Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.mft
File: uksi0igKF9DVTGhsm0M_C1tYAk8.mft (raw, json)
Hash identifier: unOGUeaQzQxp+0aUeKuwI+HTBhwQRbgRyHrkUIZwJCA=
Subject key identifier: E4:7B:AB:A4:33:16:AC:C2:5B:E2:BE:96:78:EF:0B:5D:A8:81:02:56
Authority key identifier: BA:4B:22:D2:28:0A:17:D0:D5:4C:68:6C:9B:43:3F:0B:5B:58:02:4F
Certificate issuer: /CN=ba4b22d2280a17d0d54c686c9b433f0b5b58024f
Certificate serial: 01984AAF28208EC77868038EEDFBD2E27429
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uksi0igKF9DVTGhsm0M_C1tYAk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.mft
Manifest number: 14E9
Signing time: Sun 27 Jul 2025 07:00:49 +0000
Manifest this update: Sun 27 Jul 2025 07:00:49 +0000
Manifest next update: Mon 28 Jul 2025 07:00:49 +0000
Files and hashes: 1: uksi0igKF9DVTGhsm0M_C1tYAk8.crl (hash: fd5bmrubL1gEjr2jcU9436d2nk6d8sazdB5ou/6qfWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uksi0igKF9DVTGhsm0M_C1tYAk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:af:28:20:8e:c7:78:68:03:8e:ed:fb:d2:e2:74:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4b22d2280a17d0d54c686c9b433f0b5b58024f
Validity
Not Before: Jul 27 07:00:49 2025 GMT
Not After : Jul 28 07:00:49 2025 GMT
Subject: CN=e47baba43316acc25be2be9678ef0b5da8810256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:86:ed:bf:04:e9:ec:c9:b1:f4:ff:bd:22:0b:
79:37:13:7a:4b:39:51:5c:e2:d1:6a:6a:bb:5e:25:
0d:04:29:a5:ee:65:43:f4:16:16:47:87:a8:dd:ab:
e2:25:d5:42:7b:e5:e7:c4:85:89:59:1b:cd:96:04:
80:d0:47:75:7c:e1:a4:c9:24:54:1e:f3:39:c9:00:
94:61:78:46:74:c7:cc:e4:3c:3d:d1:3d:64:a5:c4:
4d:02:52:f2:44:71:ac:d1:26:55:aa:74:fe:f6:39:
f6:35:f3:69:dd:c9:8a:b8:ac:ff:61:5e:80:d6:24:
6d:44:f5:ed:37:2a:af:b8:0f:77:39:35:4d:dc:8c:
14:89:bf:bd:be:71:46:90:a5:32:b9:a6:55:e7:4d:
b7:b5:55:71:e3:40:69:80:91:46:39:7e:01:c0:cb:
cb:82:52:3e:f3:42:b6:42:da:30:81:8b:50:00:67:
ed:7b:06:53:56:f8:75:a0:f9:5d:5f:ca:e9:02:33:
92:80:09:1b:e2:b2:e8:33:20:2f:5e:db:e8:e4:e7:
09:fc:ab:50:3e:63:27:ad:c6:83:0e:3e:4e:b4:0f:
1c:7b:ed:4c:b0:8e:5e:3c:e1:98:bf:53:99:69:e3:
e1:22:c6:ca:76:44:b9:44:24:d1:e7:ee:27:54:e0:
a6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:7B:AB:A4:33:16:AC:C2:5B:E2:BE:96:78:EF:0B:5D:A8:81:02:56
X509v3 Authority Key Identifier:
keyid:BA:4B:22:D2:28:0A:17:D0:D5:4C:68:6C:9B:43:3F:0B:5B:58:02:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uksi0igKF9DVTGhsm0M_C1tYAk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:57:8c:f9:c7:15:6e:37:27:f3:55:27:57:9c:df:8f:33:49:
d4:bb:f1:3d:15:9d:00:56:81:13:e9:1f:70:07:c4:7b:00:33:
86:5e:b5:e4:b3:a8:1a:f2:06:2b:c0:cc:ba:4f:8e:85:09:5f:
54:bb:a8:b5:69:4f:37:2e:5a:f2:ee:58:8a:db:eb:98:7f:76:
42:e2:1f:e3:51:7e:a3:d4:b9:9e:27:e7:3e:db:a9:5a:d0:60:
ce:35:bd:cc:f1:7f:44:12:e9:2d:66:6f:f0:ed:c6:cc:39:06:
79:f7:b1:00:de:55:e9:96:97:4a:84:0a:79:f3:21:ef:6a:97:
27:34:58:ea:02:ca:67:b4:4f:2f:6e:82:fc:37:c3:6c:2b:f5:
ca:1e:19:ff:36:c6:2b:9b:3a:55:19:c7:f3:04:42:f5:cc:97:
e3:17:3a:bb:d5:54:ca:4c:04:12:6c:c1:98:ab:27:41:ab:d3:
f3:30:ff:19:83:16:46:04:d9:2b:b1:1f:45:e1:17:4a:8b:f6:
c1:4d:a3:52:1b:c7:4d:54:3f:be:83:d0:84:c3:da:c0:af:6a:
7c:14:d0:db:c5:3d:ab:93:dc:2a:a4:ac:42:d7:26:16:19:fa:
d5:75:df:cd:3d:a0:63:6a:cb:34:ee:1d:9d:e9:89:90:ec:91:
17:72:08:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:19:53 2025 by rpki-client