Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
File: ukxoXvpqLBBFY38CejJcCux5wBU.mft (raw, json)
Hash identifier: lEkNLX4nUM49OZqiKOP1A/SqiA6ioUQmre2k/+iFbLw=
Subject key identifier: 92:04:0F:B5:9E:C1:0A:F3:93:29:9F:80:25:63:EA:F1:06:48:DB:7D
Authority key identifier: BA:4C:68:5E:FA:6A:2C:10:45:63:7F:02:7A:32:5C:0A:EC:79:C0:15
Certificate issuer: /CN=ba4c685efa6a2c1045637f027a325c0aec79c015
Certificate serial: 01984964F09BDCAA75661B59FF643A3C9E3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
Manifest number: 09C7
Signing time: Sun 27 Jul 2025 01:00:08 +0000
Manifest this update: Sun 27 Jul 2025 01:00:08 +0000
Manifest next update: Mon 28 Jul 2025 01:00:08 +0000
Files and hashes: 1: VJzfvUbstsweL94z-ivJL9s3ZVk.roa (hash: HgLrKuozmz+yIcpW2tKbtdhcaLEc8ycsnDPCev84zDI=)
2: ukxoXvpqLBBFY38CejJcCux5wBU.crl (hash: r2Q360Y+Mo0l/oh4kfQyt/RD6QGzGOM6kUDqDIEcWu4=)
3: ztUZv3t98zDrlPZTo-laONZjQE0.roa (hash: PyD/IDN5pwT/Z2dKrNt4DPnNuO7P4KGHdjRKj7cSR1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:64:f0:9b:dc:aa:75:66:1b:59:ff:64:3a:3c:9e:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4c685efa6a2c1045637f027a325c0aec79c015
Validity
Not Before: Jul 27 01:00:08 2025 GMT
Not After : Jul 28 01:00:08 2025 GMT
Subject: CN=92040fb59ec10af393299f802563eaf10648db7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:88:a5:f0:29:ca:3f:3f:f7:5b:a1:df:4c:a1:
66:07:c3:de:d3:14:5b:19:cb:9b:dd:70:e2:fb:d4:
d8:3e:ca:3c:5c:b2:58:25:5d:6c:27:fe:d4:71:39:
f3:9d:2b:d2:52:6a:6c:39:39:1f:29:4a:66:41:00:
ee:00:57:59:9b:5c:a1:55:ca:ff:6e:44:ce:81:bc:
d5:d9:02:11:81:65:96:78:70:61:3f:ed:e6:99:56:
6a:9e:7f:af:04:4a:13:4d:0b:cd:d1:e1:0b:e4:dc:
26:a0:13:a4:20:a7:65:dc:9c:f1:5d:bd:b5:9c:68:
00:7d:0a:33:28:05:cb:7e:ba:6c:e7:d1:f7:b7:9b:
c6:4a:3e:3b:0e:8f:93:bb:79:27:85:d4:8e:71:4d:
84:b2:62:38:c6:87:2f:87:01:8e:74:41:ca:ba:89:
42:0a:0a:5b:96:59:43:40:01:0b:a3:7f:cc:02:3a:
0c:d8:38:7e:44:cc:ee:df:b8:50:7c:19:56:2d:77:
e8:b4:5f:c5:60:27:4c:60:e8:00:c7:fd:da:c9:aa:
89:c2:fb:96:c3:5f:af:67:ff:69:88:cd:ba:2e:02:
8b:32:fa:21:24:89:19:e2:43:fc:9b:01:ee:00:a6:
f4:95:fc:28:df:bb:49:89:e1:09:31:14:6b:33:84:
0d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:04:0F:B5:9E:C1:0A:F3:93:29:9F:80:25:63:EA:F1:06:48:DB:7D
X509v3 Authority Key Identifier:
keyid:BA:4C:68:5E:FA:6A:2C:10:45:63:7F:02:7A:32:5C:0A:EC:79:C0:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:24:18:fd:c8:d9:4c:ab:f9:17:bc:74:24:4f:fd:16:b2:43:
6c:fb:66:01:2c:13:d5:fe:24:de:70:58:28:26:48:68:f8:32:
c2:c5:e2:87:48:65:52:ff:1c:7c:81:14:84:09:7e:21:d6:0d:
a1:f4:24:03:8f:18:6f:80:9a:7f:29:b4:11:9e:35:9e:c9:f6:
3c:49:e5:83:20:32:8a:7a:91:b7:37:c5:1d:6f:aa:7c:d7:33:
3f:59:24:60:8f:f7:6a:6d:bb:a8:15:9c:7d:b5:05:14:25:18:
19:28:bd:1e:e7:9f:ed:c6:cd:be:b0:3a:e5:de:bf:37:82:14:
b6:38:30:88:ec:9c:4c:a9:fe:ce:f2:66:f5:51:57:71:2b:40:
42:60:ab:5a:13:16:2f:4c:ac:93:6f:f6:f4:5f:96:cd:0c:6e:
ce:d3:31:d5:0c:54:92:d9:54:d2:60:d4:65:42:20:8a:b6:c5:
bf:37:1c:19:12:44:5f:f4:ef:f7:06:a5:da:c1:10:4e:4c:dc:
d8:3e:f8:7c:f0:8a:7b:99:cf:08:94:08:88:8b:ff:fe:2d:88:
ab:c1:ca:bd:2b:64:91:32:43:88:31:57:d6:e2:cd:a1:5b:5a:
73:08:88:21:0a:90:38:64:f3:4a:c5:09:ce:3c:2b:a0:92:af:
31:3f:59:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:29:46 2025 by rpki-client