Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.mft
File: uTYoo2ME473CH4U7s_rUPkhhpcU.mft (raw, json)
Hash identifier: /jLxSLhHiiRtlLzTw6vUFaHbufumzqXB9cL1gM76gYg=
Subject key identifier: AE:20:11:31:4F:5C:61:B0:DB:28:A3:3F:3D:42:72:B7:DE:FD:09:11
Authority key identifier: B9:36:28:A3:63:04:E3:BD:C2:1F:85:3B:B3:FA:D4:3E:48:61:A5:C5
Certificate issuer: /CN=b93628a36304e3bdc21f853bb3fad43e4861a5c5
Certificate serial: 0197477A0628CF0DD4E99D18BE40D7C0FAAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uTYoo2ME473CH4U7s_rUPkhhpcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.mft
Manifest number: 08F0
Signing time: Fri 06 Jun 2025 23:01:08 +0000
Manifest this update: Fri 06 Jun 2025 23:01:08 +0000
Manifest next update: Sat 07 Jun 2025 23:01:08 +0000
Files and hashes: 1: aHkiBdyDgksjPTve6ijI7EpizCc.roa (hash: NQknuIOWctzhCd+JdINj8cg9TjzpycFVkYWDzHbdSKY=)
2: uTYoo2ME473CH4U7s_rUPkhhpcU.crl (hash: +WWvRe4bHNEbDKF+uCwQf402t5vYjRTs2W+tWO2180s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/uTYoo2ME473CH4U7s_rUPkhhpcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 23:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:7a:06:28:cf:0d:d4:e9:9d:18:be:40:d7:c0:fa:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b93628a36304e3bdc21f853bb3fad43e4861a5c5
Validity
Not Before: Jun 6 23:01:08 2025 GMT
Not After : Jun 7 23:01:08 2025 GMT
Subject: CN=ae2011314f5c61b0db28a33f3d4272b7defd0911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1d:e0:b6:ed:1a:55:a2:6f:6a:40:03:ea:db:
98:c8:e6:b5:bd:91:2e:44:17:87:7e:31:88:57:1c:
ed:4a:15:8d:dd:87:8d:08:86:6b:3d:12:c8:7c:06:
9b:b0:f8:49:25:a1:b1:f6:06:dc:43:e7:0f:39:11:
40:50:da:3c:27:d8:65:ab:7e:9c:fd:eb:8a:a9:b7:
d2:38:47:92:aa:4f:8d:a8:a1:c3:af:06:40:55:b7:
e7:ec:06:83:e4:43:65:2a:3d:65:d9:ae:3e:05:b8:
23:78:4d:7f:67:2f:56:34:2b:50:c2:fb:9c:3b:b2:
c7:44:68:55:fc:ac:38:4b:cf:64:66:7b:92:e9:d5:
06:a8:8f:ea:f5:31:27:c3:98:04:0e:72:e4:25:6f:
a5:db:79:99:5c:e2:d0:63:f4:39:1e:87:78:73:a5:
f6:79:51:f4:a0:bb:69:b9:e9:44:6f:1d:81:6e:1b:
c8:d4:f7:bc:7b:83:c4:e9:12:30:f7:8f:a9:84:76:
3d:26:9b:eb:d3:12:ca:99:65:12:09:4c:92:9f:2d:
81:25:c7:27:5f:19:ec:fd:17:1a:2c:85:cd:06:d9:
47:55:93:7f:de:ea:20:65:e2:aa:10:27:26:2e:48:
39:8a:92:d9:86:74:97:63:82:93:40:b2:9e:e6:14:
ef:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:20:11:31:4F:5C:61:B0:DB:28:A3:3F:3D:42:72:B7:DE:FD:09:11
X509v3 Authority Key Identifier:
keyid:B9:36:28:A3:63:04:E3:BD:C2:1F:85:3B:B3:FA:D4:3E:48:61:A5:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTYoo2ME473CH4U7s_rUPkhhpcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:60:4c:00:f6:3b:4e:62:7a:75:0f:d6:34:26:93:39:c3:f1:
88:2f:f9:2b:26:7d:bb:f5:04:6d:7f:b7:78:76:38:05:28:4e:
01:72:83:35:39:e8:44:6f:65:32:58:79:2c:4e:c2:a8:ae:b5:
50:11:a8:9d:53:5b:7c:08:4c:dc:68:32:4f:24:98:5f:ac:a6:
86:cc:b8:c3:a3:06:2c:0b:b9:83:47:cb:60:44:9f:8e:67:79:
b0:a8:22:59:7c:f9:e2:2b:f1:bf:0a:9e:30:c9:57:63:38:7a:
71:38:00:5e:ce:ab:84:a4:1e:81:2a:f4:d0:bb:6f:0e:ea:89:
ed:d3:83:cd:d5:7c:d5:cd:bd:b0:b8:bb:5e:cd:5b:d0:b9:e0:
1b:83:fc:eb:39:b3:5e:c0:7d:81:99:34:56:0d:41:4d:e9:58:
e2:45:2d:d4:57:49:b2:25:74:76:55:9a:a1:34:f1:1b:3f:80:
20:39:ac:da:d6:d1:a7:c9:1c:a5:8b:de:00:ff:f5:ca:c7:9f:
23:22:06:07:d5:66:1f:46:2c:4f:6a:3e:1a:68:b1:dd:8f:ab:
1d:8f:0c:d3:d7:85:ce:8a:cb:98:61:9a:d2:4f:96:43:b8:46:
7c:52:eb:4c:c3:78:c7:39:c0:b1:d6:97:f6:1d:25:89:68:f5:
d3:d9:43:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:08:38 2025 by rpki-client