Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
File: ukxoXvpqLBBFY38CejJcCux5wBU.mft (raw, json)
Hash identifier: wsKDnzU9713DRB/WwfbnenE7Ekf0vkUYkXQaKmkRqOI=
Subject key identifier: 1C:EE:85:4B:2A:36:B4:CA:23:66:7A:60:FB:DB:1F:7C:FD:A4:67:49
Authority key identifier: BA:4C:68:5E:FA:6A:2C:10:45:63:7F:02:7A:32:5C:0A:EC:79:C0:15
Certificate issuer: /CN=ba4c685efa6a2c1045637f027a325c0aec79c015
Certificate serial: 0198D6600FCCE1BC9982BEE3262925EE6C7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
Manifest number: 0A10
Signing time: Sat 23 Aug 2025 10:01:16 +0000
Manifest this update: Sat 23 Aug 2025 10:01:16 +0000
Manifest next update: Sun 24 Aug 2025 10:01:16 +0000
Files and hashes: 1: VJzfvUbstsweL94z-ivJL9s3ZVk.roa (hash: HgLrKuozmz+yIcpW2tKbtdhcaLEc8ycsnDPCev84zDI=)
2: ukxoXvpqLBBFY38CejJcCux5wBU.crl (hash: qD72DoaTlvw9pY0jt0/MEm56UiXxxBF5rvo/ddmFpIk=)
3: ztUZv3t98zDrlPZTo-laONZjQE0.roa (hash: PyD/IDN5pwT/Z2dKrNt4DPnNuO7P4KGHdjRKj7cSR1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:0f:cc:e1:bc:99:82:be:e3:26:29:25:ee:6c:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4c685efa6a2c1045637f027a325c0aec79c015
Validity
Not Before: Aug 23 10:01:16 2025 GMT
Not After : Aug 24 10:01:16 2025 GMT
Subject: CN=1cee854b2a36b4ca23667a60fbdb1f7cfda46749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c3:25:ef:da:c4:d0:62:7e:35:e6:c7:75:da:
ea:ad:d7:00:d1:58:02:49:18:84:58:91:c5:78:47:
13:9d:b7:02:22:30:d3:5a:34:c7:65:f4:a8:51:14:
24:1f:10:53:43:32:e2:aa:0a:e7:a4:aa:ad:17:a9:
7e:13:5a:4e:15:b2:ba:ed:f7:eb:1a:03:b4:10:cc:
a5:30:9f:a7:c2:a9:d5:2d:ea:8f:56:82:86:5b:0b:
d4:73:c6:19:ed:a5:94:ef:a9:a9:a4:ab:c3:44:b4:
d3:d5:a1:ad:fe:8b:dd:6a:98:cf:da:96:a4:e6:cb:
2e:16:f6:d4:d7:11:c7:1c:5f:7d:b0:48:7a:f9:3a:
d5:ff:5d:2a:28:2d:d1:5a:c0:77:e9:f6:aa:cd:e0:
b2:a3:58:a4:62:96:d6:99:50:a0:31:b3:d1:c1:e5:
e0:a4:ef:ae:93:d3:c3:3a:65:c3:0d:92:d8:51:83:
09:88:27:30:ad:6c:f2:41:ae:9f:fa:22:52:d5:da:
20:91:8e:42:78:62:d4:b2:ac:ac:66:22:1e:58:d7:
dc:32:59:28:91:b9:45:8a:51:d8:20:95:e3:29:dd:
8b:1e:fb:ca:77:39:8f:8d:65:5b:67:06:9f:02:21:
90:37:33:62:84:be:b9:c1:77:1e:90:4f:fa:3f:37:
78:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:EE:85:4B:2A:36:B4:CA:23:66:7A:60:FB:DB:1F:7C:FD:A4:67:49
X509v3 Authority Key Identifier:
keyid:BA:4C:68:5E:FA:6A:2C:10:45:63:7F:02:7A:32:5C:0A:EC:79:C0:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:7b:96:af:79:bf:04:89:3a:5b:11:f4:87:fa:71:84:00:24:
fc:d4:86:df:af:17:08:03:2a:1d:70:3d:b3:9a:c7:44:53:94:
6a:8e:19:61:d8:b9:f8:43:3c:b3:bb:e7:65:3f:04:50:e1:39:
ae:66:cd:be:ec:17:fa:d0:d6:4c:25:4f:f7:c1:3d:f6:1a:65:
ce:3c:15:74:97:64:80:4b:d0:00:4e:74:4f:2a:a3:7d:c1:c4:
14:d2:5c:0f:b7:b8:7e:eb:eb:05:37:57:02:78:aa:a5:7b:38:
f6:d9:bf:ef:a0:38:8a:fd:df:79:95:90:11:d3:5c:41:51:86:
20:a3:0e:a7:82:88:c6:6f:a1:29:c8:d6:49:b5:c1:9a:6e:63:
fe:22:64:08:d7:8e:8e:8f:f0:3b:e4:8f:11:0b:03:6f:f1:67:
6a:01:1f:7c:a8:56:11:da:f1:6e:67:a2:92:31:c9:de:d6:55:
a5:ca:ac:d6:6c:37:cd:72:c0:b7:5c:0d:3e:9e:08:56:22:0a:
80:59:a9:7f:84:8b:3c:ed:b3:15:01:8d:39:a7:39:9a:c1:12:
e2:14:48:98:74:03:78:cb:62:8b:99:48:b8:d8:f9:b7:b5:d7:
ea:22:e9:7e:ea:b8:12:8d:32:35:f2:16:2c:ce:55:3d:ed:d5:
b4:97:29:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:31:01 2025 by rpki-client