
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft
File: ukBDlux3brxmOzeQT1O_by22l94.mft (raw, json)
Hash identifier: 1ByuNr6FHJoMxo4bQ5Mw6sjORb9HxeEOzoCiqkPCd10=
Subject key identifier: C0:7A:CE:B3:5F:CC:6E:8D:89:D8:FE:96:CE:86:C0:7B:F6:28:90:C2
Authority key identifier: BA:40:43:96:EC:77:6E:BC:66:3B:37:90:4F:53:BF:6F:2D:B6:97:DE
Certificate issuer: /CN=ba404396ec776ebc663b37904f53bf6f2db697de
Certificate serial: 019758DACE63C30CC754CB555A2DA59526F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ukBDlux3brxmOzeQT1O_by22l94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft
Manifest number: 1495
Signing time: Tue 10 Jun 2025 08:00:23 +0000
Manifest this update: Tue 10 Jun 2025 08:00:23 +0000
Manifest next update: Wed 11 Jun 2025 08:00:23 +0000
Files and hashes: 1: Al3GYSjIWjO-oik-aQgGBmqTDw0.roa (hash: +Y3s+IGFA905SwB8NeoX4D8JKu+EPEFHDlQOQJhAZjY=)
2: ukBDlux3brxmOzeQT1O_by22l94.crl (hash: 0ZOU2JrDRAWHM4jFpR9hHvIn3OoI0UUqaWgPffhmSYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft
rsync://rpki.ripe.net/repository/DEFAULT/ukBDlux3brxmOzeQT1O_by22l94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:da:ce:63:c3:0c:c7:54:cb:55:5a:2d:a5:95:26:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba404396ec776ebc663b37904f53bf6f2db697de
Validity
Not Before: Jun 10 08:00:23 2025 GMT
Not After : Jun 11 08:00:23 2025 GMT
Subject: CN=c07aceb35fcc6e8d89d8fe96ce86c07bf62890c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:87:a2:d8:a6:2d:d6:2b:8b:64:94:54:1e:d3:
27:a0:6c:c6:9f:1b:f3:3d:53:72:ee:21:8e:47:15:
59:8f:9a:eb:16:07:9f:2b:52:6f:15:12:0c:62:50:
83:c3:2c:3d:77:a5:41:89:95:80:52:80:79:f0:14:
c7:62:52:98:43:78:ad:f0:bf:48:a2:8f:a9:97:d6:
c0:ae:db:a5:3a:e5:11:ec:7d:e4:77:c2:e5:1f:aa:
83:f2:c2:33:93:1c:50:1d:48:cd:c0:55:12:9d:b0:
4b:57:55:9e:2c:31:6b:0e:14:e2:8a:37:2e:1a:c8:
7c:d6:eb:81:91:52:65:ab:4c:ae:ac:15:6a:32:d8:
1e:74:f0:a3:b5:4f:b1:89:ff:9a:c8:68:06:d9:35:
25:cb:b5:fb:e8:31:1e:66:32:3f:a6:35:1d:d4:c5:
ac:78:db:21:a5:5e:84:69:e6:a9:9b:c8:a1:fd:b1:
d1:f5:12:38:bd:b5:a6:97:9c:65:56:10:9d:69:ae:
e0:95:3b:9b:18:ab:00:0b:dc:3b:54:40:82:ae:58:
3c:7e:ff:66:1e:5f:47:f0:b6:93:5c:2b:32:9d:6b:
af:9b:f3:09:f0:9c:65:f9:8b:8c:c0:d7:ad:f9:21:
17:ea:eb:5c:d6:cc:81:22:6f:22:80:60:7c:0d:d8:
cf:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:7A:CE:B3:5F:CC:6E:8D:89:D8:FE:96:CE:86:C0:7B:F6:28:90:C2
X509v3 Authority Key Identifier:
keyid:BA:40:43:96:EC:77:6E:BC:66:3B:37:90:4F:53:BF:6F:2D:B6:97:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukBDlux3brxmOzeQT1O_by22l94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:cb:cd:cd:9d:60:f4:cc:7d:91:f9:b7:63:52:2c:f1:8d:01:
d1:c5:4a:72:a5:dd:9f:39:ce:d2:22:a6:7b:6e:25:62:9e:1f:
ad:ac:4f:b9:d0:28:2c:f8:d6:2d:29:de:c0:1e:61:22:6c:e6:
c7:cc:b0:c3:c5:d5:08:0e:81:6c:f2:34:13:d7:1f:ec:f0:ab:
2f:05:91:c5:a0:23:07:c1:79:18:8c:12:78:1b:c3:73:82:be:
ed:58:4b:82:f2:24:30:16:96:8a:97:61:12:f9:16:d0:87:32:
5a:86:79:a6:63:7a:f2:6b:9e:8c:f0:e8:34:06:92:13:d4:0b:
20:dc:13:1c:ad:b5:77:f0:38:90:26:13:52:a3:da:ac:a4:36:
94:c6:11:5a:88:93:44:c4:d1:49:3b:ff:4a:d8:7a:c1:8e:1d:
a3:51:e8:0b:aa:33:83:97:77:15:ba:cd:26:e5:5b:56:76:5f:
78:15:c2:68:e9:31:31:eb:a6:97:b9:a3:13:5e:72:2a:4f:e5:
81:da:c1:bb:66:c2:1e:37:db:e0:02:27:1a:8a:24:94:0c:93:
ce:54:69:98:d2:be:93:06:7c:4e:bd:45:91:c7:67:63:7a:9d:
f4:42:af:83:4e:fb:c2:57:98:ca:0e:ff:6f:f8:ad:1d:e9:8b:
9b:85:a0:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 13:07:23 2025 by rpki-client