Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.mft
File: uksi0igKF9DVTGhsm0M_C1tYAk8.mft (raw, json)
Hash identifier: XofKG0Lsm0taLbNFLR84fcTZTxC+qTvOgdnsZdHInFs=
Subject key identifier: 91:DD:5E:8A:E3:4A:95:09:58:63:72:64:44:94:1D:EB:B6:4A:B0:D2
Authority key identifier: BA:4B:22:D2:28:0A:17:D0:D5:4C:68:6C:9B:43:3F:0B:5B:58:02:4F
Certificate issuer: /CN=ba4b22d2280a17d0d54c686c9b433f0b5b58024f
Certificate serial: 0199FD33F1AA3E8C726135D2C7798D65FA98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uksi0igKF9DVTGhsm0M_C1tYAk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.mft
Manifest number: 15CA
Signing time: Sun 19 Oct 2025 16:01:03 +0000
Manifest this update: Sun 19 Oct 2025 16:01:03 +0000
Manifest next update: Mon 20 Oct 2025 16:01:03 +0000
Files and hashes: 1: uksi0igKF9DVTGhsm0M_C1tYAk8.crl (hash: VF2Q6guKgYAgY06YOyg397gT9bzXGug2lUVAqZEGODU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uksi0igKF9DVTGhsm0M_C1tYAk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:f1:aa:3e:8c:72:61:35:d2:c7:79:8d:65:fa:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4b22d2280a17d0d54c686c9b433f0b5b58024f
Validity
Not Before: Oct 19 16:01:03 2025 GMT
Not After : Oct 20 16:01:03 2025 GMT
Subject: CN=91dd5e8ae34a95095863726444941debb64ab0d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:78:9d:73:bf:07:62:fa:ea:1b:af:12:79:59:
43:b9:bb:f7:56:e0:a0:e5:9d:3f:ce:ab:e3:4e:7c:
33:d0:e5:59:28:69:92:79:02:7f:64:1f:30:7f:e7:
61:24:c3:8b:1f:e4:32:f0:7b:69:d4:16:ff:74:fe:
4d:23:01:61:4e:0b:95:f7:83:8f:c1:c0:7a:34:81:
6d:f3:82:4d:37:76:df:14:a6:2b:77:8d:56:b3:73:
5e:f2:be:66:a4:3f:eb:88:24:90:28:c3:19:a0:b4:
e5:53:b0:1d:79:78:ac:4f:a4:bf:75:a1:bd:36:b5:
9a:df:c9:4c:c8:9a:08:f9:3f:79:06:42:4f:da:92:
69:0a:9e:21:fd:cb:ae:e1:15:8c:43:9d:07:ac:1d:
51:86:6c:ab:c1:af:c5:c8:36:2f:3b:09:93:84:e9:
fc:e8:0b:56:65:fd:5d:79:ab:c8:58:fb:a9:09:15:
b1:ce:90:7a:d3:96:b1:fe:c9:ea:45:79:98:5c:6a:
70:9e:ea:f4:cd:d3:b0:4c:d5:3e:6d:43:e4:a7:99:
d2:21:c5:16:02:ac:cf:be:51:dd:3b:34:a9:08:13:
f8:0d:e0:54:dd:63:94:a0:b6:b6:5e:73:b4:91:04:
e9:73:fe:98:21:fa:69:93:fb:0b:a9:f4:96:23:c5:
43:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:DD:5E:8A:E3:4A:95:09:58:63:72:64:44:94:1D:EB:B6:4A:B0:D2
X509v3 Authority Key Identifier:
keyid:BA:4B:22:D2:28:0A:17:D0:D5:4C:68:6C:9B:43:3F:0B:5B:58:02:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uksi0igKF9DVTGhsm0M_C1tYAk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:a4:ee:3e:0e:b4:6c:bd:67:24:af:4a:cb:52:ba:1e:6a:c7:
0d:95:94:c8:dd:72:44:5f:01:28:30:91:95:15:07:84:d9:89:
3f:2b:6c:d9:c2:a6:1d:ff:b6:3b:0e:a1:db:20:af:af:7d:68:
b1:d9:4c:fd:42:7c:d3:48:f2:e4:42:15:aa:5a:0b:46:ad:34:
7b:51:50:47:ca:73:12:92:82:9b:e3:8f:0f:c6:ca:20:d3:03:
2e:c5:52:41:ba:8b:b9:85:82:5c:d3:04:2b:a1:9c:00:f6:7a:
60:75:4e:a0:6c:4f:c4:e8:b4:29:8d:54:81:34:cd:d8:d4:ff:
eb:d7:14:81:f2:77:0e:87:42:fa:48:cc:04:8a:d8:05:0b:2c:
db:11:1e:16:35:3d:0c:29:7b:31:81:e3:ee:ae:34:28:ab:1b:
94:e7:55:f0:f3:04:ed:02:fb:89:04:b6:c7:54:fa:20:e8:59:
34:98:42:1f:f8:1a:27:4f:61:74:7e:b5:17:08:b5:7e:2c:f8:
21:b8:3d:5c:0e:24:3f:9f:7e:d7:c4:75:04:23:64:a1:b6:8b:
56:ea:78:4d:79:41:66:77:76:d6:39:3e:8b:61:b4:9c:24:fb:
c1:0c:14:38:f3:fa:7e:af:f8:88:b2:fa:9b:31:b5:61:d4:03:
35:d3:4f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:01 2025 by rpki-client