Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.mft
File: uTYoo2ME473CH4U7s_rUPkhhpcU.mft (raw, json)
Hash identifier: YOeedEehgl3PKHIB+glGLv47Q55zM76YzCLn7t6xw0s=
Subject key identifier: D4:48:70:72:03:51:70:F4:D9:75:17:AC:93:64:80:26:DC:DD:FD:9E
Authority key identifier: B9:36:28:A3:63:04:E3:BD:C2:1F:85:3B:B3:FA:D4:3E:48:61:A5:C5
Certificate issuer: /CN=b93628a36304e3bdc21f853bb3fad43e4861a5c5
Certificate serial: 01969F7634FEEB4435105B1CA2BD1A2207A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uTYoo2ME473CH4U7s_rUPkhhpcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.mft
Manifest number: 0899
Signing time: Mon 05 May 2025 08:00:46 +0000
Manifest this update: Mon 05 May 2025 08:00:46 +0000
Manifest next update: Tue 06 May 2025 08:00:46 +0000
Files and hashes: 1: aHkiBdyDgksjPTve6ijI7EpizCc.roa (hash: NQknuIOWctzhCd+JdINj8cg9TjzpycFVkYWDzHbdSKY=)
2: uTYoo2ME473CH4U7s_rUPkhhpcU.crl (hash: tpRwCoE1ZZdv1Zf68ZpV+4V+GqkwIW+zKmiuuSNt3pY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/uTYoo2ME473CH4U7s_rUPkhhpcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 08:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:76:34:fe:eb:44:35:10:5b:1c:a2:bd:1a:22:07:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b93628a36304e3bdc21f853bb3fad43e4861a5c5
Validity
Not Before: May 5 08:00:46 2025 GMT
Not After : May 6 08:00:46 2025 GMT
Subject: CN=d4487072035170f4d97517ac93648026dcddfd9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:73:2c:ce:4b:a9:02:c9:c4:b3:33:05:0e:0b:
cb:7a:4a:d3:e4:3d:14:58:0b:2b:5a:a6:87:3e:a6:
ad:16:8c:14:d3:77:a9:0f:22:d2:74:b2:fe:a6:6c:
04:3e:4a:f9:cb:5f:10:6e:aa:d1:bd:77:fc:f1:6d:
9d:a7:40:d9:69:67:ae:3f:4f:05:6b:95:d3:1f:2a:
19:09:13:30:70:2e:9c:4d:43:44:12:39:84:16:9a:
0b:09:0b:56:7d:2b:9a:05:7b:96:c5:8c:21:7d:ee:
3e:9b:e0:7c:96:04:ec:68:c1:af:17:d3:da:80:b7:
83:92:dd:d5:94:33:ad:48:cd:ef:60:b1:03:2a:8d:
2c:16:df:29:fc:e9:bb:27:8d:0c:a0:83:ec:29:8a:
a0:06:17:c7:c6:ef:62:43:e4:fc:00:bb:ce:05:a4:
20:86:97:5c:3a:1e:ee:34:8b:e6:5c:e5:a2:76:8a:
f7:83:94:29:45:5d:1c:bd:96:63:3d:bb:68:bf:79:
cb:34:8a:13:1b:9a:82:f6:62:10:f4:4a:3b:66:73:
bc:70:91:d5:dc:f6:bc:49:03:f8:ca:ba:cb:1b:56:
4c:22:7c:39:a7:66:3c:4b:c3:43:18:e5:84:9c:a5:
b3:d6:8c:ea:d3:98:14:34:fc:d8:0b:cf:89:73:a4:
b0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:48:70:72:03:51:70:F4:D9:75:17:AC:93:64:80:26:DC:DD:FD:9E
X509v3 Authority Key Identifier:
keyid:B9:36:28:A3:63:04:E3:BD:C2:1F:85:3B:B3:FA:D4:3E:48:61:A5:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTYoo2ME473CH4U7s_rUPkhhpcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:bd:85:b4:48:5b:0e:c3:cb:a9:f3:dd:52:f7:48:5a:08:4d:
a6:32:04:d6:5b:f9:fb:1c:83:3a:e6:97:c6:b8:e2:ed:9c:8f:
44:b5:d2:59:54:3b:51:88:ca:eb:75:a6:a3:69:19:92:4c:bb:
56:5e:bf:1c:c7:0d:85:5f:0f:ba:55:ce:2f:48:d8:9d:63:de:
93:80:0f:fe:ba:c8:86:f0:a2:10:9a:09:c1:c0:83:22:3f:97:
24:69:a4:c6:6d:e2:57:6e:48:15:0e:d8:6d:67:95:ba:c0:f8:
45:49:22:68:13:7d:72:7b:1e:b4:e9:9c:d2:a9:b3:e1:5e:1e:
10:53:ca:b0:22:15:da:af:b9:40:93:ab:ba:ab:0e:b7:de:77:
ce:66:e9:a2:7f:98:86:1f:75:a5:56:a2:07:ee:5e:30:ba:a6:
a7:63:58:12:b3:09:1c:91:bd:de:2a:b0:f0:d5:d7:4f:64:f9:
71:62:06:06:b0:76:b5:7d:5f:1d:ed:1d:6d:1d:50:c9:a1:7a:
7e:91:7d:04:bc:19:dd:b4:fe:6e:fb:8b:3f:12:e8:ef:ca:33:
f6:2d:5e:5c:91:27:8c:33:a7:1f:45:4f:a2:12:76:a9:72:8a:
d6:60:04:42:ce:a6:bf:33:36:88:5a:07:ac:e9:c5:10:bb:c9:
43:94:40:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 11:45:32 2025 by rpki-client