Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
File: ukxoXvpqLBBFY38CejJcCux5wBU.mft (raw, json)
Hash identifier: Pt/ola+iUpic9ygCD5cZQIuiP+8be+wH+GQg9Gb7xFU=
Subject key identifier: 67:A1:7E:BF:9E:62:ED:3D:5B:08:AE:73:8D:D9:F0:64:6A:E6:32:73
Authority key identifier: BA:4C:68:5E:FA:6A:2C:10:45:63:7F:02:7A:32:5C:0A:EC:79:C0:15
Certificate issuer: /CN=ba4c685efa6a2c1045637f027a325c0aec79c015
Certificate serial: 0197696194A54100DCDBE94C7FF6A7D14A62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
Manifest number: 0953
Signing time: Fri 13 Jun 2025 13:01:32 +0000
Manifest this update: Fri 13 Jun 2025 13:01:32 +0000
Manifest next update: Sat 14 Jun 2025 13:01:32 +0000
Files and hashes: 1: VJzfvUbstsweL94z-ivJL9s3ZVk.roa (hash: HgLrKuozmz+yIcpW2tKbtdhcaLEc8ycsnDPCev84zDI=)
2: ukxoXvpqLBBFY38CejJcCux5wBU.crl (hash: XZ9rUBGFhClDIrA5otzuWNOnJxHtTuThNuPCEdO2iqQ=)
3: ztUZv3t98zDrlPZTo-laONZjQE0.roa (hash: PyD/IDN5pwT/Z2dKrNt4DPnNuO7P4KGHdjRKj7cSR1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:94:a5:41:00:dc:db:e9:4c:7f:f6:a7:d1:4a:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4c685efa6a2c1045637f027a325c0aec79c015
Validity
Not Before: Jun 13 13:01:32 2025 GMT
Not After : Jun 14 13:01:32 2025 GMT
Subject: CN=67a17ebf9e62ed3d5b08ae738dd9f0646ae63273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:49:97:85:ac:8d:4e:ff:1a:3a:7c:43:bb:be:
56:43:8a:cd:fe:69:63:27:ef:8c:2a:68:22:42:5f:
95:2f:b8:ef:4f:a1:72:b8:f7:5e:89:4f:ae:ba:29:
72:c3:b8:e6:83:70:98:61:ef:e5:e8:dd:ba:d5:63:
b5:2d:46:a1:da:3a:56:78:27:04:67:2d:bb:49:bc:
ef:75:a6:ff:a5:34:b3:d6:0d:f2:1c:9f:46:39:53:
1b:72:8c:a5:f7:11:6c:54:8f:17:19:12:2e:b0:73:
43:b9:9e:19:83:9c:82:17:80:db:10:bd:dc:d7:9c:
5e:6d:f9:18:6f:b0:0b:e6:a7:18:89:c8:db:a7:33:
38:63:27:71:fe:00:d8:c2:f7:de:3c:ea:c0:91:dc:
f9:13:e1:32:48:97:b4:56:8e:64:79:61:f7:cf:13:
90:07:2b:b5:7e:02:f4:f7:1a:af:7f:e3:66:a9:9a:
dd:fb:ac:63:ce:e1:59:42:99:c6:02:5b:db:97:c0:
3b:a5:18:2a:19:cd:8d:c8:b3:22:f6:7f:3b:e4:b2:
f5:ab:15:2a:cb:8f:2e:4b:d1:cf:6c:a8:93:cb:26:
9d:98:4a:ab:a0:eb:cf:83:6c:0c:73:d1:53:64:52:
d5:25:0b:08:39:ac:4f:ad:3f:04:03:46:2d:45:ed:
65:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A1:7E:BF:9E:62:ED:3D:5B:08:AE:73:8D:D9:F0:64:6A:E6:32:73
X509v3 Authority Key Identifier:
keyid:BA:4C:68:5E:FA:6A:2C:10:45:63:7F:02:7A:32:5C:0A:EC:79:C0:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:61:1f:05:be:dd:a4:9d:e0:ca:00:3e:13:a3:6d:fc:ec:2c:
54:19:40:46:9e:3d:95:1e:5f:bb:33:51:ac:fa:88:70:c8:a2:
a5:7c:20:9d:5a:fc:87:82:a1:39:e2:35:59:c1:a6:cc:9c:f9:
65:c0:e4:34:3b:13:ff:42:ef:1a:b3:3e:d2:63:d2:94:34:8c:
6f:01:cf:a8:78:bf:7b:12:a5:47:06:88:ae:0d:10:11:23:cc:
67:2e:e7:fc:6f:ff:62:7f:b8:f5:f8:d0:73:39:97:4a:aa:c7:
59:42:a2:d9:e8:fd:d7:f5:3d:50:fd:78:c7:24:5a:31:e9:c5:
bf:79:d9:6b:23:ef:e2:ba:cf:7a:3f:63:ff:71:12:d1:64:40:
eb:58:70:a8:5a:de:14:08:06:bc:69:ca:e4:41:71:da:5b:60:
3c:db:4d:19:5a:a0:18:aa:e8:56:1f:2f:15:2c:99:95:f5:32:
4f:9b:29:be:f1:2e:c2:fc:20:9f:78:71:fe:f4:34:46:ee:aa:
3f:d8:89:38:43:0e:ca:9a:21:d5:4e:55:7e:8b:48:bd:c6:c0:
84:c4:af:fd:1b:34:f0:a8:28:da:66:be:3d:1e:a5:a6:f9:32:
5d:8a:3f:1e:33:f4:80:1f:65:67:35:37:7d:ef:e8:79:3e:62:
d7:c9:79:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 20:03:21 2025 by rpki-client