Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft
File: ukBDlux3brxmOzeQT1O_by22l94.mft (raw, json)
Hash identifier: 1PzhU2zhU4f/1Z4E7jVmO7NIEFW9nAZCkiQSBoWoBq8=
Subject key identifier: 55:8C:58:6F:C6:0C:A5:90:5E:2E:59:CF:7C:B5:6B:D4:CB:A2:8D:A6
Authority key identifier: BA:40:43:96:EC:77:6E:BC:66:3B:37:90:4F:53:BF:6F:2D:B6:97:DE
Certificate issuer: /CN=ba404396ec776ebc663b37904f53bf6f2db697de
Certificate serial: 0196C61594EFF7159F026C9FD9DFA133FFD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ukBDlux3brxmOzeQT1O_by22l94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft
Manifest number: 1449
Signing time: Mon 12 May 2025 20:00:25 +0000
Manifest this update: Mon 12 May 2025 20:00:25 +0000
Manifest next update: Tue 13 May 2025 20:00:25 +0000
Files and hashes: 1: Al3GYSjIWjO-oik-aQgGBmqTDw0.roa (hash: +Y3s+IGFA905SwB8NeoX4D8JKu+EPEFHDlQOQJhAZjY=)
2: ukBDlux3brxmOzeQT1O_by22l94.crl (hash: AgRPIVdC2omgVx9WEI4LMQk5WL0fagA5dx+l1fu4geY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft
rsync://rpki.ripe.net/repository/DEFAULT/ukBDlux3brxmOzeQT1O_by22l94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:15:94:ef:f7:15:9f:02:6c:9f:d9:df:a1:33:ff:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba404396ec776ebc663b37904f53bf6f2db697de
Validity
Not Before: May 12 20:00:25 2025 GMT
Not After : May 13 20:00:25 2025 GMT
Subject: CN=558c586fc60ca5905e2e59cf7cb56bd4cba28da6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:82:cd:c6:08:ef:3c:a3:0d:60:40:e7:12:9b:
95:bb:59:ad:84:0c:8c:5d:82:fd:d2:0b:5b:60:b3:
ee:de:bb:ec:50:68:51:13:ab:44:1c:b1:88:20:ea:
b7:f6:1c:e1:90:3a:d8:2d:11:d0:07:cf:5b:37:dc:
77:0f:14:97:9c:89:1b:e5:02:f1:c6:2e:ea:54:4c:
12:0f:1b:5e:e3:5b:44:7f:fa:42:51:e2:38:33:6e:
58:45:c3:16:41:b4:92:84:7c:5a:49:4a:f6:17:ab:
88:c2:78:de:9a:06:f7:90:96:b8:ce:62:3b:86:12:
b6:5e:7d:09:96:1f:cb:bb:d7:0e:75:a2:11:fc:1b:
ea:3d:eb:e4:47:91:a3:c6:ad:5e:3a:4a:3e:ea:78:
94:ee:4e:a7:a2:68:bd:b8:1c:84:4f:17:a6:b3:24:
90:9e:49:e3:78:ca:b2:c8:0f:35:48:cc:8e:5c:3f:
b8:37:1b:1e:42:76:31:76:a8:8a:de:a6:43:d9:93:
40:12:dc:24:a5:3f:5c:ef:8d:4e:af:5d:d3:70:9e:
3a:be:c7:29:78:09:ec:76:69:86:86:cb:9c:e4:2f:
a0:1e:2b:a9:5a:e1:b9:9c:44:86:99:58:6a:bf:01:
40:11:fd:b5:d6:cc:44:19:e3:d7:a7:44:9a:f8:45:
31:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:8C:58:6F:C6:0C:A5:90:5E:2E:59:CF:7C:B5:6B:D4:CB:A2:8D:A6
X509v3 Authority Key Identifier:
keyid:BA:40:43:96:EC:77:6E:BC:66:3B:37:90:4F:53:BF:6F:2D:B6:97:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukBDlux3brxmOzeQT1O_by22l94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:fa:0b:d7:ff:f8:96:f2:24:e4:df:9c:34:d5:6e:7d:d3:a2:
