
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.mft
File: uTYoo2ME473CH4U7s_rUPkhhpcU.mft (raw, json)
Hash identifier: nACoiRJBTebn4wFgajFgs3xvGUUud2zYrQ9+8JpvJ2Q=
Subject key identifier: 67:D2:58:6B:98:DB:52:1A:98:99:99:25:09:2F:70:70:63:14:79:D8
Authority key identifier: B9:36:28:A3:63:04:E3:BD:C2:1F:85:3B:B3:FA:D4:3E:48:61:A5:C5
Certificate issuer: /CN=b93628a36304e3bdc21f853bb3fad43e4861a5c5
Certificate serial: 0198D54E183D30E299D17EDE0AE23063CEB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uTYoo2ME473CH4U7s_rUPkhhpcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.mft
Manifest number: 09BE
Signing time: Sat 23 Aug 2025 05:02:01 +0000
Manifest this update: Sat 23 Aug 2025 05:02:01 +0000
Manifest next update: Sun 24 Aug 2025 05:02:01 +0000
Files and hashes: 1: aHkiBdyDgksjPTve6ijI7EpizCc.roa (hash: NQknuIOWctzhCd+JdINj8cg9TjzpycFVkYWDzHbdSKY=)
2: uTYoo2ME473CH4U7s_rUPkhhpcU.crl (hash: ivIsVdA1O2dQ+qxFTC7x24uPoQqqCBnm7xpyLaQTfqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/uTYoo2ME473CH4U7s_rUPkhhpcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:18:3d:30:e2:99:d1:7e:de:0a:e2:30:63:ce:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b93628a36304e3bdc21f853bb3fad43e4861a5c5
Validity
Not Before: Aug 23 05:02:01 2025 GMT
Not After : Aug 24 05:02:01 2025 GMT
Subject: CN=67d2586b98db521a98999925092f7070631479d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e7:42:67:e3:6c:36:89:88:fd:c1:d1:5a:0f:
de:0e:7a:0f:17:21:ac:82:3a:f0:8e:25:5d:a0:c1:
5d:68:b4:ec:a7:52:10:2e:5d:8a:2f:be:04:ea:e7:
ef:06:a1:de:6b:9a:c9:9c:d9:a6:0d:00:c2:e6:de:
c3:db:ea:5e:11:89:83:71:39:73:d7:6d:1c:6c:12:
0d:54:7c:8a:c7:40:4c:0a:f8:c2:1e:5f:9a:48:b2:
a6:1e:59:d3:0f:ae:86:b7:12:68:6a:fb:ff:00:24:
1b:b9:7a:ae:5d:f9:94:e0:c5:fe:92:8f:cf:1e:98:
c4:4b:dc:47:5f:ce:de:44:38:35:df:23:a2:d9:db:
81:a5:40:52:8b:d2:2d:95:d7:55:a9:dd:b2:a3:8e:
3c:e9:88:82:7b:01:87:73:0b:62:64:2f:4e:0f:10:
dd:2a:76:19:da:22:6a:cc:fb:5a:f8:09:90:d0:ea:
cd:8b:af:13:a1:46:58:f4:66:5d:26:3c:f0:1b:04:
a0:9d:de:e0:6f:93:66:8b:7d:23:00:a8:ba:0f:62:
a5:85:2e:97:4c:1a:a2:82:90:bf:62:46:8d:79:db:
d0:31:c3:84:78:9c:4a:8a:22:ba:54:8a:5e:89:84:
d6:8f:7b:c4:a6:2d:a2:f7:42:32:65:4f:ec:d8:37:
5d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D2:58:6B:98:DB:52:1A:98:99:99:25:09:2F:70:70:63:14:79:D8
X509v3 Authority Key Identifier:
keyid:B9:36:28:A3:63:04:E3:BD:C2:1F:85:3B:B3:FA:D4:3E:48:61:A5:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTYoo2ME473CH4U7s_rUPkhhpcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:31:a0:fd:45:e9:55:54:a7:e7:b1:91:91:6d:55:67:58:4f:
