Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.mft
File: uTYoo2ME473CH4U7s_rUPkhhpcU.mft (raw, json)
Hash identifier: TQgqQr0fFlEFHFaK4cludXacfhZiMKsqqNwgjz4WVs8=
Subject key identifier: A0:BC:42:54:CB:66:48:F2:BF:D0:8E:F1:EF:81:BC:EF:E0:61:74:5C
Authority key identifier: B9:36:28:A3:63:04:E3:BD:C2:1F:85:3B:B3:FA:D4:3E:48:61:A5:C5
Certificate issuer: /CN=b93628a36304e3bdc21f853bb3fad43e4861a5c5
Certificate serial: 019A559B058CC5717C8B3510A813C57F71AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uTYoo2ME473CH4U7s_rUPkhhpcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.mft
Manifest number: 0A85
Signing time: Wed 05 Nov 2025 20:00:14 +0000
Manifest this update: Wed 05 Nov 2025 20:00:14 +0000
Manifest next update: Thu 06 Nov 2025 20:00:14 +0000
Files and hashes: 1: aHkiBdyDgksjPTve6ijI7EpizCc.roa (hash: NQknuIOWctzhCd+JdINj8cg9TjzpycFVkYWDzHbdSKY=)
2: uTYoo2ME473CH4U7s_rUPkhhpcU.crl (hash: GsPVLJ4fxq3+NfC6TiykJ8EQ+QfoyGmMme1CbGOMEqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/uTYoo2ME473CH4U7s_rUPkhhpcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 20:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:9b:05:8c:c5:71:7c:8b:35:10:a8:13:c5:7f:71:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b93628a36304e3bdc21f853bb3fad43e4861a5c5
Validity
Not Before: Nov 5 20:00:14 2025 GMT
Not After : Nov 6 20:00:14 2025 GMT
Subject: CN=a0bc4254cb6648f2bfd08ef1ef81bcefe061745c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6b:05:65:a9:de:84:67:05:3c:89:be:77:01:
16:c8:5f:39:38:6b:2c:17:a0:0e:56:a0:ad:dd:04:
80:7c:66:41:22:28:1a:fd:75:91:59:e0:32:73:ca:
07:56:19:db:c4:c3:71:a9:9b:8f:bd:47:f7:5e:7d:
50:bf:5f:0c:1f:0f:d5:d3:93:bd:61:93:25:b6:ac:
58:4c:33:98:ab:3b:ed:45:e9:9d:73:86:58:37:84:
16:94:f1:fc:92:fe:48:29:52:71:15:20:9e:96:6f:
52:21:81:9b:e3:ff:ae:9a:01:5d:c5:43:d4:73:57:
57:dc:e7:a6:99:d8:7a:9e:84:0d:b0:67:d4:f2:6a:
ac:31:02:83:3f:14:af:83:49:06:4e:d4:20:aa:ea:
b7:33:2f:0c:86:dc:14:96:64:b6:5d:b8:ad:86:bc:
c4:78:ad:2f:77:c8:71:90:73:0f:f9:70:ad:ca:f3:
86:85:be:70:69:02:00:28:9e:7c:21:7a:47:76:98:
6c:da:21:3f:bb:d4:78:31:52:f1:b2:6c:8f:3b:77:
1e:41:1f:8f:c7:4a:c6:09:b5:e1:d5:48:78:49:5c:
fb:b7:df:e7:55:99:43:15:4b:8f:4a:3d:7a:a4:e5:
4e:25:41:dc:ae:02:f7:f6:b6:5d:66:a2:8c:a8:35:
41:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:BC:42:54:CB:66:48:F2:BF:D0:8E:F1:EF:81:BC:EF:E0:61:74:5C
X509v3 Authority Key Identifier:
