Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.mft
File: uksi0igKF9DVTGhsm0M_C1tYAk8.mft (raw, json)
Hash identifier: U5Td1bme2/Os7gTEi1wpnn6nvJGEmRNzvR5pO5KxqDo=
Subject key identifier: A5:6B:29:E6:8C:31:89:16:FA:6D:0B:FE:CB:C7:78:A4:1C:05:3F:7B
Authority key identifier: BA:4B:22:D2:28:0A:17:D0:D5:4C:68:6C:9B:43:3F:0B:5B:58:02:4F
Certificate issuer: /CN=ba4b22d2280a17d0d54c686c9b433f0b5b58024f
Certificate serial: 0198D7A8D93277B32BDAE2F193046E7F45F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uksi0igKF9DVTGhsm0M_C1tYAk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.mft
Manifest number: 1532
Signing time: Sat 23 Aug 2025 16:00:23 +0000
Manifest this update: Sat 23 Aug 2025 16:00:23 +0000
Manifest next update: Sun 24 Aug 2025 16:00:23 +0000
Files and hashes: 1: uksi0igKF9DVTGhsm0M_C1tYAk8.crl (hash: Ok1U8MudQmyoJ7rz500Ncp/JLgAVU+lMsTiRzi21cW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uksi0igKF9DVTGhsm0M_C1tYAk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a8:d9:32:77:b3:2b:da:e2:f1:93:04:6e:7f:45:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4b22d2280a17d0d54c686c9b433f0b5b58024f
Validity
Not Before: Aug 23 16:00:23 2025 GMT
Not After : Aug 24 16:00:23 2025 GMT
Subject: CN=a56b29e68c318916fa6d0bfecbc778a41c053f7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:58:75:68:7a:f0:a6:f5:25:6d:bf:ba:cb:98:
35:80:ed:3e:45:a4:c8:9a:8d:c8:76:13:2c:04:99:
da:18:fa:82:00:03:46:42:87:66:1c:ce:72:2f:ab:
d4:07:03:98:ec:d3:01:14:63:21:90:3e:93:7f:fd:
7c:86:c1:e6:af:82:85:32:52:b3:a9:4f:7b:7a:6d:
66:3e:88:7b:4c:39:46:46:a1:37:6f:21:d2:4a:92:
d8:b7:49:05:79:0a:04:e0:ff:93:11:3b:4d:e4:2f:
61:62:ae:5d:db:2c:d0:fc:90:92:43:a6:ed:ea:1d:
e0:bc:7f:30:5e:04:f6:40:62:3b:ac:37:0a:52:c5:
f1:40:51:3c:2d:cd:ec:07:c3:b4:36:a2:eb:4b:e2:
f5:c9:ed:aa:35:db:36:f8:3c:f0:a1:a9:6c:19:7a:
97:d4:7c:db:fe:51:7a:d1:de:b2:46:f5:bd:c4:84:
60:b9:af:7c:f3:78:db:3c:4f:e4:08:06:0a:fd:58:
b8:c6:be:31:5a:71:f1:a5:34:76:fd:6a:9f:f8:12:
e6:4a:9d:7f:8c:e8:c9:f2:55:b5:c0:10:7c:80:a2:
52:94:d8:6c:b0:0b:f6:fc:2e:23:22:a9:99:99:62:
4b:43:a2:4c:7c:bb:fe:44:32:9a:c2:3a:2e:42:79:
ed:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:6B:29:E6:8C:31:89:16:FA:6D:0B:FE:CB:C7:78:A4:1C:05:3F:7B
X509v3 Authority Key Identifier:
keyid:BA:4B:22:D2:28:0A:17:D0:D5:4C:68:6C:9B:43:3F:0B:5B:58:02:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uksi0igKF9DVTGhsm0M_C1tYAk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:56:2b:40:35:18:7a:0f:9a:84:dc:f5:a6:61:f1:b4:56:c7:
05:ef:5c:bb:d1:2c:a8:00:fe:89:b1:57:9b:c7:a4:6e:e4:53:
c8:71:48:8d:1a:35:3e:b5:be:58:d4:bc:c1:27:f2:16:f3:8a:
29:2f:c9:76:71:69:c1:4c:62:7f:65:1b:4a:fe:4a:0a:d4:33:
5c:3b:2f:a8:34:79:8e:65:26:5d:66:46:49:fb:6f:fd:2a:5f:
b7:37:2d:1f:c9:99:ea:0c:05:d8:03:ab:d3:91:47:cc:2a:03:
04:6d:60:b2:96:08:63:73:fb:73:c5:3b:cf:d4:e9:bf:bb:7f:
24:2f:b5:b0:b9:3d:3a:f8:ac:fd:0a:7a:b4:43:ed:90:5b:4c:
ac:d8:4c:e2:42:be:76:30:c2:c3:89:3a:3d:23:6a:d6:1b:3e:
20:bb:be:e8:8a:ec:d6:e9:4f:c6:4f:0c:93:34:db:b5:75:4c:
03:c6:2b:50:05:5f:26:b2:d4:f7:f8:bb:bd:59:73:b7:90:32:
3c:31:e7:96:e2:c3:da:57:61:50:06:52:c6:6e:bc:25:45:c8:
5b:f9:41:96:ad:9b:41:33:8c:87:1e:4e:04:19:cb:24:cb:07:
e5:82:8e:42:dd:ca:d5:07:8a:9a:6c:3d:2e:45:a7:80:2f:2e:
58:f4:02:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:22:58 2025 by rpki-client