Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft
File: ukBDlux3brxmOzeQT1O_by22l94.mft (raw, json)
Hash identifier: /QT3cOCZOzo/cncLHBFC+kwv7SuwSuVfwJ+r8ZL9JCQ=
Subject key identifier: 18:51:13:04:A1:D2:64:B0:2A:64:45:42:CC:BA:06:28:45:B3:49:CC
Authority key identifier: BA:40:43:96:EC:77:6E:BC:66:3B:37:90:4F:53:BF:6F:2D:B6:97:DE
Certificate issuer: /CN=ba404396ec776ebc663b37904f53bf6f2db697de
Certificate serial: 019A4DE1D05D906DA846A6E3E59742E74BA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ukBDlux3brxmOzeQT1O_by22l94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft
Manifest number: 161D
Signing time: Tue 04 Nov 2025 08:00:35 +0000
Manifest this update: Tue 04 Nov 2025 08:00:35 +0000
Manifest next update: Wed 05 Nov 2025 08:00:35 +0000
Files and hashes: 1: Al3GYSjIWjO-oik-aQgGBmqTDw0.roa (hash: +Y3s+IGFA905SwB8NeoX4D8JKu+EPEFHDlQOQJhAZjY=)
2: ukBDlux3brxmOzeQT1O_by22l94.crl (hash: +lqDQHbK5AIm6RhNXseTkFtjipOaSWgFe7eDsFHUzjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft
rsync://rpki.ripe.net/repository/DEFAULT/ukBDlux3brxmOzeQT1O_by22l94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:d0:5d:90:6d:a8:46:a6:e3:e5:97:42:e7:4b:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba404396ec776ebc663b37904f53bf6f2db697de
Validity
Not Before: Nov 4 08:00:35 2025 GMT
Not After : Nov 5 08:00:35 2025 GMT
Subject: CN=18511304a1d264b02a644542ccba062845b349cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a4:c3:51:63:6f:67:7f:3c:67:0e:16:28:62:
cc:b8:88:c5:94:4f:e0:d5:df:1e:e4:07:2e:ee:50:
9c:62:32:0a:58:e7:12:01:6e:7f:04:71:ee:a6:1d:
05:d9:a0:9a:f2:42:a1:ca:95:b0:7d:d4:8f:b6:e7:
32:d8:e7:6d:2b:60:a7:c4:3c:2c:7e:f6:b9:c0:ad:
7c:2e:af:ef:16:0a:6f:7c:1d:e8:a1:34:2c:63:40:
f6:8d:09:a3:6b:fb:9c:cd:0c:65:a0:f8:c9:c8:1a:
43:0f:c3:cb:d5:8c:96:69:f4:88:12:70:21:4a:7f:
3f:08:0f:cb:1f:c7:da:9f:31:ec:c2:59:6a:d6:4d:
17:e8:6f:93:bf:37:d4:21:9e:25:f8:5f:09:45:26:
a1:cd:32:76:89:ac:6d:ef:dd:82:a8:46:07:09:24:
e6:c8:6a:08:6e:5a:be:d2:51:8c:18:48:6b:f5:90:
ae:f8:19:c6:6e:9e:9d:c5:16:11:b8:05:f3:e5:2f:
43:e0:33:02:d0:c8:21:bf:eb:b4:5c:a4:db:48:51:
35:2e:c1:f6:fc:52:2c:9d:cd:39:b6:a6:ad:9a:54:
ef:ae:85:f2:7b:80:84:61:90:4a:c8:02:2b:36:9b:
e1:63:78:b4:13:7a:2e:a1:a4:1b:47:24:c3:14:6b:
18:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:51:13:04:A1:D2:64:B0:2A:64:45:42:CC:BA:06:28:45:B3:49:CC
X509v3 Authority Key Identifier:
keyid:BA:40:43:96:EC:77:6E:BC:66:3B:37:90:4F:53:BF:6F:2D:B6:97:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukBDlux3brxmOzeQT1O_by22l94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:fb:27:25:17:83:72:41:04:3b:7c:a1:01:b4:ba:86:8c:f2:
