Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft
File: ukBDlux3brxmOzeQT1O_by22l94.mft (raw, json)
Hash identifier: nAuY3out0LaeTcgHerI+wRu9bO/HTQJxzgmMdOx1qtI=
Subject key identifier: 69:1E:9D:C2:5E:2F:44:F4:7C:55:BD:CC:C7:99:7B:F1:00:9D:B8:E5
Authority key identifier: BA:40:43:96:EC:77:6E:BC:66:3B:37:90:4F:53:BF:6F:2D:B6:97:DE
Certificate issuer: /CN=ba404396ec776ebc663b37904f53bf6f2db697de
Certificate serial: 019688498D8256F439A047E15209C7EAC610
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ukBDlux3brxmOzeQT1O_by22l94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft
Manifest number: 1429
Signing time: Wed 30 Apr 2025 20:00:43 +0000
Manifest this update: Wed 30 Apr 2025 20:00:43 +0000
Manifest next update: Thu 01 May 2025 20:00:43 +0000
Files and hashes: 1: Al3GYSjIWjO-oik-aQgGBmqTDw0.roa (hash: +Y3s+IGFA905SwB8NeoX4D8JKu+EPEFHDlQOQJhAZjY=)
2: ukBDlux3brxmOzeQT1O_by22l94.crl (hash: a00Np2w3t2/N6sZlvoT8NE3QpjvUvw/8ZElW+3MRNuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft
rsync://rpki.ripe.net/repository/DEFAULT/ukBDlux3brxmOzeQT1O_by22l94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:49:8d:82:56:f4:39:a0:47:e1:52:09:c7:ea:c6:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba404396ec776ebc663b37904f53bf6f2db697de
Validity
Not Before: Apr 30 20:00:43 2025 GMT
Not After : May 1 20:00:43 2025 GMT
Subject: CN=691e9dc25e2f44f47c55bdccc7997bf1009db8e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:35:d0:88:7f:3b:1f:eb:d5:be:a0:c5:5a:bc:
bb:da:12:ad:2f:13:49:32:ad:e6:17:4b:5f:79:79:
54:03:fb:9c:8e:81:f6:0f:b5:61:06:11:d4:65:e2:
fc:ec:a0:48:d7:7a:0c:fb:1d:39:b5:56:a3:05:4e:
28:87:58:f2:19:45:0b:71:85:96:97:f0:55:66:01:
eb:4e:a9:bb:ee:57:46:d6:d4:27:bb:1d:02:07:11:
5f:fe:9e:db:ce:33:95:d3:16:f7:1e:35:31:d0:f4:
be:cf:d9:cd:33:98:5b:56:62:d4:f2:3e:b4:6d:3b:
f2:ac:89:d0:98:68:ae:d7:77:16:67:c6:9f:9a:34:
e1:c5:c1:99:91:4b:72:69:fd:fa:d1:1e:50:81:90:
c5:58:d8:95:45:97:3f:25:ef:18:d0:8b:c0:f6:34:
2c:f2:e9:d1:58:9e:7b:5c:a0:9e:f2:4b:4c:05:ce:
94:06:13:24:1d:64:33:e4:b7:2b:30:bc:40:92:ed:
f4:e1:d8:3a:5c:b1:92:3e:a8:3a:4b:41:2e:c5:a6:
3c:22:2b:ef:91:94:09:d6:75:ef:c0:30:c7:1f:7b:
e9:7e:ae:24:fe:f7:c0:2b:b3:96:d1:80:2e:6e:4b:
09:ad:94:98:fc:8f:c6:8c:80:43:7c:8c:6b:1f:6f:
c9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:1E:9D:C2:5E:2F:44:F4:7C:55:BD:CC:C7:99:7B:F1:00:9D:B8:E5
X509v3 Authority Key Identifier:
keyid:BA:40:43:96:EC:77:6E:BC:66:3B:37:90:4F:53:BF:6F:2D:B6:97:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukBDlux3brxmOzeQT1O_by22l94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:5c:38:9e:7e:d5:fb:be:f5:25:7c:90:0c:9a:b4:d7:db:83:
7e:12:aa:53:90:77:84:cc:c9:3f:08:42:df:10:af:8d:c3:de:
a1:a3:75:67:0e:50:5d:23:6f:ab:a8:97:0d:d8:1d:df:f8:02:
00:bc:33:1b:05:09:d8:44:d2:1c:8f:22:71:c5:37:03:b5:11:
69:e4:6b:ba:99:36:c4:30:b9:f7:a9:a5:31:e7:c9:f3:e4:d3:
06:46:0a:da:af:24:41:87:31:df:c1:d8:b0:09:25:45:ae:4e:
37:70:8b:a8:a5:41:34:fd:d4:f5:fa:df:59:27:0e:45:b8:69:
ef:7b:cc:ff:cd:68:48:62:77:c5:38:f1:dc:a2:83:3a:93:ea:
53:54:9f:8b:4c:7e:82:15:06:49:5d:23:80:69:c0:6a:c8:8e:
f5:e0:55:3b:09:c2:e5:5c:37:b5:a7:4e:c3:d4:93:5a:af:d6:
c4:9e:49:1d:f2:a3:af:b8:27:e7:ed:1a:ca:ce:67:ae:ed:8a:
9e:03:ee:2f:d7:71:0d:88:06:f7:83:61:b3:66:2c:0e:c1:f8:
f0:9f:e4:77:b2:60:74:8b:42:39:7c:b3:ef:4e:90:36:fa:a3:
e2:ab:20:b2:c8:69:a6:ae:aa:0b:a8:0f:36:ad:ec:6c:9a:31:
c9:35:b0:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:22:43 2025 by rpki-client