Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft
File: ukBDlux3brxmOzeQT1O_by22l94.mft (raw, json)
Hash identifier: iXFdDD5zcOVdF9Z3pXB8NvoWqQ8fHFrP44QeHgDvydo=
Subject key identifier: DB:23:15:D2:DB:20:C0:33:2A:0F:62:3D:FF:D0:F4:6E:DD:0F:99:8B
Authority key identifier: BA:40:43:96:EC:77:6E:BC:66:3B:37:90:4F:53:BF:6F:2D:B6:97:DE
Certificate issuer: /CN=ba404396ec776ebc663b37904f53bf6f2db697de
Certificate serial: 0199FCC6BACAFE2252DD7F4495C66BC970C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ukBDlux3brxmOzeQT1O_by22l94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft
Manifest number: 15F3
Signing time: Sun 19 Oct 2025 14:01:46 +0000
Manifest this update: Sun 19 Oct 2025 14:01:46 +0000
Manifest next update: Mon 20 Oct 2025 14:01:46 +0000
Files and hashes: 1: Al3GYSjIWjO-oik-aQgGBmqTDw0.roa (hash: +Y3s+IGFA905SwB8NeoX4D8JKu+EPEFHDlQOQJhAZjY=)
2: ukBDlux3brxmOzeQT1O_by22l94.crl (hash: XnmmHn4CnDaQeOBVcoGAd4NOv26FXZvCCnM4slswlio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft
rsync://rpki.ripe.net/repository/DEFAULT/ukBDlux3brxmOzeQT1O_by22l94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:ba:ca:fe:22:52:dd:7f:44:95:c6:6b:c9:70:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba404396ec776ebc663b37904f53bf6f2db697de
Validity
Not Before: Oct 19 14:01:46 2025 GMT
Not After : Oct 20 14:01:46 2025 GMT
Subject: CN=db2315d2db20c0332a0f623dffd0f46edd0f998b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7a:2a:97:01:c1:f1:9c:b6:60:42:9a:b5:a4:
df:82:c3:df:e4:60:4c:67:06:0c:55:ea:27:9a:88:
61:53:d8:7b:1d:c6:88:3d:1e:ee:31:e7:02:cb:fa:
f2:9b:c4:05:04:33:16:6b:97:8f:0f:a4:80:4b:91:
31:97:5d:d4:89:4b:b0:06:10:c9:ce:77:52:ce:9f:
d7:92:36:62:48:59:66:c1:56:4e:b4:29:bd:04:60:
77:00:12:da:2f:05:05:ab:86:5e:0e:45:d9:c1:07:
4d:a7:14:d7:32:ab:0b:c7:4d:2a:bd:c8:ef:1b:52:
ac:d0:aa:0f:97:ea:7f:83:49:53:e2:21:33:a5:9f:
c4:06:c9:dc:3c:1a:91:3a:9a:a7:74:37:4c:f6:c3:
f3:29:a7:c7:56:d6:be:68:93:21:e5:b2:59:f8:cc:
ec:bf:ad:04:cc:63:f4:16:9f:b9:99:d6:31:d2:04:
f7:82:7b:4a:0c:fb:c8:78:60:26:9d:b4:75:9a:fa:
e4:be:03:c8:d2:c6:b7:40:bf:1f:7c:48:ef:dd:bf:
a6:4b:52:88:3b:76:4b:bb:c2:3a:16:49:fc:3a:6f:
b0:f5:df:b4:49:7d:b3:47:3d:d9:4c:66:e7:3b:32:
40:67:39:48:85:77:6c:ce:e7:e3:b6:f4:3c:5a:45:
5b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:23:15:D2:DB:20:C0:33:2A:0F:62:3D:FF:D0:F4:6E:DD:0F:99:8B
X509v3 Authority Key Identifier:
keyid:BA:40:43:96:EC:77:6E:BC:66:3B:37:90:4F:53:BF:6F:2D:B6:97:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukBDlux3brxmOzeQT1O_by22l94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:85:cc:92:37:19:c8:95:2d:16:84:f1:45:65:67:b0:cf:4d:
b4:96:d5:7f:95:f2:15:aa:47:cb:b3:20:4b:d5:60:dc:d8:41:
a8:a8:10:79:c1:39:3c:76:7b:b2:54:cf:b5:72:29:22:aa:96:
dd:09:41:68:94:74:ac:91:29:a6:cc:f3:59:85:c0:6a:31:84:
d2:9d:1a:6b:78:5e:23:35:61:f7:c6:5d:f4:f8:b9:2d:f8:27:
66:90:42:3a:89:6e:26:3c:5f:66:f6:0e:6f:67:56:c8:6d:31:
ef:c1:7b:f5:b9:79:42:25:8d:51:7a:e6:dd:94:7e:0a:ea:3e:
54:b3:a5:20:e3:44:f8:d8:13:87:74:72:0c:72:9d:5e:db:82:
72:e1:eb:38:b6:4a:36:3a:2f:96:12:68:1d:fe:0a:f9:7f:1a:
bb:d3:27:16:85:ed:e9:57:dd:b7:8d:94:2e:7b:47:9e:04:66:
72:d2:b8:2c:bc:18:f2:c6:17:a6:87:7b:eb:8a:2e:db:c1:a2:
23:4a:5a:c3:b8:01:d2:a9:06:8e:da:4f:4c:5c:40:95:2d:d6:
db:96:9a:1b:81:33:9d:77:7e:75:6b:7a:d2:ca:9a:3c:24:62:
59:8e:b5:b6:0c:a9:6a:f5:96:a8:a4:bd:76:02:24:58:98:7e:
b3:a4:b2:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:39 2025 by rpki-client