Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/a4280e-d094-4a74-b8f6-7e859ff4651c/1/uTym_QAyeu3x1OMnVWLK5zO050M.mft
File: uTym_QAyeu3x1OMnVWLK5zO050M.mft (raw, json)
Hash identifier: wguZimv/EcxuF8HjNyzWNFLOJx4wK9haCki93qM1EuE=
Subject key identifier: 1C:9E:94:42:E8:95:5A:4D:6B:E9:32:45:C0:EE:FF:23:98:D8:98:00
Authority key identifier: B9:3C:A6:FD:00:32:7A:ED:F1:D4:E3:27:55:62:CA:E7:33:B4:E7:43
Certificate issuer: /CN=b93ca6fd00327aedf1d4e3275562cae733b4e743
Certificate serial: 019A51BE976AD12AC499D0C9FC5750F468A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uTym_QAyeu3x1OMnVWLK5zO050M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/a4280e-d094-4a74-b8f6-7e859ff4651c/1/uTym_QAyeu3x1OMnVWLK5zO050M.mft
Manifest number: 09BF
Signing time: Wed 05 Nov 2025 02:00:36 +0000
Manifest this update: Wed 05 Nov 2025 02:00:36 +0000
Manifest next update: Thu 06 Nov 2025 02:00:36 +0000
Files and hashes: 1: TlU9Uk_nAAl7-fcJ5oPvF-WHQ6g.roa (hash: kHfyiCHQk1viwG97rNRumEvrS7xQPQhtjEnkV3NwAaY=)
2: uTym_QAyeu3x1OMnVWLK5zO050M.crl (hash: O1Fc90rK9WHlLTktRyBlOlP8qBjyKJgFV6aUZKW4woE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/a4280e-d094-4a74-b8f6-7e859ff4651c/1/uTym_QAyeu3x1OMnVWLK5zO050M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/a4280e-d094-4a74-b8f6-7e859ff4651c/1/uTym_QAyeu3x1OMnVWLK5zO050M.mft
rsync://rpki.ripe.net/repository/DEFAULT/uTym_QAyeu3x1OMnVWLK5zO050M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:97:6a:d1:2a:c4:99:d0:c9:fc:57:50:f4:68:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b93ca6fd00327aedf1d4e3275562cae733b4e743
Validity
Not Before: Nov 5 02:00:36 2025 GMT
Not After : Nov 6 02:00:36 2025 GMT
Subject: CN=1c9e9442e8955a4d6be93245c0eeff2398d89800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1f:24:e5:62:72:28:5b:b8:dc:90:f8:f7:c1:
75:e1:b3:f1:e3:45:a0:41:13:73:9a:1a:5a:31:4b:
4e:4a:a4:be:0d:43:13:1a:45:6a:bb:78:a4:3e:cd:
ea:39:44:44:68:38:20:8e:1c:d0:19:e8:6e:ba:2d:
61:3a:fd:f7:29:f4:88:0d:c2:e5:4e:1e:6b:07:54:
28:53:e8:f3:80:b1:f3:aa:62:b7:7d:d6:1e:3c:86:
75:c6:9f:6c:3f:b4:b4:93:33:a3:00:cd:33:b7:57:
32:01:eb:42:40:bc:bb:59:d4:a9:21:34:2a:80:f4:
da:ab:53:c5:0f:53:23:ab:ac:21:e2:01:d1:06:83:
d9:0e:d0:4d:29:ab:af:dd:ce:d9:32:86:1e:b4:3f:
fc:da:ce:8e:13:07:c7:6c:63:86:9e:9b:54:e0:02:
ef:13:2a:d7:ba:56:b6:87:84:c1:30:99:cc:cc:25:
ca:76:0c:18:9f:ed:fa:fd:c7:d6:eb:12:9b:84:94:
46:69:57:98:f7:b0:57:fb:7a:ce:d2:b0:ba:d7:ca:
06:6a:55:3d:ce:fb:3a:14:39:08:ad:3d:b7:33:3a:
34:09:72:af:21:72:8b:5a:25:b5:ef:16:a8:11:71:
de:d1:32:16:93:36:c0:0f:c1:94:df:d6:40:17:0e:
5f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:9E:94:42:E8:95:5A:4D:6B:E9:32:45:C0:EE:FF:23:98:D8:98:00
X509v3 Authority Key Identifier:
keyid:B9:3C:A6:FD:00:32:7A:ED:F1:D4:E3:27:55:62:CA:E7:33:B4:E7:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTym_QAyeu3x1OMnVWLK5zO050M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/a4280e-d094-4a74-b8f6-7e859ff4651c/1/uTym_QAyeu3x1OMnVWLK5zO050M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/a4280e-d094-4a74-b8f6-7e859ff4651c/1/uTym_QAyeu3x1OMnVWLK5zO050M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:af:e6:bb:84:cd:3f:a3:77:9f:16:14:2c:fa:93:a0:4a:b4:
21:65:a2:ea:46:7a:49:a5:e3:ef:03:a5:72:e5:42:71:8a:46:
c2:75:6b:7e:fb:ae:80:00:d1:22:7c:58:d1:aa:b2:25:0e:36:
f0:d7:33:b3:ba:53:50:68:2b:29:a6:51:6f:00:74:be:aa:0a:
c4:47:a2:90:93:62:a1:7d:e1:d9:cf:28:e8:fa:6f:90:63:23:
28:ec:9f:04:5f:af:7c:ae:f0:3a:60:31:20:f0:ae:92:e0:8e:
87:bf:0c:07:17:c5:c5:37:4d:1e:79:2d:84:8c:ae:f3:44:ce:
31:91:0d:79:18:80:73:e0:dd:3e:6e:3e:c4:45:db:90:d7:2f:
7b:82:84:70:7e:06:de:77:0e:23:db:4b:b9:59:d0:4d:49:28:
e6:65:00:ef:06:54:d3:0b:80:80:43:33:b8:5b:d1:30:34:a4:
f5:4b:ae:27:be:5b:eb:51:9e:69:85:06:d1:a5:f1:33:4b:50:
d7:34:05:d4:0c:88:4c:58:27:e5:39:04:b0:92:01:f6:ce:34:
5a:97:7d:d2:ad:cc:4d:79:83:7e:79:d0:39:04:6d:9e:b9:16:
77:d5:7e:15:b6:ff:81:cd:02:21:d6:fe:bf:76:8b:a7:38:69:
c5:9f:c0:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:45:13 2025 by rpki-client