Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/fbd6c5-460e-44fc-b074-8bfdb969859c/1/UkE_LlWQcATFq2mJ3n7tFUNTWBE.mft
File: UkE_LlWQcATFq2mJ3n7tFUNTWBE.mft (raw, json)
Hash identifier: YXbuAQf3pWpsXtSdupv2VBhwwwPX6lRAHBGVZFT4jyk=
Subject key identifier: 61:68:1A:9A:A2:D5:BF:5D:7D:59:F2:49:58:71:67:83:19:01:8C:4C
Authority key identifier: 52:41:3F:2E:55:90:70:04:C5:AB:69:89:DE:7E:ED:15:43:53:58:11
Certificate issuer: /CN=52413f2e55907004c5ab6989de7eed1543535811
Certificate serial: 019849659D3AD4FB0803B1FB180BC2A617F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UkE_LlWQcATFq2mJ3n7tFUNTWBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/fbd6c5-460e-44fc-b074-8bfdb969859c/1/UkE_LlWQcATFq2mJ3n7tFUNTWBE.mft
Manifest number: 06A8
Signing time: Sun 27 Jul 2025 01:00:52 +0000
Manifest this update: Sun 27 Jul 2025 01:00:52 +0000
Manifest next update: Mon 28 Jul 2025 01:00:52 +0000
Files and hashes: 1: UkE_LlWQcATFq2mJ3n7tFUNTWBE.crl (hash: yds8Pw9MPnfrXgAqWrrK3NfrlZ3M7WbF+d671skGgGc=)
2: pPr-RfjQ8TKLflLIUQw5yKTIFpY.roa (hash: oEBThZTfbjTX75q4IqjgPgOk7OlUAtwvGwGIzijgHts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/fbd6c5-460e-44fc-b074-8bfdb969859c/1/UkE_LlWQcATFq2mJ3n7tFUNTWBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/fbd6c5-460e-44fc-b074-8bfdb969859c/1/UkE_LlWQcATFq2mJ3n7tFUNTWBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UkE_LlWQcATFq2mJ3n7tFUNTWBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:9d:3a:d4:fb:08:03:b1:fb:18:0b:c2:a6:17:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52413f2e55907004c5ab6989de7eed1543535811
Validity
Not Before: Jul 27 01:00:52 2025 GMT
Not After : Jul 28 01:00:52 2025 GMT
Subject: CN=61681a9aa2d5bf5d7d59f2495871678319018c4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:de:14:d1:c4:02:85:19:e7:62:c1:96:fe:83:
4b:2f:7c:d1:58:62:d7:3b:aa:85:aa:dd:45:f7:9f:
8e:81:b5:f4:3e:32:3b:bb:c0:dc:46:95:41:c3:0f:
7a:be:28:90:2a:6e:e4:b2:25:0a:db:d9:23:a6:42:
80:fa:5f:38:99:57:ef:21:02:01:9d:12:e3:89:90:
5d:4f:bd:ed:14:89:6d:2f:80:fa:7c:35:a0:10:6a:
8c:f9:2c:8a:f9:dd:db:97:92:01:5f:ca:14:bc:e8:
c5:fc:d5:3f:ad:96:3a:c8:7c:2a:fa:39:79:e4:21:
d0:f6:6e:bf:6c:39:b9:80:03:98:fd:55:81:de:5a:
cc:c0:f6:c2:e7:e4:e6:b4:dc:ef:6b:22:4b:3a:d6:
7a:7c:a3:6c:05:fb:62:11:b7:33:ce:f9:94:cd:1a:
b0:14:03:0c:a4:55:8a:4d:82:bd:dd:07:f9:0c:a7:
f0:e8:8a:e7:52:11:a0:3a:5d:6e:18:c0:15:e0:c1:
6f:73:84:20:91:25:c0:d9:79:fa:a3:b8:82:a2:d9:
eb:66:63:e3:ab:82:78:d5:66:c7:6b:c6:58:6c:25:
ac:88:e6:8e:26:3d:0c:ce:4d:65:a0:a5:1e:ea:ad:
93:12:de:c0:58:bf:68:6f:e2:fa:e6:d8:4c:6f:2f:
cf:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:68:1A:9A:A2:D5:BF:5D:7D:59:F2:49:58:71:67:83:19:01:8C:4C
X509v3 Authority Key Identifier:
keyid:52:41:3F:2E:55:90:70:04:C5:AB:69:89:DE:7E:ED:15:43:53:58:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UkE_LlWQcATFq2mJ3n7tFUNTWBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fbd6c5-460e-44fc-b074-8bfdb969859c/1/UkE_LlWQcATFq2mJ3n7tFUNTWBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fbd6c5-460e-44fc-b074-8bfdb969859c/1/UkE_LlWQcATFq2mJ3n7tFUNTWBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:f3:bb:55:36:09:55:23:3d:c6:28:39:4b:af:c9:45:24:1c:
ff:70:53:d8:31:dc:98:f4:ce:67:53:51:83:fd:39:35:70:52:
d6:4a:61:2e:93:ef:ff:e0:18:2e:bc:7f:e3:f3:11:3f:fa:9e:
91:d8:86:0f:a4:37:d2:1e:2b:f2:b1:c8:80:2a:d2:f4:9e:e9:
6f:bc:a5:4a:87:d7:cf:c9:1d:f0:e1:c4:d7:be:4b:af:92:7a:
ba:d5:1e:29:19:81:47:bc:da:a8:da:29:2e:8f:91:61:c5:a7:
d2:d1:9a:3d:08:c2:d5:e6:9b:80:6c:d3:47:07:fb:c5:81:68:
03:54:19:23:9e:46:d0:bc:60:c0:dc:41:1b:22:18:c0:e4:dc:
56:ed:87:85:d7:0a:01:5a:3c:a6:ed:17:5c:d5:8c:0d:ff:c4:
dc:53:8d:d2:8f:85:78:b0:f1:33:f8:cb:8c:dc:88:99:c2:7b:
4c:b6:4b:73:ad:b0:2e:55:b0:83:17:84:e1:1e:ee:7f:db:e7:
15:c0:67:81:35:86:13:07:6a:f7:74:64:4b:01:b1:85:2e:c5:
b5:61:80:96:2a:51:ea:78:31:c0:0f:14:b5:26:27:b4:0f:10:
b7:99:e0:81:a3:26:a4:8a:29:7c:f2:7c:c8:f6:7c:69:ab:38:
78:fc:2a:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZZ061PsIA7H7GAvCphf1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNDEzZjJlNTU5MDcwMDRjNWFiNjk4OWRlN2VlZDE1NDM1
MzU4MTEwHhcNMjUwNzI3MDEwMDUyWhcNMjUwNzI4MDEwMDUyWjAzMTEwLwYDVQQD
Eyg2MTY4MWE5YWEyZDViZjVkN2Q1OWYyNDk1ODcxNjc4MzE5MDE4YzRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAst4U0cQChRnnYsGW/oNLL3zRWGLX
O6qFqt1F95+OgbX0PjI7u8DcRpVBww96viiQKm7ksiUK29kjpkKA+l84mVfvIQIB
nRLjiZBdT73tFIltL4D6fDWgEGqM+SyK+d3bl5IBX8oUvOjF/NU/rZY6yHwq+jl5
5CHQ9m6/bDm5gAOY/VWB3lrMwPbC5+TmtNzvayJLOtZ6fKNsBftiEbczzvmUzRqw
FAMMpFWKTYK93Qf5DKfw6IrnUhGgOl1uGMAV4MFvc4QgkSXA2Xn6o7iCotnrZmPj
q4J41WbHa8ZYbCWsiOaOJj0Mzk1loKUe6q2TEt7AWL9ob+L65thMby/PzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGFoGpqi1b9dfVnySVhxZ4MZAYxMMB8GA1UdIwQY
MBaAFFJBPy5VkHAExatpid5+7RVDU1gRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWtFX0xsV1FjQVRGcTJtSjNuN3RGVU5UV0JFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9mYmQ2YzUtNDYwZS00NGZjLWIwNzQt
OGJmZGI5Njk4NTljLzEvVWtFX0xsV1FjQVRGcTJtSjNuN3RGVU5UV0JFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9mYmQ2YzUtNDYwZS00NGZjLWIwNzQtOGJmZGI5Njk4NTlj
LzEvVWtFX0xsV1FjQVRGcTJtSjNuN3RGVU5UV0JFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABPO7VTYJ
VSM9xig5S6/JRSQc/3BT2DHcmPTOZ1NRg/05NXBS1kphLpPv/+AYLrx/4/MRP/qe
kdiGD6Q30h4r8rHIgCrS9J7pb7ylSofXz8kd8OHE175Lr5J6utUeKRmBR7zaqNop
Lo+RYcWn0tGaPQjC1eabgGzTRwf7xYFoA1QZI55G0LxgwNxBGyIYwOTcVu2HhdcK
AVo8pu0XXNWMDf/E3FON0o+FeLDxM/jLjNyImcJ7TLZLc62wLlWwgxeE4R7uf9vn
FcBngTWGEwdq93RkSwGxhS7FtWGAlipR6ngxwA8UtSYntA8Qt5nggaMmpIopfPJ8
yPZ8aas4ePwqTA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:01:22 2025 by rpki-client