keyid:B9:36:28:A3:63:04:E3:BD:C2:1F:85:3B:B3:FA:D4:3E:48:61:A5:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTYoo2ME473CH4U7s_rUPkhhpcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:1d:29:ff:5b:72:31:42:8d:2b:b7:5e:51:0d:58:f7:62:23:
c5:9a:69:94:65:64:a8:53:77:1b:68:f9:d6:66:66:97:fe:9f:
10:68:2e:da:45:75:90:19:1a:69:38:5b:be:c6:ff:b0:db:b9:
e0:d5:2e:0c:93:35:96:65:1e:94:f8:bf:de:d5:ce:2a:b6:e1:
b3:c6:ad:7c:cc:c8:2b:db:c5:7b:c9:50:ea:af:1d:10:52:82:
ad:7d:7a:23:03:b2:ff:ca:8a:c2:a3:66:08:4b:5f:a0:e6:6f:
ca:14:7e:88:5a:5e:35:fe:72:4e:c3:42:41:7c:e6:50:74:2f:
56:7c:57:14:b0:24:41:5b:54:0f:6a:ea:65:c2:8a:b7:51:2b:
7c:7b:9f:08:4f:3c:7c:b8:ca:ab:5c:b1:40:f6:33:68:1c:6a:
6d:0e:20:4c:91:2b:72:20:87:ab:c4:f4:6d:02:3f:b4:80:08:
a9:7d:ad:11:4e:b3:0c:5f:f1:4f:d6:49:8b:83:fe:4e:12:62:
d6:44:37:ff:17:55:fe:73:33:60:69:0d:e5:2f:a4:61:6b:dd:
aa:73:71:7d:7b:83:7e:0e:8c:f9:1f:ac:e3:ed:62:88:72:fd:
de:c9:5d:38:64:37:0d:ef:49:9e:cf:42:ec:0b:69:6a:bc:a9:
c8:6b:3e:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpVmwWMxXF8izUQqBPFf3GsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MzYyOGEzNjMwNGUzYmRjMjFmODUzYmIzZmFkNDNlNDg2
MWE1YzUwHhcNMjUxMTA1MjAwMDE0WhcNMjUxMTA2MjAwMDE0WjAzMTEwLwYDVQQD
EyhhMGJjNDI1NGNiNjY0OGYyYmZkMDhlZjFlZjgxYmNlZmUwNjE3NDVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmsFZanehGcFPIm+dwEWyF85OGss
F6AOVqCt3QSAfGZBIiga/XWRWeAyc8oHVhnbxMNxqZuPvUf3Xn1Qv18MHw/V05O9
YZMltqxYTDOYqzvtRemdc4ZYN4QWlPH8kv5IKVJxFSCelm9SIYGb4/+umgFdxUPU
c1dX3Oemmdh6noQNsGfU8mqsMQKDPxSvg0kGTtQgquq3My8MhtwUlmS2XbithrzE
eK0vd8hxkHMP+XCtyvOGhb5waQIAKJ58IXpHdphs2iE/u9R4MVLxsmyPO3ceQR+P
x0rGCbXh1Uh4SVz7t9/nVZlDFUuPSj16pOVOJUHcrgL39rZdZqKMqDVBHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKC8QlTLZkjyv9CO8e+BvO/gYXRcMB8GA1UdIwQY
MBaAFLk2KKNjBOO9wh+FO7P61D5IYaXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVRZb28yTUU0NzNDSDRVN3NfclVQa2hocGNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9hOWJiY2UtZDNjNy00MjIxLTlmNmIt
ODdkM2VjN2YwNDEwLzEvdVRZb28yTUU0NzNDSDRVN3NfclVQa2hocGNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9hOWJiY2UtZDNjNy00MjIxLTlmNmItODdkM2VjN2YwNDEw
LzEvdVRZb28yTUU0NzNDSDRVN3NfclVQa2hocGNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWB0p/1ty
MUKNK7deUQ1Y92IjxZpplGVkqFN3G2j51mZml/6fEGgu2kV1kBkaaThbvsb/sNu5
4NUuDJM1lmUelPi/3tXOKrbhs8atfMzIK9vFe8lQ6q8dEFKCrX16IwOy/8qKwqNm
CEtfoOZvyhR+iFpeNf5yTsNCQXzmUHQvVnxXFLAkQVtUD2rqZcKKt1ErfHufCE88
fLjKq1yxQPYzaBxqbQ4gTJErciCHq8T0bQI/tIAIqX2tEU6zDF/xT9ZJi4P+ThJi
1kQ3/xdV/nMzYGkN5S+kYWvdqnNxfXuDfg6M+R+s4+1iiHL93sldOGQ3De9Jns9C
7AtparypyGs+eA==
-----END CERTIFICATE-----
Generated at Thu Nov 6 06:04:44 2025 by rpki-client