Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
File: UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft (raw, json)
Hash identifier: q0+eURLktmD9Wso15+AGKoRqEINLwf2wiPMYfBCCA7E=
Subject key identifier: 89:88:13:8C:84:E7:8E:0E:C0:FA:70:55:F1:D7:25:89:AB:68:CE:28
Authority key identifier: 50:A0:6A:45:3F:CD:5F:26:FA:F4:82:2C:4B:45:90:98:DC:AF:F0:39
Certificate issuer: /CN=50a06a453fcd5f26faf4822c4b459098dcaff039
Certificate serial: 0198D6984CEE8DC0F8ABAE37F6317A0DA204
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 11:02:41 +0000
Manifest this update: Sat 23 Aug 2025 11:02:41 +0000
Manifest next update: Sun 24 Aug 2025 11:02:41 +0000
Files and hashes: 1: UKBqRT_NXyb69IIsS0WQmNyv8Dk.crl (hash: pSgLRSd7sbyvvMlA8Y4HwX5oXtvkdwWEhIccfq9Zpu0=)
2: XmJ8vYGbQYVnd8y-h4wRzi3J_pE.roa (hash: exnN1l7i5NuQ19i+bMh7iG0NXDBSnKZN8vpjyWS2vRc=)
3: XrhvNCYQn9v_ZtENdKVZ3VLduJc.roa (hash: aN/R4IVeQqrz28tH9akl71ra6TmpBihdrIjUuL23MYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:4c:ee:8d:c0:f8:ab:ae:37:f6:31:7a:0d:a2:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50a06a453fcd5f26faf4822c4b459098dcaff039
Validity
Not Before: Aug 23 11:02:41 2025 GMT
Not After : Aug 24 11:02:41 2025 GMT
Subject: CN=8988138c84e78e0ec0fa7055f1d72589ab68ce28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:83:56:f0:ba:a5:de:b8:e2:cf:45:19:56:1d:
c8:36:8b:fa:bb:34:43:4f:7a:26:36:84:a1:dc:4b:
c9:3a:f5:7b:6f:77:3f:9a:e1:01:83:c2:a0:fa:a5:
51:6c:2e:9b:96:58:84:61:46:77:9f:fa:b0:4d:a5:
9c:db:a0:88:c9:d1:d5:a5:3d:6f:51:4b:30:fb:77:
d4:d7:54:6d:f6:fc:3c:b8:72:84:a1:94:5d:c1:52:
be:5d:83:a4:2d:34:1f:ac:d2:2a:56:ab:fa:c4:17:
25:59:47:a4:23:4b:49:93:74:87:90:00:12:fc:ef:
29:a5:54:f6:0d:60:ad:ac:1c:96:fa:76:0a:ad:e2:
10:2f:7a:05:04:6d:16:3d:71:63:e6:80:2b:94:b3:
07:b8:31:9a:64:85:47:61:5a:75:19:93:b7:15:56:
4c:73:ab:ce:6e:57:9e:f3:09:98:43:8b:19:2a:11:
1e:27:75:b3:25:9d:3f:9e:f1:93:dc:f9:5f:6c:15:
8f:7a:4a:e8:5f:7e:a5:a7:d9:1d:65:3e:54:38:cf:
86:da:c2:b1:3b:0c:e8:12:03:b5:6a:25:2c:30:33:
74:9e:aa:f1:cb:82:7f:6e:a6:5a:54:af:40:70:fe:
b5:d4:c6:0e:60:33:9d:67:c6:6b:f3:71:e7:e7:3f:
c1:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:88:13:8C:84:E7:8E:0E:C0:FA:70:55:F1:D7:25:89:AB:68:CE:28
X509v3 Authority Key Identifier:
keyid:50:A0:6A:45:3F:CD:5F:26:FA:F4:82:2C:4B:45:90:98:DC:AF:F0:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:58:5a:09:c1:1d:10:d6:6f:82:6b:94:98:e5:38:ba:16:a3:
60:00:26:79:e1:91:d2:95:fb:93:af:1f:6d:0e:75:57:64:45:
b8:07:4f:3f:36:9c:ef:35:91:92:b6:61:05:b6:8e:90:60:d2:
50:85:04:62:9c:74:b8:fc:64:4e:a1:62:52:e1:c7:b9:86:53:
73:34:91:46:b3:28:e7:e6:a0:9e:32:e2:e8:b0:99:3f:3d:86:
1a:69:c2:c3:07:83:6a:fa:9b:d1:37:fc:e7:03:15:c3:45:6d:
33:d8:62:01:41:e2:4c:66:66:11:4e:90:f2:7f:cb:69:ec:71:
4d:10:1f:29:db:c0:bc:58:7b:42:14:f8:87:c9:8f:12:0d:c4:
1a:f9:b1:54:02:ac:50:14:db:3c:b3:03:de:a2:01:97:f8:47:
04:bc:ce:c3:95:37:fc:63:e4:a5:34:1b:16:3e:a8:23:1d:f1:
02:ef:61:dc:88:3f:22:6a:ef:e4:ab:fd:5f:aa:a4:72:1e:5d:
02:4a:2d:e4:37:97:c7:e2:b4:f0:82:64:48:61:d0:9e:de:cc:
f4:b9:00:1b:56:7f:14:9a:8d:4d:64:2f:aa:ac:55:60:0d:fa:
23:dd:c3:f6:d7:6b:e6:21:34:da:80:f9:f4:33:fe:88:b8:98:
12:c3:d7:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:29:08 2025 by rpki-client