Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
File: UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft (raw, json)
Hash identifier: QanqrOlBENndDUo0mI9eQzzFKl+Mz2Qj3JDgrdn6sg8=
Subject key identifier: BD:3D:F3:21:7C:58:9F:69:E7:31:07:5B:45:16:C0:79:02:77:17:D9
Authority key identifier: 50:A0:6A:45:3F:CD:5F:26:FA:F4:82:2C:4B:45:90:98:DC:AF:F0:39
Certificate issuer: /CN=50a06a453fcd5f26faf4822c4b459098dcaff039
Certificate serial: 01987DC119D0419EC3555C7FE6EE596FA8E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
Manifest number: 161E
Signing time: Wed 06 Aug 2025 05:01:03 +0000
Manifest this update: Wed 06 Aug 2025 05:01:03 +0000
Manifest next update: Thu 07 Aug 2025 05:01:03 +0000
Files and hashes: 1: UKBqRT_NXyb69IIsS0WQmNyv8Dk.crl (hash: YVQmkUPc4xIqW+6+8ODL5ieVfDxoHwmvtf4Nr1m3cEk=)
2: XmJ8vYGbQYVnd8y-h4wRzi3J_pE.roa (hash: exnN1l7i5NuQ19i+bMh7iG0NXDBSnKZN8vpjyWS2vRc=)
3: XrhvNCYQn9v_ZtENdKVZ3VLduJc.roa (hash: aN/R4IVeQqrz28tH9akl71ra6TmpBihdrIjUuL23MYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:c1:19:d0:41:9e:c3:55:5c:7f:e6:ee:59:6f:a8:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50a06a453fcd5f26faf4822c4b459098dcaff039
Validity
Not Before: Aug 6 05:01:03 2025 GMT
Not After : Aug 7 05:01:03 2025 GMT
Subject: CN=bd3df3217c589f69e731075b4516c079027717d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:47:af:4d:c6:65:c9:36:93:02:8d:60:70:21:
b3:e7:8a:c1:89:2d:7e:84:51:cc:8d:bd:77:07:1a:
e3:7d:33:73:7e:12:9d:35:8f:f2:3e:ab:07:d7:0e:
71:6a:48:cf:85:a0:83:0e:59:5c:db:ab:e2:20:b4:
84:e0:4c:f3:c8:85:ba:c2:1e:ba:1c:4d:f2:77:55:
13:1a:ae:20:80:cd:1a:53:6a:ad:e8:90:f7:b2:a3:
59:ef:6c:fa:10:c9:c7:1f:4d:8e:0c:8a:c9:13:3e:
40:c0:01:98:b6:09:35:10:4f:63:94:2d:52:fc:74:
2f:2f:d8:a5:b0:13:55:e7:42:df:2b:b0:1b:65:55:
c4:d7:2c:ee:64:89:f6:23:8c:1c:39:16:d9:14:bf:
05:59:80:45:4b:cc:9d:59:e1:a0:35:a7:c5:cf:5e:
f6:3e:ba:c5:f7:fb:0a:37:a7:7d:22:b0:f7:27:b0:
ab:12:8f:05:19:e8:6d:2d:67:ce:04:bd:c4:dc:5c:
a6:3c:d6:90:e3:b6:0d:e8:f4:0d:7e:b8:26:a5:01:
37:12:1c:ac:72:66:57:f7:1c:7a:35:87:85:fd:b8:
d8:8c:35:be:70:ae:b3:86:24:1c:97:2a:2d:41:c8:
97:0f:b4:7d:92:c0:17:d6:d8:f8:46:38:25:79:1c:
fd:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:3D:F3:21:7C:58:9F:69:E7:31:07:5B:45:16:C0:79:02:77:17:D9
X509v3 Authority Key Identifier:
keyid:50:A0:6A:45:3F:CD:5F:26:FA:F4:82:2C:4B:45:90:98:DC:AF:F0:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:a9:7c:3d:df:67:80:3f:b0:d2:b1:69:16:45:1b:18:79:14:
72:ba:f1:1c:50:67:a7:1e:51:ea:93:3e:da:6e:ed:3b:ed:ca:
37:5d:85:88:a8:e2:18:21:8f:f4:f6:6e:2a:72:5c:9f:4f:65:
73:dc:82:2d:1c:67:5f:19:f0:f9:7e:a9:b5:0c:6f:a1:05:b3:
32:c4:2e:e1:46:99:d8:9e:4c:66:06:11:3f:f5:9c:36:3b:9e:
e6:c3:f2:3e:c1:2e:d9:c0:28:9c:81:3b:f1:df:9b:e3:3c:66:
9a:9f:55:81:d5:83:51:0b:5a:15:6c:e4:90:61:0c:84:14:cb:
cd:85:5a:ba:7b:51:d2:b2:fe:32:0d:3d:9d:b5:a6:ba:23:91:
ec:1d:07:cf:8c:06:bd:48:92:91:3d:ef:02:e1:60:91:42:76:
dd:fa:f0:54:d9:f1:2f:53:3e:2c:5c:35:d5:2f:bc:d3:83:2a:
55:a7:be:09:29:dc:a9:66:cc:f3:b3:a0:90:96:38:27:79:ac:
d8:fe:8c:d2:0b:a6:fe:d0:98:8c:f0:1c:a1:b7:52:83:4a:94:
5c:d5:6f:70:96:40:e8:b4:da:5f:1d:53:3c:aa:b5:2c:c0:b0:
5b:89:90:3b:74:2a:11:e0:f0:8f:e0:e2:11:1d:ed:40:63:de:
76:59:80:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:23:46 2025 by rpki-client