Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
File: ukxoXvpqLBBFY38CejJcCux5wBU.mft (raw, json)
Hash identifier: GIqntwkvIdVU/3BW+U5b5C0MdWhBjtJfHvcKLiJCDqo=
Subject key identifier: F8:21:F6:05:80:EE:67:AF:1F:5D:27:3C:7D:69:DA:BD:56:9D:DE:FC
Authority key identifier: BA:4C:68:5E:FA:6A:2C:10:45:63:7F:02:7A:32:5C:0A:EC:79:C0:15
Certificate issuer: /CN=ba4c685efa6a2c1045637f027a325c0aec79c015
Certificate serial: 0197CFBBD16D07746DA7C9435262D2E6514F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
Manifest number: 0988
Signing time: Thu 03 Jul 2025 10:01:21 +0000
Manifest this update: Thu 03 Jul 2025 10:01:21 +0000
Manifest next update: Fri 04 Jul 2025 10:01:21 +0000
Files and hashes: 1: VJzfvUbstsweL94z-ivJL9s3ZVk.roa (hash: HgLrKuozmz+yIcpW2tKbtdhcaLEc8ycsnDPCev84zDI=)
2: ukxoXvpqLBBFY38CejJcCux5wBU.crl (hash: aB88uhKpwB6wXZEE0BenYWWQhXXLpyv9phz7pPoIL2w=)
3: ztUZv3t98zDrlPZTo-laONZjQE0.roa (hash: PyD/IDN5pwT/Z2dKrNt4DPnNuO7P4KGHdjRKj7cSR1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 10:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cf:bb:d1:6d:07:74:6d:a7:c9:43:52:62:d2:e6:51:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4c685efa6a2c1045637f027a325c0aec79c015
Validity
Not Before: Jul 3 10:01:21 2025 GMT
Not After : Jul 4 10:01:21 2025 GMT
Subject: CN=f821f60580ee67af1f5d273c7d69dabd569ddefc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b3:e0:0f:e4:61:62:53:ef:ea:6a:cc:68:a0:
08:1d:e2:42:99:df:06:29:bb:56:70:ae:7e:70:25:
a6:0b:fa:44:f9:5a:c4:69:30:f7:cc:2e:fa:d2:40:
f1:29:17:8f:37:d1:25:a2:c5:79:28:f6:da:5c:39:
fb:d9:a0:85:65:b7:ec:c5:f7:01:2e:6f:df:96:b0:
f5:3b:ac:a7:d4:75:d5:2b:a6:34:75:ce:b4:15:d3:
42:77:61:40:ba:c2:64:02:e5:9f:16:c6:9e:3f:e8:
8a:c1:af:df:d9:cf:55:fd:0f:b2:32:fd:00:3c:37:
c9:27:dc:59:ad:87:e6:a0:4f:35:02:8b:15:f5:11:
fe:b8:56:a4:a4:ca:70:a5:52:55:d9:8b:3d:40:d4:
ea:a9:15:4f:39:0a:74:41:a2:5a:1a:01:58:5f:f7:
47:dc:62:aa:09:c8:ed:58:75:32:09:7c:e0:79:b0:
67:b1:6e:0d:33:f7:6c:e5:e4:db:67:ef:73:28:bb:
93:b6:54:d7:b3:f9:a4:7e:e2:a3:96:a3:79:ac:5b:
c1:ce:32:51:5d:55:a2:c5:b1:4d:08:40:f1:b3:d3:
0d:91:c3:d5:12:74:ee:ce:27:15:34:0a:02:c0:74:
cb:3d:43:8d:3b:96:e4:e3:d7:1a:ce:17:b9:17:5b:
e7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:21:F6:05:80:EE:67:AF:1F:5D:27:3C:7D:69:DA:BD:56:9D:DE:FC
X509v3 Authority Key Identifier:
keyid:BA:4C:68:5E:FA:6A:2C:10:45:63:7F:02:7A:32:5C:0A:EC:79:C0:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:d0:2e:ae:24:2f:8b:56:88:13:01:bf:e2:0d:44:3b:63:85:
12:20:0a:5b:fc:12:9c:7e:76:bb:83:e3:3e:94:8e:b2:7b:ed:
ff:aa:37:03:a6:e8:08:63:ae:03:b3:03:97:b7:a7:e3:15:f6:
17:08:84:59:3d:8e:81:3a:a4:08:0e:27:1b:66:50:3f:52:d3:
1a:02:a1:ad:7c:e4:1f:88:27:ab:8d:0c:d1:68:b1:d2:09:40:
ae:7c:5d:36:6e:ee:f4:90:61:6d:5d:81:90:87:c6:12:d3:73:
11:21:eb:d0:62:79:c3:c4:42:3d:a2:bd:b1:3b:4a:fd:f0:f5:
e0:76:80:cf:fd:d0:c1:1e:65:b7:95:17:c1:24:04:4f:36:38:
88:3a:af:54:c4:9f:7d:25:de:7d:87:e7:b8:ac:43:cb:6e:f9:
3e:22:aa:34:3d:98:bf:77:80:1b:f9:bc:6e:a9:e7:a9:1e:62:
85:e6:e6:fa:95:37:ce:17:0c:0f:2d:7a:4d:19:dd:20:87:3f:
fc:d1:f1:21:c1:2f:6a:72:47:5a:a9:e4:02:0a:59:bb:21:99:
2c:0a:5b:b5:67:ef:2e:87:b2:4b:55:0d:1d:5f:01:c1:03:46:
d3:0a:9a:2b:4c:5f:76:30:3d:e8:5d:d1:7e:80:e2:54:b9:96:
37:09:d7:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 17:07:49 2025 by rpki-client