Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.mft
File: uTYoo2ME473CH4U7s_rUPkhhpcU.mft (raw, json)
Hash identifier: uUiWmcQwDYyvSH2Vvfypq7cS5KFC21HD/4/RRpgU4gQ=
Subject key identifier: A7:1D:9E:10:18:24:DC:DD:6C:6A:95:4C:56:93:E9:92:58:A8:90:0F
Authority key identifier: B9:36:28:A3:63:04:E3:BD:C2:1F:85:3B:B3:FA:D4:3E:48:61:A5:C5
Certificate issuer: /CN=b93628a36304e3bdc21f853bb3fad43e4861a5c5
Certificate serial: 019A70A555948C41208F99BD32E306563FEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uTYoo2ME473CH4U7s_rUPkhhpcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.mft
Manifest number: 0A93
Signing time: Tue 11 Nov 2025 02:01:14 +0000
Manifest this update: Tue 11 Nov 2025 02:01:14 +0000
Manifest next update: Wed 12 Nov 2025 02:01:14 +0000
Files and hashes: 1: aHkiBdyDgksjPTve6ijI7EpizCc.roa (hash: NQknuIOWctzhCd+JdINj8cg9TjzpycFVkYWDzHbdSKY=)
2: uTYoo2ME473CH4U7s_rUPkhhpcU.crl (hash: GLA2XX0CNFYgS+B3sAHUDCtluEwjtWj+WSvrCRiD2eE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/uTYoo2ME473CH4U7s_rUPkhhpcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:55:94:8c:41:20:8f:99:bd:32:e3:06:56:3f:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b93628a36304e3bdc21f853bb3fad43e4861a5c5
Validity
Not Before: Nov 11 02:01:14 2025 GMT
Not After : Nov 12 02:01:14 2025 GMT
Subject: CN=a71d9e101824dcdd6c6a954c5693e99258a8900f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9b:dd:9a:09:25:92:3f:50:05:8c:eb:78:b0:
b5:56:c8:30:d1:67:e4:70:fb:45:77:30:d1:89:f6:
a3:cd:73:ca:49:14:15:db:64:3f:a8:fb:5f:6e:38:
61:76:7a:e6:4a:a2:84:a6:b8:b7:7e:63:b4:5e:ae:
40:f1:ac:a1:c4:6e:a7:e3:2d:96:75:fd:fe:ca:09:
57:2e:61:fc:10:5a:9c:60:fb:d7:64:01:c5:90:e9:
ff:ac:84:8d:ca:f9:22:dd:39:21:68:46:f6:75:31:
fd:ca:b6:2f:aa:73:35:bd:43:b1:76:8b:db:bc:2b:
83:a5:17:bf:0d:07:bd:53:c1:af:21:a4:4b:f6:7d:
a1:84:57:aa:ab:c6:25:36:9e:3b:9d:60:bd:29:39:
79:13:11:af:c2:61:d1:22:4f:66:6d:ba:ea:15:3c:
27:df:d2:cc:e4:d0:16:77:e8:62:ea:8c:f1:a8:61:
4c:2f:92:bc:e3:2a:17:ea:1a:e4:01:de:4a:9a:b3:
c4:5b:72:7a:34:00:59:ea:ad:3a:b1:d1:47:37:36:
e7:a5:7d:77:9a:75:3f:c8:a5:09:1f:ad:22:91:4b:
e5:ca:89:14:29:87:4b:bc:f9:c4:85:65:ca:7a:b5:
3c:00:cb:75:a4:9c:cd:3d:8c:d7:29:24:6d:66:2a:
93:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:1D:9E:10:18:24:DC:DD:6C:6A:95:4C:56:93:E9:92:58:A8:90:0F
X509v3 Authority Key Identifier:
keyid:B9:36:28:A3:63:04:E3:BD:C2:1F:85:3B:B3:FA:D4:3E:48:61:A5:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTYoo2ME473CH4U7s_rUPkhhpcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:a4:ca:d2:3d:98:a5:59:bf:44:ae:5d:b8:28:f6:49:67:5a:
50:86:4f:35:8f:95:81:47:35:43:32:c1:c2:9d:ba:66:8d:2a:
52:0a:fe:46:8d:92:43:78:a6:46:a7:24:5b:21:5d:a2:1f:00:
81:82:c0:e5:9e:c0:a8:12:d9:dc:34:40:a5:8c:e6:c1:13:b6:
a3:67:41:d8:1f:a2:ff:2e:30:8c:25:3c:69:56:65:43:a3:cd:
5d:05:ee:49:cb:14:f6:50:02:17:3e:9e:e1:d8:b2:16:74:5f:
30:c7:09:ae:fb:ed:7f:ae:24:ae:7a:a8:ae:6b:41:87:d5:b8:
50:a0:cd:e2:15:7e:88:ef:28:dc:ae:31:df:36:bb:c3:e7:c3:
51:52:33:6d:57:f2:46:76:cf:51:ee:81:b1:ff:9a:b8:6a:ca:
4c:7e:89:b6:cf:05:ff:c8:9b:93:29:ca:fd:7d:b1:52:ad:ef:
ac:75:a7:94:dd:bb:58:b5:2d:82:52:93:14:96:be:51:f7:3f:
35:d8:07:6b:00:30:b0:cb:f4:86:25:3a:4f:73:53:ea:cc:96:
0f:74:07:91:9f:56:e1:18:c5:f8:83:a4:10:b5:e0:aa:c5:7b:
29:f3:17:81:df:8a:16:04:4a:9c:95:1d:59:4c:47:7e:f4:b3:
aa:fd:fd:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwpVWUjEEgj5m9MuMGVj/uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MzYyOGEzNjMwNGUzYmRjMjFmODUzYmIzZmFkNDNlNDg2
MWE1YzUwHhcNMjUxMTExMDIwMTE0WhcNMjUxMTEyMDIwMTE0WjAzMTEwLwYDVQQD
EyhhNzFkOWUxMDE4MjRkY2RkNmM2YTk1NGM1NjkzZTk5MjU4YTg5MDBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspvdmgklkj9QBYzreLC1Vsgw0Wfk
cPtFdzDRifajzXPKSRQV22Q/qPtfbjhhdnrmSqKEpri3fmO0Xq5A8ayhxG6n4y2W
df3+yglXLmH8EFqcYPvXZAHFkOn/rISNyvki3TkhaEb2dTH9yrYvqnM1vUOxdovb
vCuDpRe/DQe9U8GvIaRL9n2hhFeqq8YlNp47nWC9KTl5ExGvwmHRIk9mbbrqFTwn
39LM5NAWd+hi6ozxqGFML5K84yoX6hrkAd5KmrPEW3J6NABZ6q06sdFHNzbnpX13
mnU/yKUJH60ikUvlyokUKYdLvPnEhWXKerU8AMt1pJzNPYzXKSRtZiqTUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKcdnhAYJNzdbGqVTFaT6ZJYqJAPMB8GA1UdIwQY
MBaAFLk2KKNjBOO9wh+FO7P61D5IYaXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVRZb28yTUU0NzNDSDRVN3NfclVQa2hocGNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9hOWJiY2UtZDNjNy00MjIxLTlmNmIt
ODdkM2VjN2YwNDEwLzEvdVRZb28yTUU0NzNDSDRVN3NfclVQa2hocGNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9hOWJiY2UtZDNjNy00MjIxLTlmNmItODdkM2VjN2YwNDEw
LzEvdVRZb28yTUU0NzNDSDRVN3NfclVQa2hocGNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoqTK0j2Y
pVm/RK5duCj2SWdaUIZPNY+VgUc1QzLBwp26Zo0qUgr+Ro2SQ3imRqckWyFdoh8A
gYLA5Z7AqBLZ3DRApYzmwRO2o2dB2B+i/y4wjCU8aVZlQ6PNXQXuScsU9lACFz6e
4diyFnRfMMcJrvvtf64krnqormtBh9W4UKDN4hV+iO8o3K4x3za7w+fDUVIzbVfy
RnbPUe6Bsf+auGrKTH6Jts8F/8ibkynK/X2xUq3vrHWnlN27WLUtglKTFJa+Ufc/
NdgHawAwsMv0hiU6T3NT6syWD3QHkZ9W4RjF+IOkELXgqsV7KfMXgd+KFgRKnJUd
WUxHfvSzqv39CA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:30 2025 by rpki-client