57:e8:0a:06:ee:68:7b:b7:aa:86:d8:1e:54:ec:2f:9a:30:64:
44:f4:d4:12:48:20:68:7b:60:c0:0c:ef:77:ea:c8:25:e0:47:
11:73:9a:03:04:e9:e4:19:59:c4:75:20:f3:3e:20:0b:89:16:
bd:cd:dc:f1:0b:b4:f8:50:e0:8d:37:eb:5f:ff:f3:99:b2:ca:
d4:13:6f:a5:04:a4:fd:36:32:71:98:ed:d7:b1:54:46:23:9d:
a5:4e:d9:69:4b:af:0a:6c:3e:85:d9:05:4c:67:6e:95:79:3b:
c6:21:37:7c:fc:a0:8c:94:b3:df:12:20:50:bc:83:28:45:3a:
3e:e5:8e:3a:7d:66:12:b0:7c:79:ac:d3:2b:c5:6d:69:6a:ad:
b8:e2:0b:0c:1b:0f:2a:af:68:76:bc:fa:35:cc:b4:a9:73:4f:
6e:6e:e5:e4:e4:dd:17:25:2e:c8:28:6a:96:0b:f6:ab:c3:92:
f9:b9:e2:77:5e:6d:f4:b2:38:b7:3a:99:46:bb:45:29:b7:2c:
0b:a6:ee:26:b2:45:7c:84:45:45:3d:80:51:c3:ed:9b:43:b3:
c0:c1:66:54:cb:c2:2a:89:f7:81:0f:a0:40:05:dd:e0:4f:14:
c1:ff:cb:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbGFZTv9xWfAmyf2d+hM//WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNDA0Mzk2ZWM3NzZlYmM2NjNiMzc5MDRmNTNiZjZmMmRi
Njk3ZGUwHhcNMjUwNTEyMjAwMDI1WhcNMjUwNTEzMjAwMDI1WjAzMTEwLwYDVQQD
Eyg1NThjNTg2ZmM2MGNhNTkwNWUyZTU5Y2Y3Y2I1NmJkNGNiYTI4ZGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4LNxgjvPKMNYEDnEpuVu1mthAyM
XYL90gtbYLPu3rvsUGhRE6tEHLGIIOq39hzhkDrYLRHQB89bN9x3DxSXnIkb5QLx
xi7qVEwSDxte41tEf/pCUeI4M25YRcMWQbSShHxaSUr2F6uIwnjemgb3kJa4zmI7
hhK2Xn0Jlh/Lu9cOdaIR/BvqPevkR5Gjxq1eOko+6niU7k6nomi9uByETxemsySQ
nknjeMqyyA81SMyOXD+4NxseQnYxdqiK3qZD2ZNAEtwkpT9c741Or13TcJ46vscp
eAnsdmmGhsuc5C+gHiupWuG5nESGmVhqvwFAEf211sxEGePXp0Sa+EUx6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFWMWG/GDKWQXi5Zz3y1a9TLoo2mMB8GA1UdIwQY
MBaAFLpAQ5bsd268Zjs3kE9Tv28ttpfeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWtCRGx1eDNicnhtT3plUVQxT19ieTIybDk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9mNDVmNjAtZjRlZS00MmFkLWI2YWIt
NzM1YTM5OWYwMTAyLzEvdWtCRGx1eDNicnhtT3plUVQxT19ieTIybDk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9mNDVmNjAtZjRlZS00MmFkLWI2YWItNzM1YTM5OWYwMTAy
LzEvdWtCRGx1eDNicnhtT3plUVQxT19ieTIybDk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdfoL1//4
lvIk5N+cNNVufdOiV+gKBu5oe7eqhtgeVOwvmjBkRPTUEkggaHtgwAzvd+rIJeBH
EXOaAwTp5BlZxHUg8z4gC4kWvc3c8Qu0+FDgjTfrX//zmbLK1BNvpQSk/TYycZjt
17FURiOdpU7ZaUuvCmw+hdkFTGdulXk7xiE3fPygjJSz3xIgULyDKEU6PuWOOn1m
ErB8eazTK8VtaWqtuOILDBsPKq9odrz6Ncy0qXNPbm7l5OTdFyUuyChqlgv2q8OS
+bnid15t9LI4tzqZRrtFKbcsC6buJrJFfIRFRT2AUcPtm0OzwMFmVMvCKon3gQ+g
QAXd4E8Uwf/LJQ==
-----END CERTIFICATE-----
Generated at Tue May 13 05:00:20 2025 by rpki-client