Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
File: ukxoXvpqLBBFY38CejJcCux5wBU.mft (raw, json)
Hash identifier: SVu9bdpHAc0EbiTcfitb3QP0MK21VVcY5x+Za8nPMjI=
Subject key identifier: 8C:51:7F:56:D4:C2:46:5B:A0:66:3C:BF:44:73:7A:1D:CF:7D:C8:94
Authority key identifier: BA:4C:68:5E:FA:6A:2C:10:45:63:7F:02:7A:32:5C:0A:EC:79:C0:15
Certificate issuer: /CN=ba4c685efa6a2c1045637f027a325c0aec79c015
Certificate serial: 019896A62F78DB7A8B4E1308E1CFDAAD4B83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
Manifest number: 09EF
Signing time: Mon 11 Aug 2025 01:02:10 +0000
Manifest this update: Mon 11 Aug 2025 01:02:10 +0000
Manifest next update: Tue 12 Aug 2025 01:02:10 +0000
Files and hashes: 1: VJzfvUbstsweL94z-ivJL9s3ZVk.roa (hash: HgLrKuozmz+yIcpW2tKbtdhcaLEc8ycsnDPCev84zDI=)
2: ukxoXvpqLBBFY38CejJcCux5wBU.crl (hash: qgepRrJTfJDUOQYrL77Mhh1La1uCv1yLKoVTtAY8q4c=)
3: ztUZv3t98zDrlPZTo-laONZjQE0.roa (hash: PyD/IDN5pwT/Z2dKrNt4DPnNuO7P4KGHdjRKj7cSR1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a6:2f:78:db:7a:8b:4e:13:08:e1:cf:da:ad:4b:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4c685efa6a2c1045637f027a325c0aec79c015
Validity
Not Before: Aug 11 01:02:10 2025 GMT
Not After : Aug 12 01:02:10 2025 GMT
Subject: CN=8c517f56d4c2465ba0663cbf44737a1dcf7dc894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:75:0d:e0:11:3a:75:1a:d9:d4:79:e3:06:60:
9c:59:1d:01:b9:6f:ba:c1:1a:f4:c6:4d:54:61:90:
5a:b6:f5:89:86:db:3a:66:8d:4c:dc:7c:65:9b:b5:
1d:de:8e:34:df:c9:d6:1e:8b:3e:e1:9e:40:ec:bf:
f1:90:85:7f:c9:8b:50:af:d5:ff:8b:71:8a:f5:c3:
3d:fb:9b:7f:4b:ec:bb:13:28:0f:52:a4:da:c4:f5:
e4:6c:e1:29:4a:bf:c4:a7:4e:4c:a1:e1:07:c2:0c:
dd:41:70:b3:48:1a:aa:fe:b1:b4:c2:87:95:05:43:
a4:18:d0:7e:62:e6:15:ee:de:92:b2:7f:c0:a0:79:
f0:7d:5c:6d:81:4a:0b:17:bc:be:eb:9b:f3:fe:17:
ae:46:1b:b5:12:24:ab:26:45:71:c2:43:2e:a6:92:
97:01:00:d7:7f:5f:88:bf:5f:92:de:e9:09:d8:4c:
53:9c:66:9f:cf:34:ab:36:13:34:fd:ec:47:fa:3f:
dc:77:38:8e:f7:85:b1:20:d6:94:64:01:f5:82:8b:
8a:14:08:ec:e2:b2:66:db:4d:a1:be:50:2c:f3:63:
7e:fc:27:44:be:18:33:8e:fa:ef:72:c5:47:7a:65:
f5:0e:44:4c:75:87:0c:d2:0e:64:dd:dc:7e:f2:70:
23:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:51:7F:56:D4:C2:46:5B:A0:66:3C:BF:44:73:7A:1D:CF:7D:C8:94
X509v3 Authority Key Identifier:
keyid:BA:4C:68:5E:FA:6A:2C:10:45:63:7F:02:7A:32:5C:0A:EC:79:C0:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:84:24:a3:c1:ef:03:d4:2d:dc:a1:0e:26:ba:e1:4b:75:9c:
19:ba:c2:38:c4:65:d8:99:1c:5f:ed:0e:79:3c:94:ed:b3:b7:
63:6f:19:3b:ab:b9:76:37:3d:dc:8a:94:a5:88:66:53:c0:3b:
b8:da:a7:ad:58:87:bf:e8:5e:b9:c8:dc:da:9b:fc:b8:f9:c0:
8f:c1:68:d4:0e:cc:e7:95:aa:23:50:11:18:b9:6d:95:91:b2:
20:32:cb:26:67:cb:7f:dc:ed:d4:5a:40:71:68:0f:9e:90:bc:
ce:7b:ba:29:17:a2:fb:bb:bd:73:e7:7e:26:73:f1:41:c4:c2:
9b:f8:d6:8d:58:9f:f3:b7:3f:f1:1c:cd:9b:a2:be:fa:e8:96:
c1:91:8c:49:30:fa:6f:49:0d:22:a4:25:02:f0:f4:78:23:80:
16:68:03:1e:e7:58:00:ff:31:37:31:f1:15:d8:2c:3e:9d:2f:
99:e3:f2:66:21:91:1f:27:45:4f:2c:14:3f:cf:a9:44:c4:f9:
f5:32:9d:08:5f:62:4a:3f:26:5c:8e:96:49:af:be:02:19:c6:
29:49:32:b9:e8:5c:cc:7f:e9:88:19:52:02:d3:03:41:9b:0c:
9c:a7:6a:4b:19:32:40:5a:bd:96:4a:99:a0:4f:71:1f:db:a6:
ff:1d:e1:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:12:53 2025 by rpki-client