Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.mft
File: uksi0igKF9DVTGhsm0M_C1tYAk8.mft (raw, json)
Hash identifier: q45+BG1UHe09wyg0jAgwcJ3tdTy2DKeo8Tz1PSZtqxg=
Subject key identifier: 8E:B6:A2:98:80:D7:D5:65:2C:B4:4D:7D:D4:CD:26:ED:17:F0:EC:0B
Authority key identifier: BA:4B:22:D2:28:0A:17:D0:D5:4C:68:6C:9B:43:3F:0B:5B:58:02:4F
Certificate issuer: /CN=ba4b22d2280a17d0d54c686c9b433f0b5b58024f
Certificate serial: 01989DB959A01256D9D822D37E861B250B06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uksi0igKF9DVTGhsm0M_C1tYAk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.mft
Manifest number: 1514
Signing time: Tue 12 Aug 2025 10:00:26 +0000
Manifest this update: Tue 12 Aug 2025 10:00:26 +0000
Manifest next update: Wed 13 Aug 2025 10:00:26 +0000
Files and hashes: 1: uksi0igKF9DVTGhsm0M_C1tYAk8.crl (hash: gck5FxSWO3iZxr+nRh46CiYP2WP+Fj1jELQvunMGzAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uksi0igKF9DVTGhsm0M_C1tYAk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9d:b9:59:a0:12:56:d9:d8:22:d3:7e:86:1b:25:0b:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4b22d2280a17d0d54c686c9b433f0b5b58024f
Validity
Not Before: Aug 12 10:00:26 2025 GMT
Not After : Aug 13 10:00:26 2025 GMT
Subject: CN=8eb6a29880d7d5652cb44d7dd4cd26ed17f0ec0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:30:2c:f1:5d:ba:cd:c1:74:84:94:d2:55:9c:
73:60:a2:ea:18:40:d6:ec:3a:a4:80:50:30:4f:1a:
72:e7:df:c0:e7:5a:a9:6d:84:1e:ae:42:4f:96:09:
c4:f1:1a:4d:b0:a6:3a:48:09:e5:11:f3:c1:94:83:
aa:0a:81:b2:90:e8:ea:93:af:af:10:b5:bc:6f:05:
64:c1:f5:fa:bf:42:ae:1a:b0:b2:1f:67:33:b0:82:
af:83:09:43:e4:43:10:03:34:a9:33:37:f8:ce:6e:
a9:5c:10:eb:0f:00:08:5c:d5:a6:33:1b:e8:30:8e:
df:80:22:98:e5:1e:a4:ba:c7:8f:76:64:d1:54:bd:
85:36:ac:b4:81:35:90:67:cd:26:d5:83:06:db:00:
c0:3b:84:a0:a3:f4:70:4a:8b:0c:79:e4:92:55:c3:
f0:4b:a1:ff:47:b3:01:e2:46:a6:28:35:2d:4d:b8:
6f:51:1f:9e:b8:3d:81:bb:01:df:cc:15:95:3d:c3:
94:ef:12:24:ea:c6:c9:47:74:9d:20:ad:3b:d7:d2:
3c:5d:6b:d0:2f:4e:48:b1:e9:88:4f:39:2c:60:de:
b9:2c:92:91:24:36:9d:e3:f6:f7:c2:b6:23:6e:68:
cf:05:f3:bd:db:d8:b9:86:8c:db:fc:02:0d:b1:36:
c4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:B6:A2:98:80:D7:D5:65:2C:B4:4D:7D:D4:CD:26:ED:17:F0:EC:0B
X509v3 Authority Key Identifier:
keyid:BA:4B:22:D2:28:0A:17:D0:D5:4C:68:6C:9B:43:3F:0B:5B:58:02:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uksi0igKF9DVTGhsm0M_C1tYAk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:60:ac:2e:89:0d:07:3c:f9:3b:11:e8:79:83:87:88:18:cf:
65:a5:8e:4f:ba:f6:ea:b7:be:5d:69:b2:35:0e:06:cf:be:c2:
9b:7b:98:3c:fa:32:10:6b:d7:c1:a1:b4:3e:89:8b:d9:f1:4a:
90:88:23:a4:b7:ad:e7:e6:24:f6:61:ce:7f:3f:8a:5f:57:c8:
ec:58:79:9c:fb:5f:99:d1:5b:40:75:67:c6:82:3a:69:a6:82:
eb:93:8a:30:83:2a:fd:3d:3a:ed:0f:10:aa:d3:33:d7:7f:d3:
ac:81:70:82:a9:21:76:74:61:3b:af:d8:00:e9:7a:cb:03:4e:
1e:59:6c:fc:82:46:dc:9b:96:4b:fa:b7:c7:83:98:53:a7:29:
cb:01:b3:c5:af:d9:2d:1d:39:8d:8d:ab:33:bf:66:5e:c1:b8:
33:34:cf:4c:b0:4d:b5:3c:6c:60:ca:24:fb:e7:75:e5:6a:e9:
22:e5:ad:43:3c:a2:73:a9:48:a7:1d:e7:a4:45:fd:c7:52:f4:
ff:7f:1e:27:1d:79:74:f7:62:22:ef:a0:e5:d5:90:42:92:85:
ff:19:b1:af:49:a0:d3:3a:ec:08:6a:24:c5:f6:f6:77:b6:eb:
4d:7e:4c:7d:a1:3e:e6:f7:fc:85:50:7d:be:43:79:b0:cf:a5:
3d:f1:0c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 13:38:50 2025 by rpki-client