d4:58:80:4c:4d:8f:e2:5a:8e:0e:93:c6:51:71:22:bf:75:eb:
84:f9:68:83:b4:a7:71:7c:e0:4a:56:5f:ba:56:a7:d1:8c:83:
73:26:78:12:6c:de:15:d9:0f:58:97:54:12:73:f3:2c:eb:bb:
60:fa:02:1d:1a:ea:b5:74:2a:a9:2e:bf:0d:77:ac:d8:1d:44:
8d:f1:ec:4d:18:ab:84:f0:de:5d:1e:a8:3b:47:04:2b:80:b5:
7d:c6:4d:8f:7f:5b:ce:e7:58:b3:bf:e6:2d:dd:79:55:c9:93:
38:73:a7:e9:d6:10:f5:e5:95:62:f9:fc:00:f4:cd:43:47:4e:
c8:4f:83:78:f5:5f:49:2d:86:28:27:1a:ac:a2:89:c7:72:42:
bd:6d:ec:40:a8:c9:36:7d:cc:3a:c6:96:1d:17:44:2d:dc:7a:
a7:89:31:e4:9b:57:a2:73:44:bc:04:12:ac:10:7e:5c:63:3d:
51:61:cc:6e:b8:db:c7:9b:b3:b7:09:ec:52:34:be:8d:3f:f5:
19:46:72:ef:01:ad:19:36:cb:09:5e:cc:79:c2:d2:3e:14:07:
7a:10:1b:95:1f:6b:e6:b3:78:7b:71:89:f0:f1:3c:54:20:76:
94:0b:b5:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4dBdkG2oRqbj5ZdC50umMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNDA0Mzk2ZWM3NzZlYmM2NjNiMzc5MDRmNTNiZjZmMmRi
Njk3ZGUwHhcNMjUxMTA0MDgwMDM1WhcNMjUxMTA1MDgwMDM1WjAzMTEwLwYDVQQD
EygxODUxMTMwNGExZDI2NGIwMmE2NDQ1NDJjY2JhMDYyODQ1YjM0OWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaTDUWNvZ388Zw4WKGLMuIjFlE/g
1d8e5Acu7lCcYjIKWOcSAW5/BHHuph0F2aCa8kKhypWwfdSPtucy2OdtK2CnxDws
fva5wK18Lq/vFgpvfB3ooTQsY0D2jQmja/uczQxloPjJyBpDD8PL1YyWafSIEnAh
Sn8/CA/LH8fanzHswllq1k0X6G+TvzfUIZ4l+F8JRSahzTJ2iaxt792CqEYHCSTm
yGoIblq+0lGMGEhr9ZCu+BnGbp6dxRYRuAXz5S9D4DMC0Mghv+u0XKTbSFE1LsH2
/FIsnc05tqatmlTvroXye4CEYZBKyAIrNpvhY3i0E3ouoaQbRyTDFGsYVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBhREwSh0mSwKmRFQsy6BihFs0nMMB8GA1UdIwQY
MBaAFLpAQ5bsd268Zjs3kE9Tv28ttpfeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWtCRGx1eDNicnhtT3plUVQxT19ieTIybDk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9mNDVmNjAtZjRlZS00MmFkLWI2YWIt
NzM1YTM5OWYwMTAyLzEvdWtCRGx1eDNicnhtT3plUVQxT19ieTIybDk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9mNDVmNjAtZjRlZS00MmFkLWI2YWItNzM1YTM5OWYwMTAy
LzEvdWtCRGx1eDNicnhtT3plUVQxT19ieTIybDk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnPsnJReD
ckEEO3yhAbS6hozy1FiATE2P4lqODpPGUXEiv3XrhPlog7SncXzgSlZfulan0YyD
cyZ4EmzeFdkPWJdUEnPzLOu7YPoCHRrqtXQqqS6/DXes2B1EjfHsTRirhPDeXR6o
O0cEK4C1fcZNj39bzudYs7/mLd15VcmTOHOn6dYQ9eWVYvn8APTNQ0dOyE+DePVf
SS2GKCcarKKJx3JCvW3sQKjJNn3MOsaWHRdELdx6p4kx5JtXonNEvAQSrBB+XGM9
UWHMbrjbx5uztwnsUjS+jT/1GUZy7wGtGTbLCV7MecLSPhQHehAblR9r5rN4e3GJ
8PE8VCB2lAu1Og==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:17:39 2025 by rpki-client