Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.mft
File: uTYoo2ME473CH4U7s_rUPkhhpcU.mft (raw, json)
Hash identifier: Ch7iVuaPh0JT8oN9qayM2/D47Llk7CY1Ua0uzTWdtFY=
Subject key identifier: 04:6B:8C:74:6F:1A:7B:AB:84:43:98:17:AF:8D:E9:AB:42:34:75:D2
Authority key identifier: B9:36:28:A3:63:04:E3:BD:C2:1F:85:3B:B3:FA:D4:3E:48:61:A5:C5
Certificate issuer: /CN=b93628a36304e3bdc21f853bb3fad43e4861a5c5
Certificate serial: 01984664AF14F21E4C7229040C49758C8D8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uTYoo2ME473CH4U7s_rUPkhhpcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.mft
Manifest number: 0974
Signing time: Sat 26 Jul 2025 11:01:00 +0000
Manifest this update: Sat 26 Jul 2025 11:01:00 +0000
Manifest next update: Sun 27 Jul 2025 11:01:00 +0000
Files and hashes: 1: aHkiBdyDgksjPTve6ijI7EpizCc.roa (hash: NQknuIOWctzhCd+JdINj8cg9TjzpycFVkYWDzHbdSKY=)
2: uTYoo2ME473CH4U7s_rUPkhhpcU.crl (hash: HfyzniIRbzVMLNFmK/dQKBBHsYZ3xsyS1YJlF+D8P58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/uTYoo2ME473CH4U7s_rUPkhhpcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:64:af:14:f2:1e:4c:72:29:04:0c:49:75:8c:8d:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b93628a36304e3bdc21f853bb3fad43e4861a5c5
Validity
Not Before: Jul 26 11:01:00 2025 GMT
Not After : Jul 27 11:01:00 2025 GMT
Subject: CN=046b8c746f1a7bab84439817af8de9ab423475d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:83:2c:e7:db:f4:ec:39:23:25:d7:0d:68:b7:
a2:6a:f8:5d:fc:0e:7d:18:33:32:93:16:67:78:f1:
ec:5e:4c:71:05:08:ec:93:6b:03:cb:e0:e4:f1:97:
5c:75:65:56:a1:b7:d5:b5:a3:fb:f3:16:18:05:b4:
1b:5d:2b:60:d9:b5:d7:45:0e:bb:84:7a:bb:bf:e2:
c4:93:b3:00:7f:11:cb:22:7a:55:50:cc:e5:49:59:
f2:b6:06:3c:85:58:91:4e:23:10:c4:db:1f:bf:7d:
ce:84:08:90:92:56:c9:f9:72:14:c1:28:66:ef:29:
e3:44:12:26:83:98:b7:1d:cb:0b:ea:85:82:70:85:
20:06:77:37:03:3e:6c:4a:48:18:5d:19:58:d2:75:
df:26:1a:9f:1e:75:19:22:f7:dd:50:ad:2b:3f:01:
a6:76:52:e2:07:ab:2b:bd:b0:f7:87:61:4f:48:a0:
88:77:b5:1e:fc:33:8d:26:3e:a4:22:36:d5:e8:8b:
b9:55:ff:b8:f5:e0:a9:5a:5c:a5:df:f7:ce:fc:66:
c4:5b:da:a7:8f:c3:33:98:60:82:e4:6d:22:aa:33:
b3:11:4e:bc:58:40:9d:30:d9:f1:17:ee:45:24:14:
cf:31:40:0f:53:f3:6d:2d:42:59:2e:3c:7d:55:fc:
34:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:6B:8C:74:6F:1A:7B:AB:84:43:98:17:AF:8D:E9:AB:42:34:75:D2
X509v3 Authority Key Identifier:
keyid:B9:36:28:A3:63:04:E3:BD:C2:1F:85:3B:B3:FA:D4:3E:48:61:A5:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTYoo2ME473CH4U7s_rUPkhhpcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:ed:8d:5b:08:cf:30:0c:1f:81:8e:83:31:06:ed:27:9e:61:
93:43:24:86:e9:82:ff:f2:af:f8:76:4b:d8:df:a4:83:6b:02:
15:86:a3:65:90:cd:5c:91:29:d0:cc:8a:6f:dd:7b:70:b9:d4:
02:06:dd:eb:43:b1:02:ca:96:9f:99:ec:b6:94:51:d5:07:38:
21:83:15:41:9d:78:a7:d1:48:a9:7b:5e:34:7a:8c:da:bf:17:
2b:d6:f5:cb:b2:8f:57:a3:67:07:46:f2:dd:ff:33:21:45:05:
d8:7a:cb:e7:cb:ab:b8:0c:07:8a:f1:ce:c6:cb:68:a3:92:4a:
5e:bd:7f:a9:e7:df:00:4e:b0:ad:63:98:61:49:8b:0e:8f:20:
7d:cb:4e:ec:e6:49:f5:50:41:94:09:3e:c4:23:01:15:cd:43:
4b:5f:2c:f5:5d:9a:8d:23:4f:19:a1:73:81:16:e2:e8:6e:20:
02:f5:fc:2b:b4:2a:9d:d4:72:4a:12:f2:36:f0:e5:7e:5b:de:
ea:82:0e:04:b4:4f:6e:8b:5a:d6:bb:e8:61:84:67:fd:07:fa:
29:cc:25:06:a6:a0:8f:3c:6c:35:6c:77:3f:bb:d9:f3:0c:77:
e2:57:3c:59:13:42:e4:3e:3e:fc:34:93:28:df:2d:5a:ff:c9:
6b:12:29:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:25:56 2025 by rpki-client