Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
File: ukxoXvpqLBBFY38CejJcCux5wBU.mft (raw, json)
Hash identifier: ELbEyvlmO/5yC5HldGijLtMDfVGOXTC8YmSdWzjTi0c=
Subject key identifier: D0:19:D3:C6:88:EC:25:9C:8C:70:E9:1C:BC:05:34:C1:24:6C:35:65
Authority key identifier: BA:4C:68:5E:FA:6A:2C:10:45:63:7F:02:7A:32:5C:0A:EC:79:C0:15
Certificate issuer: /CN=ba4c685efa6a2c1045637f027a325c0aec79c015
Certificate serial: 0199FBEACB68FA6603EA2A611D01251955FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
Manifest number: 0AA8
Signing time: Sun 19 Oct 2025 10:01:32 +0000
Manifest this update: Sun 19 Oct 2025 10:01:32 +0000
Manifest next update: Mon 20 Oct 2025 10:01:32 +0000
Files and hashes: 1: VJzfvUbstsweL94z-ivJL9s3ZVk.roa (hash: HgLrKuozmz+yIcpW2tKbtdhcaLEc8ycsnDPCev84zDI=)
2: ukxoXvpqLBBFY38CejJcCux5wBU.crl (hash: YmP0basNeFu22UFX7K32E28lgwbTCkVHbGJz6RXsEy4=)
3: ztUZv3t98zDrlPZTo-laONZjQE0.roa (hash: PyD/IDN5pwT/Z2dKrNt4DPnNuO7P4KGHdjRKj7cSR1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:cb:68:fa:66:03:ea:2a:61:1d:01:25:19:55:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4c685efa6a2c1045637f027a325c0aec79c015
Validity
Not Before: Oct 19 10:01:32 2025 GMT
Not After : Oct 20 10:01:32 2025 GMT
Subject: CN=d019d3c688ec259c8c70e91cbc0534c1246c3565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:dd:17:48:88:1c:15:32:b0:5e:56:11:86:eb:
ce:f6:ad:e6:2d:01:63:d0:8a:db:aa:1d:c7:15:0b:
e3:10:a2:05:f3:7f:05:7f:f5:e3:a1:f2:3b:7e:95:
ba:a5:24:09:e1:a1:ee:f8:5f:ee:72:f2:02:63:cf:
59:53:f1:89:b8:07:28:72:4e:2d:75:58:ca:91:82:
d7:3c:37:12:28:65:ec:a2:2a:25:77:ef:69:71:4b:
1a:c8:4a:bc:15:e4:cf:b2:57:a1:d9:69:77:1b:b8:
6d:b7:3f:86:fe:f8:c9:4d:5d:87:12:45:12:e8:65:
bb:b1:7c:a2:90:17:50:7a:cd:7b:83:d3:b9:48:14:
91:da:67:fe:de:49:b0:fa:35:2d:2a:f7:99:e3:c9:
df:ca:f0:2f:c4:69:87:ea:44:4c:74:ed:10:1f:11:
d4:5b:37:55:1e:c5:ec:8d:e6:d5:b5:10:c6:a3:59:
8f:c2:ba:20:c9:37:09:3b:e6:83:c1:4d:1b:0b:9f:
1d:47:bb:aa:63:19:82:58:59:b7:02:85:a1:7a:af:
ff:31:0c:58:db:ac:47:41:dc:3e:a1:65:3e:b3:75:
f9:a9:53:b6:a8:ef:cd:fc:8d:40:1d:39:28:42:57:
0b:04:ec:02:b1:fc:c6:9b:63:0b:1b:cc:c1:8e:6a:
96:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:19:D3:C6:88:EC:25:9C:8C:70:E9:1C:BC:05:34:C1:24:6C:35:65
X509v3 Authority Key Identifier:
keyid:BA:4C:68:5E:FA:6A:2C:10:45:63:7F:02:7A:32:5C:0A:EC:79:C0:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:21:aa:6f:a4:95:b2:d2:de:2d:ee:4e:38:4b:d7:ae:ff:d8:
b3:ca:51:1e:34:d1:42:26:bd:20:2b:6f:62:cd:d3:7e:f0:86:
04:54:87:33:f9:2e:c7:6e:cb:14:79:51:e2:8d:24:58:9d:57:
fd:89:80:0b:aa:59:83:6a:20:58:3e:9d:0b:db:82:8c:c6:81:
b5:c3:1c:6f:e1:4f:cb:ce:8a:0e:eb:d8:d7:26:6e:37:36:84:
fd:6f:39:f5:1c:7a:9e:65:65:a9:df:d8:27:57:ce:5c:37:b8:
ec:8d:70:f5:bd:54:8d:18:10:0b:34:9b:9a:61:ea:64:5d:c1:
45:fb:b9:0f:ba:31:ba:a2:e7:70:fa:08:97:9d:d0:33:cd:9e:
5e:94:07:0e:05:93:67:bd:62:3b:c2:77:3c:1f:98:c6:1e:4f:
18:7e:a9:59:df:46:ae:73:b6:b0:22:d7:a7:48:bb:21:26:d8:
d7:e9:6c:d0:bb:61:76:60:75:fb:38:70:9d:b1:88:12:eb:df:
b0:ae:f5:20:b7:88:38:2e:fe:ae:ae:17:7e:13:1d:50:6c:f3:
c6:12:eb:d8:93:51:c4:56:40:fe:9e:f6:10:66:8e:9d:9a:dc:
8f:36:12:73:e5:39:5c:82:fd:c3:81:b9:8c:50:24:db:d4:06:
5e:89:11:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:42:13 2025 by rpki-client