Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft
File: ukBDlux3brxmOzeQT1O_by22l94.mft (raw, json)
Hash identifier: 1qODfyqo71S/VxHJmZB6GcMb/n31ZjlUCRpZ2Wxe8OI=
Subject key identifier: 63:15:5B:1E:66:6A:FD:37:C3:67:34:7F:21:00:69:AB:83:3F:F4:74
Authority key identifier: BA:40:43:96:EC:77:6E:BC:66:3B:37:90:4F:53:BF:6F:2D:B6:97:DE
Certificate issuer: /CN=ba404396ec776ebc663b37904f53bf6f2db697de
Certificate serial: 0197D66260088552239E0D60625DA7637CD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ukBDlux3brxmOzeQT1O_by22l94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft
Manifest number: 14D6
Signing time: Fri 04 Jul 2025 17:01:00 +0000
Manifest this update: Fri 04 Jul 2025 17:01:00 +0000
Manifest next update: Sat 05 Jul 2025 17:01:00 +0000
Files and hashes: 1: Al3GYSjIWjO-oik-aQgGBmqTDw0.roa (hash: +Y3s+IGFA905SwB8NeoX4D8JKu+EPEFHDlQOQJhAZjY=)
2: ukBDlux3brxmOzeQT1O_by22l94.crl (hash: jouwlww+9E/WGOt8uCdMxaaHPxjII05H44AWpbORazs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft
rsync://rpki.ripe.net/repository/DEFAULT/ukBDlux3brxmOzeQT1O_by22l94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d6:62:60:08:85:52:23:9e:0d:60:62:5d:a7:63:7c:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba404396ec776ebc663b37904f53bf6f2db697de
Validity
Not Before: Jul 4 17:01:00 2025 GMT
Not After : Jul 5 17:01:00 2025 GMT
Subject: CN=63155b1e666afd37c367347f210069ab833ff474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b7:ce:c6:2d:28:85:ef:96:8e:53:e7:ef:4d:
d4:4e:f7:e3:5c:b1:fe:47:9d:32:f7:1b:5c:6c:ec:
d4:9e:41:13:4d:a5:87:e3:a9:27:6c:a4:14:9d:b7:
66:99:78:33:b9:b9:72:4e:cb:18:f7:b3:f7:24:e6:
65:4a:7e:4d:54:0c:7b:37:66:3d:1b:57:d5:92:c9:
86:30:33:31:1c:f4:9a:d4:b7:2a:6e:d6:ee:86:f3:
83:16:a4:ae:da:74:61:95:6d:04:4b:33:35:55:2e:
cb:4c:61:df:30:e0:c1:b5:bb:be:3b:bf:23:37:bc:
bf:ef:57:5f:e2:a3:92:85:39:b5:50:86:6e:e8:01:
c9:cb:a8:a8:b2:5d:22:31:53:dd:5f:ff:66:76:b1:
94:4e:8f:c5:29:ac:3e:3d:50:28:2f:2c:41:ae:aa:
0a:e9:c3:53:42:45:69:38:13:b8:4a:13:d3:35:22:
bf:df:3d:7e:52:77:83:7d:d7:99:85:64:4f:83:c0:
72:aa:cb:a5:97:18:4e:98:c5:ba:2e:0e:b4:66:53:
f8:d9:c5:c3:11:b0:93:70:fa:5e:17:11:2a:01:a4:
7d:df:c9:9a:95:ab:28:36:fa:f6:bd:d6:2d:30:ba:
72:12:f7:97:ff:00:9e:3b:88:d9:07:df:e2:30:73:
3d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:15:5B:1E:66:6A:FD:37:C3:67:34:7F:21:00:69:AB:83:3F:F4:74
X509v3 Authority Key Identifier:
keyid:BA:40:43:96:EC:77:6E:BC:66:3B:37:90:4F:53:BF:6F:2D:B6:97:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukBDlux3brxmOzeQT1O_by22l94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:35:93:da:63:54:51:77:eb:df:8b:83:3d:78:0c:be:da:18:
a6:63:e9:39:f4:bd:6f:8b:5b:49:11:c5:51:2b:ce:95:1e:0d:
57:bf:0f:72:0c:2b:2d:4b:16:34:3b:8c:49:39:3e:e5:56:70:
1e:b7:44:f9:e1:80:59:2a:05:9b:ee:34:31:59:55:87:ec:10:
68:f6:9d:3f:ad:ff:5b:a6:7b:23:20:56:43:94:53:1c:78:a0:
e9:4e:2a:95:30:17:3b:77:c9:6d:04:17:b6:bf:2e:d7:bf:45:
b3:fc:30:ff:b8:f2:6c:81:17:95:ca:68:35:6c:44:96:6a:c8:
48:19:bf:79:86:32:e3:09:ce:f6:56:82:19:c0:e2:4b:86:93:
c3:b1:a0:ec:0a:e8:4f:ac:57:5c:1f:b4:8e:94:12:5e:8a:21:
f4:30:42:90:96:f1:15:d7:77:dd:f6:6f:da:9c:29:6c:aa:ea:
b9:a5:5a:e0:62:62:c1:c1:fd:cd:bf:1e:65:2f:f2:f6:dc:a6:
fc:42:52:b9:c1:99:0d:31:c2:48:97:a0:9b:a6:01:7c:2d:57:
39:1f:84:3b:10:e1:b6:9c:63:b8:f9:59:2d:da:55:a4:9f:98:
66:d3:a0:d7:38:20:d4:6d:db:ac:0d:1f:bb:77:bb:aa:85:5b:
85:cd:f2:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfWYmAIhVIjng1gYl2nY3zYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNDA0Mzk2ZWM3NzZlYmM2NjNiMzc5MDRmNTNiZjZmMmRi
Njk3ZGUwHhcNMjUwNzA0MTcwMTAwWhcNMjUwNzA1MTcwMTAwWjAzMTEwLwYDVQQD
Eyg2MzE1NWIxZTY2NmFmZDM3YzM2NzM0N2YyMTAwNjlhYjgzM2ZmNDc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrfOxi0ohe+WjlPn703UTvfjXLH+
R50y9xtcbOzUnkETTaWH46knbKQUnbdmmXgzublyTssY97P3JOZlSn5NVAx7N2Y9
G1fVksmGMDMxHPSa1LcqbtbuhvODFqSu2nRhlW0ESzM1VS7LTGHfMODBtbu+O78j
N7y/71df4qOShTm1UIZu6AHJy6iosl0iMVPdX/9mdrGUTo/FKaw+PVAoLyxBrqoK
6cNTQkVpOBO4ShPTNSK/3z1+UneDfdeZhWRPg8ByqsullxhOmMW6Lg60ZlP42cXD
EbCTcPpeFxEqAaR938malasoNvr2vdYtMLpyEveX/wCeO4jZB9/iMHM9KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGMVWx5mav03w2c0fyEAaauDP/R0MB8GA1UdIwQY
MBaAFLpAQ5bsd268Zjs3kE9Tv28ttpfeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWtCRGx1eDNicnhtT3plUVQxT19ieTIybDk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9mNDVmNjAtZjRlZS00MmFkLWI2YWIt
NzM1YTM5OWYwMTAyLzEvdWtCRGx1eDNicnhtT3plUVQxT19ieTIybDk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9mNDVmNjAtZjRlZS00MmFkLWI2YWItNzM1YTM5OWYwMTAy
LzEvdWtCRGx1eDNicnhtT3plUVQxT19ieTIybDk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAjWT2mNU
UXfr34uDPXgMvtoYpmPpOfS9b4tbSRHFUSvOlR4NV78PcgwrLUsWNDuMSTk+5VZw
HrdE+eGAWSoFm+40MVlVh+wQaPadP63/W6Z7IyBWQ5RTHHig6U4qlTAXO3fJbQQX
tr8u179Fs/ww/7jybIEXlcpoNWxElmrISBm/eYYy4wnO9laCGcDiS4aTw7Gg7Aro
T6xXXB+0jpQSXooh9DBCkJbxFdd33fZv2pwpbKrquaVa4GJiwcH9zb8eZS/y9tym
/EJSucGZDTHCSJegm6YBfC1XOR+EOxDhtpxjuPlZLdpVpJ+YZtOg1zgg1G3brA0f
u3e7qoVbhc3yqg==
-----END CERTIFICATE-----
Generated at Sat Jul 5 01:48:50 2025 by rpki-client