Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.mft
File: uTYoo2ME473CH4U7s_rUPkhhpcU.mft (raw, json)
Hash identifier: mdZIDnvoupBLxEEtvnLJzh7bWjxikDqmeMD9oACVYZc=
Subject key identifier: B5:FC:3D:34:6B:A6:F9:92:FB:8D:EA:95:17:E1:B2:68:DE:02:3B:84
Authority key identifier: B9:36:28:A3:63:04:E3:BD:C2:1F:85:3B:B3:FA:D4:3E:48:61:A5:C5
Certificate issuer: /CN=b93628a36304e3bdc21f853bb3fad43e4861a5c5
Certificate serial: 0197B77CB59ED8AE26AA28002D79AA23149A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uTYoo2ME473CH4U7s_rUPkhhpcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.mft
Manifest number: 092A
Signing time: Sat 28 Jun 2025 17:01:32 +0000
Manifest this update: Sat 28 Jun 2025 17:01:32 +0000
Manifest next update: Sun 29 Jun 2025 17:01:32 +0000
Files and hashes: 1: aHkiBdyDgksjPTve6ijI7EpizCc.roa (hash: NQknuIOWctzhCd+JdINj8cg9TjzpycFVkYWDzHbdSKY=)
2: uTYoo2ME473CH4U7s_rUPkhhpcU.crl (hash: uQ0Rvf+7A9UcBUBYedH5UAzXeWiKSB+/g4q47wMA0lA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/uTYoo2ME473CH4U7s_rUPkhhpcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:b5:9e:d8:ae:26:aa:28:00:2d:79:aa:23:14:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b93628a36304e3bdc21f853bb3fad43e4861a5c5
Validity
Not Before: Jun 28 17:01:32 2025 GMT
Not After : Jun 29 17:01:32 2025 GMT
Subject: CN=b5fc3d346ba6f992fb8dea9517e1b268de023b84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:10:48:9f:7e:a8:e3:7a:20:9f:ea:65:76:ee:
ef:b7:65:91:9c:eb:a7:34:94:90:29:3a:58:ba:5e:
d8:92:91:2c:47:f9:7f:d3:77:d2:60:64:e0:b8:aa:
72:d8:13:6f:70:99:90:47:a4:b4:b2:2c:62:64:99:
f0:c0:eb:d1:e1:10:dc:88:c6:f4:42:cd:cd:56:08:
49:19:4e:7c:75:90:b5:66:b0:01:a9:7e:c5:4f:12:
05:c0:4e:13:60:2b:b5:1e:72:30:cb:91:ca:99:de:
95:24:6b:9a:03:70:c2:b6:95:4a:7f:b0:73:d6:67:
96:8d:3c:59:20:83:e0:86:f0:62:a6:ad:9b:47:1e:
45:40:fc:f7:42:ae:c3:ec:26:99:6e:9e:58:a8:98:
98:9a:38:e7:1d:81:28:64:8c:77:6c:03:cc:f9:0d:
d7:90:f6:4b:3f:b7:e4:15:2f:3b:2a:76:f4:3d:54:
58:a6:50:e4:cc:10:29:29:18:00:38:1f:d6:60:11:
69:c0:40:f1:b2:22:cf:46:78:41:ea:15:53:f1:02:
e3:80:62:d7:fd:e0:79:74:c8:57:77:d1:ab:58:b6:
b9:2f:2a:91:e2:a7:04:e1:b9:bc:45:c5:58:9e:85:
36:7f:9b:1f:9b:d0:a8:1c:6b:06:bc:6c:28:2f:89:
33:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:FC:3D:34:6B:A6:F9:92:FB:8D:EA:95:17:E1:B2:68:DE:02:3B:84
X509v3 Authority Key Identifier:
keyid:B9:36:28:A3:63:04:E3:BD:C2:1F:85:3B:B3:FA:D4:3E:48:61:A5:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTYoo2ME473CH4U7s_rUPkhhpcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:d5:fa:b5:23:0e:0d:20:68:e5:7f:27:a9:12:f7:37:e8:da:
61:00:fb:a3:72:b1:1c:c5:92:d3:54:91:30:61:a9:ad:79:9c:
f7:2d:20:a3:0a:89:db:d7:12:a7:5a:4f:dd:b5:a8:97:22:de:
da:4f:d3:6a:e5:ad:1f:71:e8:7d:7e:da:ad:19:9d:bf:24:b0:
87:e4:1d:25:57:71:c2:91:7d:60:50:f2:9d:fc:eb:e1:de:c7:
d7:50:c3:ba:3e:89:3d:38:ef:a2:d5:8f:1f:4e:3b:61:85:aa:
0e:1f:af:e5:d8:d6:c5:b1:42:28:c5:30:54:11:33:9e:b1:c8:
4c:c8:ae:be:10:07:31:88:48:80:15:ac:d8:de:87:5f:2b:72:
ee:ca:1a:75:f2:c0:04:d4:df:8c:d6:df:34:eb:af:41:c7:d3:
0b:71:e4:f9:fa:04:be:6f:5a:cd:b3:d9:45:40:64:49:ca:39:
22:7a:13:b3:38:af:7e:13:7b:d8:7a:b8:f5:f3:f2:c8:19:45:
ab:50:a3:76:8f:9c:01:a8:ec:23:6d:8b:a9:de:31:12:a1:67:
e8:a8:59:af:d5:dd:26:5c:15:3f:fb:4c:7a:8b:8b:eb:b6:61:
ad:5b:e2:2d:73:f3:0c:1b:f2:ba:2c:bc:0b:1e:73:bf:cd:4b:
ba:eb:96:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:04:27 2025 by rpki-client