Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.mft
File: uksi0igKF9DVTGhsm0M_C1tYAk8.mft (raw, json)
Hash identifier: y45TkYbYDtKeUJcjHy6g2kr2tboNhseiOFap+ELZkyg=
Subject key identifier: 1F:7B:B7:2C:4C:91:AE:C9:13:6F:8B:2A:D2:C1:E9:08:9B:E7:39:8F
Authority key identifier: BA:4B:22:D2:28:0A:17:D0:D5:4C:68:6C:9B:43:3F:0B:5B:58:02:4F
Certificate issuer: /CN=ba4b22d2280a17d0d54c686c9b433f0b5b58024f
Certificate serial: 019A541A7854CCC4A2A7384D4F6C5110A7C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uksi0igKF9DVTGhsm0M_C1tYAk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.mft
Manifest number: 15F7
Signing time: Wed 05 Nov 2025 13:00:12 +0000
Manifest this update: Wed 05 Nov 2025 13:00:12 +0000
Manifest next update: Thu 06 Nov 2025 13:00:12 +0000
Files and hashes: 1: uksi0igKF9DVTGhsm0M_C1tYAk8.crl (hash: R7l0giz9pHv3NJtcd2HYGtl5cPpnaJCA/+4mDH+R05w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uksi0igKF9DVTGhsm0M_C1tYAk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:1a:78:54:cc:c4:a2:a7:38:4d:4f:6c:51:10:a7:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4b22d2280a17d0d54c686c9b433f0b5b58024f
Validity
Not Before: Nov 5 13:00:12 2025 GMT
Not After : Nov 6 13:00:12 2025 GMT
Subject: CN=1f7bb72c4c91aec9136f8b2ad2c1e9089be7398f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:53:f8:68:52:c5:01:0a:49:08:b8:6f:0c:84:
ff:b1:ce:86:26:2e:55:3f:cd:6b:bc:2a:bf:90:88:
2e:66:19:27:2c:3a:4a:09:99:c0:46:a4:62:a1:ef:
2f:27:d6:3e:39:35:66:7e:9a:2c:d3:c6:69:3b:5d:
39:52:f9:e1:fe:53:f6:93:71:d0:49:54:ae:c9:16:
f1:80:d1:b8:96:88:3a:5d:d9:90:24:2c:d2:05:3f:
47:01:37:36:4b:dc:81:d8:64:cb:a5:bf:a2:65:f1:
f0:d8:69:5a:44:c1:32:f6:1c:e8:f4:47:30:28:77:
84:6d:48:0b:df:9a:61:73:cd:0c:00:af:8d:bd:e9:
88:61:56:81:47:37:d5:fc:67:b9:2d:8b:3b:19:a8:
4b:6b:e0:ed:28:98:5c:ee:1a:a0:33:46:4b:68:67:
18:6a:8e:9f:66:e3:ab:ad:2d:3c:7c:8b:e3:9a:16:
6e:a0:b5:cd:22:76:02:36:93:03:e3:c7:9e:48:fc:
a6:72:26:d9:34:96:da:4c:43:b9:eb:0a:65:94:2b:
17:e3:31:f3:f5:53:f2:20:cf:e1:a9:f4:e7:92:c5:
2d:bc:c2:34:a2:1d:0f:72:d1:d0:4c:2e:7e:c8:95:
f7:00:a5:a7:99:78:9e:f5:34:04:c4:23:1b:7b:15:
47:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:7B:B7:2C:4C:91:AE:C9:13:6F:8B:2A:D2:C1:E9:08:9B:E7:39:8F
X509v3 Authority Key Identifier:
keyid:BA:4B:22:D2:28:0A:17:D0:D5:4C:68:6C:9B:43:3F:0B:5B:58:02:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uksi0igKF9DVTGhsm0M_C1tYAk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:56:09:b7:35:03:e2:e2:3e:aa:4c:d3:d7:11:ff:f9:55:a1:
29:69:da:c9:0a:7a:b6:5a:d8:63:e9:15:2f:0d:d8:f9:26:2d:
1e:c3:56:84:55:98:fe:27:41:9f:6d:a1:f3:c4:9b:ff:17:0e:
78:6b:f5:6e:96:3a:f9:fa:cb:d4:e9:8a:29:c5:13:de:64:ae:
72:cb:2a:15:90:4b:b5:73:a4:a3:56:5a:5b:ce:cf:dd:29:3e:
08:fe:8d:60:04:3a:1e:a7:d6:07:50:02:66:a6:c0:20:35:65:
f6:6b:49:15:c8:9d:19:87:f9:8c:e4:af:29:cf:e1:0c:48:a7:
18:75:5f:4c:bc:86:db:5e:c1:dd:ce:4e:e9:05:5c:2d:f9:1e:
ef:77:92:bd:ea:aa:2d:31:78:47:f5:4a:ca:f1:b0:64:7b:21:
e9:d4:fb:65:57:bc:9b:2d:3e:61:a0:3e:67:da:ec:6a:5a:61:
e9:d4:bc:d9:b9:4e:c1:e0:8c:65:74:4b:29:52:d8:a3:0d:96:
94:5b:43:66:91:47:a1:ee:5b:97:f2:d1:9f:7f:5f:f0:74:51:
5b:90:97:60:57:29:47:1d:b7:5f:96:e9:a0:75:db:9f:a8:e8:
c5:e3:24:ff:3e:3d:71:42:5c:21:ca:43:09:32:31:70:af:60:
28:a9:2c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:52:20 2025 by rpki-client