7:37:2b:66:f9:73:23:d3:eb:bb:a7:a9:1e:ba:bf:
04:11:21:86:76:3b:79:45:6b:3a:2b:e7:92:8d:ae:97:e8:1b:
04:07:1c:c7:5d:bb:e8:6e:c7:b0:2f:13:1c:5e:55:77:bd:f7:
f9:4c:9a:b0:0e:5a:4d:44:c0:6a:72:4e:87:d8:e8:eb:5e:36:
24:4d:e2:7d:9d:cf:64:ea:11:8d:de:16:21:8b:6b:ab:e1:ef:
03:2c:cd:0a:fc:f3:36:b4:33:bc:4e:c0:3a:75:98:cb:53:b0:
9f:83:8c:05:cc:34:35:42:eb:8a:5a:3c:10:17:6c:d8:a7:17:
af:c9:ba:83:65:44:4b:2c:93:8b:5e:af:11:1e:dd:76:ed:d5:
ff:85:0e:3a:48:7e:39:46:eb:55:0f:aa:c0:50:69:14:23:4b:
5b:1c:49:91:e0:e0:4d:bc:a9:9c:ed:dc:20:ce:eb:a8:3b:74:
ee:07:d7:38:63:93:97:a4:42:d5:cc:fa:5f:04:03:e9:ae:bb:
88:d2:98:c2:05:31:f9:e9:eb:a0:5b:cf:04:ea:e3:25:20:bf:
6e:1d:19:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 19:04:31 2025 by rpki-client