7a:e5:b4:ca:b3:b6:9f:4b:2a:e8:9d:19:13:a8:88:78:6a:8d:
3d:c1:07:fd:e5:5e:79:33:ac:04:d2:5d:18:b5:77:e4:db:f2:
1a:66:dc:2d:ae:bc:c1:d4:a2:d4:fa:83:8e:6f:bc:e7:6d:52:
96:76:98:33:66:19:89:5c:6b:3d:a9:8c:66:45:a1:53:d9:16:
fb:15:04:a2:0b:36:af:4a:4f:64:23:58:80:e0:73:95:64:00:
f2:69:0d:b9:3f:ef:65:80:1e:82:ad:3b:d0:b7:03:98:9a:c1:
ba:f5:d3:68:14:a9:f9:05:6f:6e:17:a4:bb:0c:97:45:9a:2b:
3b:9f:11:a6:47:72:6e:6b:c9:85:96:ec:b6:3f:37:cc:d4:4c:
a1:30:74:65:e2:a8:bc:9b:40:49:58:f4:d4:01:e8:66:c5:15:
e8:0d:d0:6f:82:5d:d2:77:62:5c:70:c9:c0:2e:07:97:b3:77:
55:0f:2e:83:fb:5e:6b:54:a7:52:e5:68:38:04:ba:87:50:4c:
ea:7a:4a:85:e7:e0:43:bf:d4:1d:4b:1a:b5:dc:08:21:ff:bd:
2c:10:d9:80:ad:7b:91:21:99:b3:62:04:eb:5c:70:07:17:ce:
c6:3d:57:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVThg9MOKZ0X7eCuIwY863MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MzYyOGEzNjMwNGUzYmRjMjFmODUzYmIzZmFkNDNlNDg2
MWE1YzUwHhcNMjUwODIzMDUwMjAxWhcNMjUwODI0MDUwMjAxWjAzMTEwLwYDVQQD
Eyg2N2QyNTg2Yjk4ZGI1MjFhOTg5OTk5MjUwOTJmNzA3MDYzMTQ3OWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3OdCZ+NsNomI/cHRWg/eDnoPFyGs
gjrwjiVdoMFdaLTsp1IQLl2KL74E6ufvBqHea5rJnNmmDQDC5t7D2+peEYmDcTlz
120cbBINVHyKx0BMCvjCHl+aSLKmHlnTD66GtxJoavv/ACQbuXquXfmU4MX+ko/P
HpjES9xHX87eRDg13yOi2duBpUBSi9ItlddVqd2yo4486YiCewGHcwtiZC9ODxDd
KnYZ2iJqzPta+AmQ0OrNi68ToUZY9GZdJjzwGwSgnd7gb5Nmi30jAKi6D2KlhS6X
TBqigpC/YkaNedvQMcOEeJxKiiK6VIpeiYTWj3vEpi2i90IyZU/s2DddgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGfSWGuY21IamJmZJQkvcHBjFHnYMB8GA1UdIwQY
MBaAFLk2KKNjBOO9wh+FO7P61D5IYaXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVRZb28yTUU0NzNDSDRVN3NfclVQa2hocGNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9hOWJiY2UtZDNjNy00MjIxLTlmNmIt
ODdkM2VjN2YwNDEwLzEvdVRZb28yTUU0NzNDSDRVN3NfclVQa2hocGNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9hOWJiY2UtZDNjNy00MjIxLTlmNmItODdkM2VjN2YwNDEw
LzEvdVRZb28yTUU0NzNDSDRVN3NfclVQa2hocGNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARzGg/UXp
VVSn57GRkW1VZ1hPeuW0yrO2n0sq6J0ZE6iIeGqNPcEH/eVeeTOsBNJdGLV35Nvy
GmbcLa68wdSi1PqDjm+8521SlnaYM2YZiVxrPamMZkWhU9kW+xUEogs2r0pPZCNY
gOBzlWQA8mkNuT/vZYAegq070LcDmJrBuvXTaBSp+QVvbhekuwyXRZorO58Rpkdy
bmvJhZbstj83zNRMoTB0ZeKovJtASVj01AHoZsUV6A3Qb4Jd0ndiXHDJwC4Hl7N3
VQ8ug/tea1SnUuVoOAS6h1BM6npKhefgQ7/UHUsatdwIIf+9LBDZgK17kSGZs2IE
61xwBxfOxj1XGA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:17:59 2025 by rpki-client