Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft
File: ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft (raw, json)
Hash identifier: KDQNk3pE4bP/q4uzPGEWAJ+lvrS6xslWI7W2atli3pU=
Subject key identifier: 6A:82:7D:49:47:7C:77:70:A6:E5:97:33:40:94:6F:E8:4B:1E:31:C6
Authority key identifier: BA:4A:0D:1D:80:FF:1E:EC:D3:65:90:74:A4:97:BF:BE:8C:55:43:F6
Certificate issuer: /CN=ba4a0d1d80ff1eecd3659074a497bfbe8c5543f6
Certificate serial: 019A23657FCA1EA6BD1E07A4BDCD5FF426EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft
Manifest number: 07FE
Signing time: Mon 27 Oct 2025 02:00:45 +0000
Manifest this update: Mon 27 Oct 2025 02:00:45 +0000
Manifest next update: Tue 28 Oct 2025 02:00:45 +0000
Files and hashes: 1: JeZLPNCPKVMS7Vt6LZeXxA-ds0g.roa (hash: /f0u5t1QpLsdf+IADDIVQN8I7srP1xn8uwV6B+UG0jU=)
2: ukoNHYD_HuzTZZB0pJe_voxVQ_Y.crl (hash: 1WdYXr9w4+foH38WdKXLeOnFa2uD1HcOoQb85iJBnDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 02:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:65:7f:ca:1e:a6:bd:1e:07:a4:bd:cd:5f:f4:26:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4a0d1d80ff1eecd3659074a497bfbe8c5543f6
Validity
Not Before: Oct 27 02:00:45 2025 GMT
Not After : Oct 28 02:00:45 2025 GMT
Subject: CN=6a827d49477c7770a6e5973340946fe84b1e31c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:04:66:26:e0:9d:8d:12:4f:c5:99:57:7b:25:
2e:51:fe:db:ec:58:60:6d:c7:2f:bd:d4:52:16:a1:
e9:8f:29:f2:0a:a1:40:3d:90:86:e6:06:2a:ea:4b:
a0:89:7c:30:00:67:91:e8:cf:4b:ae:90:4e:bf:1c:
7c:42:3e:6b:61:78:d1:65:98:c4:2b:60:13:fa:cb:
a6:a4:34:6b:39:b2:bb:d9:3e:27:86:81:00:c6:7b:
d6:92:c0:ae:dc:e2:3e:64:9f:61:fc:00:9b:b8:fc:
75:6f:3c:4f:e8:1e:45:a5:5d:bd:d5:46:d3:84:d9:
45:da:45:23:80:95:48:5f:3f:4f:7b:87:58:8c:6d:
01:85:5b:a9:42:78:80:66:ee:b6:72:fa:88:41:42:
c5:2f:a8:b0:4f:38:3e:15:ff:c4:61:91:b9:c8:9e:
b3:02:1b:0a:fd:f6:66:59:97:79:99:68:ab:87:a6:
ba:db:dd:44:b0:7f:db:e2:12:da:ae:3c:ab:48:3a:
11:70:a7:75:b0:2a:57:b0:f6:8c:35:f3:e4:aa:22:
5c:64:a2:30:69:72:30:f5:2c:50:7d:59:f5:4b:21:
1c:45:54:00:f5:ed:22:2b:65:d2:5d:4d:4a:10:84:
a3:a7:65:59:c1:56:3d:8c:96:1e:01:50:93:87:44:
f7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:82:7D:49:47:7C:77:70:A6:E5:97:33:40:94:6F:E8:4B:1E:31:C6
X509v3 Authority Key Identifier:
keyid:BA:4A:0D:1D:80:FF:1E:EC:D3:65:90:74:A4:97:BF:BE:8C:55:43:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b5fa3e-a218-4a91-bf88-cc8ec6f3d875/1/ukoNHYD_HuzTZZB0pJe_voxVQ_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:42:44:10:c4:b9:e5:13:2b:0f:da:21:a6:93:3d:c0:86:95:
da:8d:a1:07:aa:b0:d7:75:0a:c4:95:f2:70:07:0a:64:c5:3a:
98:b7:9b:0c:72:08:2a:e2:88:00:ff:de:f9:17:43:7a:f8:79:
28:eb:14:d9:4f:b1:c0:c5:20:81:81:23:e3:90:ff:d7:ab:10:
ab:88:ee:f6:40:3d:4a:fe:f4:01:0d:3d:28:ef:05:50:17:87:
fe:9a:95:68:74:7f:72:e6:48:49:c7:20:dc:17:14:79:81:cc:
05:52:c8:f9:92:9a:48:15:4c:66:01:3f:e7:56:61:6b:f1:0c:
5c:9d:22:e2:f1:5c:7e:85:b6:07:3a:2a:8b:d8:a7:f6:77:51:
0b:d4:42:43:97:3f:93:a8:46:82:92:58:5a:7c:9f:8d:4d:66:
7a:85:e2:8c:63:61:bb:d0:22:65:32:0f:56:e7:05:44:01:e6:
fd:9b:e7:45:1a:bf:29:96:b6:6a:32:3f:5e:e0:eb:5d:4b:43:
3a:3d:0c:b0:8d:3e:48:7d:50:07:ee:02:48:34:eb:33:bb:ef:
2d:fb:31:68:ab:76:fe:dc:dc:7a:5c:fb:d3:7f:a1:61:43:d8:
76:78:35:4c:10:da:d4:2e:91:a3:81:ef:eb:32:25:ae:5d:24:
f4:d2:8b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 09:22:57 2025 by rpki-client