Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e8c264-be46-46f1-928e-48c10a978bd0/1/ukQ9hkNVeFdrQjFVWg7SE_UivvM.mft
File: ukQ9hkNVeFdrQjFVWg7SE_UivvM.mft (raw, json)
Hash identifier: ixwjBDiteQDwqgwPz13i2N6ha+zFxWtEVrAs2RvKAn0=
Subject key identifier: 11:36:FC:AE:00:D6:42:D7:2A:44:38:DB:7F:F7:0B:BF:AE:91:D4:D5
Authority key identifier: BA:44:3D:86:43:55:78:57:6B:42:31:55:5A:0E:D2:13:F5:22:BE:F3
Certificate issuer: /CN=ba443d86435578576b4231555a0ed213f522bef3
Certificate serial: 01984AAE971B315E621B5280E8F13728B783
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ukQ9hkNVeFdrQjFVWg7SE_UivvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e8c264-be46-46f1-928e-48c10a978bd0/1/ukQ9hkNVeFdrQjFVWg7SE_UivvM.mft
Manifest number: 08BD
Signing time: Sun 27 Jul 2025 07:00:12 +0000
Manifest this update: Sun 27 Jul 2025 07:00:12 +0000
Manifest next update: Mon 28 Jul 2025 07:00:12 +0000
Files and hashes: 1: pJcYXodpDPmMRbZLo0Tatq1ioSM.roa (hash: reA4i3iUw1X1kJD9p6sG3wX62hmlDQuF+yso9k92RQ4=)
2: ukQ9hkNVeFdrQjFVWg7SE_UivvM.crl (hash: 63BwS/3pIvs7JVd9I41NVtoNjfBcYGMnaFBlxjTZYcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/e8c264-be46-46f1-928e-48c10a978bd0/1/ukQ9hkNVeFdrQjFVWg7SE_UivvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/e8c264-be46-46f1-928e-48c10a978bd0/1/ukQ9hkNVeFdrQjFVWg7SE_UivvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ukQ9hkNVeFdrQjFVWg7SE_UivvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:97:1b:31:5e:62:1b:52:80:e8:f1:37:28:b7:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba443d86435578576b4231555a0ed213f522bef3
Validity
Not Before: Jul 27 07:00:12 2025 GMT
Not After : Jul 28 07:00:12 2025 GMT
Subject: CN=1136fcae00d642d72a4438db7ff70bbfae91d4d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:88:71:01:ab:1c:8b:d0:dc:c6:31:55:6c:88:
69:b5:05:c4:58:4a:a4:12:8e:2f:83:27:ab:d6:0a:
d7:d8:6a:22:b8:0a:8f:bf:47:9b:af:3f:06:c3:80:
51:a5:f4:3a:d8:75:01:da:98:9a:7f:40:e9:78:ae:
13:05:b8:97:ed:39:f9:58:b9:a7:10:a9:2d:22:4c:
7a:b7:7b:f1:8c:f8:85:ba:57:67:45:42:91:6a:3e:
f4:54:0e:e6:ae:cf:ff:10:be:9f:06:fe:8b:b0:df:
1d:99:bb:73:a9:5a:ad:2b:7f:80:c6:45:ec:82:e4:
6a:f8:79:29:f2:d6:5e:32:24:e1:d1:30:e3:ad:67:
a1:7d:03:c3:c5:ec:3e:e9:3b:c0:81:e0:d5:b5:6e:
d1:43:c0:8f:4a:88:1a:ea:4e:53:4f:69:63:de:83:
14:83:32:df:3c:1a:f7:03:1d:21:9c:7d:ad:a0:b4:
2b:6d:14:06:d7:dc:0e:39:b5:6c:a1:0a:63:2a:03:
a8:d4:34:9a:f7:e4:f2:fe:76:7f:a5:b1:86:d8:d9:
3b:03:85:e2:f3:88:7d:67:e9:6d:7f:c7:10:31:da:
0d:43:64:1d:56:af:30:bd:86:c7:28:08:d8:35:eb:
93:91:4d:5a:c2:10:c2:c4:f1:02:e3:3c:c2:51:5d:
45:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:36:FC:AE:00:D6:42:D7:2A:44:38:DB:7F:F7:0B:BF:AE:91:D4:D5
X509v3 Authority Key Identifier:
keyid:BA:44:3D:86:43:55:78:57:6B:42:31:55:5A:0E:D2:13:F5:22:BE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukQ9hkNVeFdrQjFVWg7SE_UivvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e8c264-be46-46f1-928e-48c10a978bd0/1/ukQ9hkNVeFdrQjFVWg7SE_UivvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e8c264-be46-46f1-928e-48c10a978bd0/1/ukQ9hkNVeFdrQjFVWg7SE_UivvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:73:4f:ca:91:01:ec:99:4f:c3:26:dc:bd:f7:8a:65:49:8f:
94:0f:8f:c6:b3:b3:64:e0:ba:5e:e1:47:40:8a:05:89:b7:fa:
e2:da:2c:a4:c0:3c:58:a9:c5:15:f9:02:b5:05:c3:40:76:7d:
49:4e:a1:5b:5c:b9:d4:4d:04:d0:bc:37:dd:26:92:b1:88:f6:
a0:32:8a:67:05:76:18:ca:2e:50:02:f8:1f:df:e4:65:2b:cf:
78:16:c9:a8:c8:e6:83:86:a5:00:9e:c9:26:fc:3a:71:bb:6f:
40:92:43:cb:fb:83:92:84:35:d1:53:fd:88:38:42:c2:6f:66:
a2:7a:9d:e0:98:1f:15:54:ce:d7:dd:d0:fc:80:99:62:09:c8:
67:34:4e:91:90:9b:d8:a1:b5:5d:75:32:d7:00:e0:db:6c:6e:
4f:95:c8:77:be:bb:34:15:cd:0c:cc:52:cd:a5:b1:ed:7e:80:
aa:a5:ff:db:21:2c:54:c8:d9:60:13:1d:f7:78:76:6c:6b:a4:
b1:fc:44:90:5e:9d:e7:7c:62:4c:92:82:f8:68:2e:89:4d:da:
92:c4:73:4e:80:4a:e0:64:d0:ae:55:10:07:0f:be:68:77:eb:
81:86:a7:d7:2f:ca:49:b3:62:f7:e4:42:4c:ba:93:4b:19:6b:
57:26:39:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:49:37 2025 by rpki-client