Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/ab3219-c64b-470e-8341-3a12027400e6/1/ukQzhlmFp7teJpw3lK5vFkz8Lds.mft
File: ukQzhlmFp7teJpw3lK5vFkz8Lds.mft (raw, json)
Hash identifier: EMWQh+li6lSlvKWVCK+Su+hYEFXVNWlfpwOKOT6gB0E=
Subject key identifier: BA:68:A3:02:46:9E:FA:86:18:7E:DD:5D:2F:94:43:EB:A8:FC:DE:04
Authority key identifier: BA:44:33:86:59:85:A7:BB:5E:26:9C:37:94:AE:6F:16:4C:FC:2D:DB
Certificate issuer: /CN=ba4433865985a7bb5e269c3794ae6f164cfc2ddb
Certificate serial: 019A70DC162A29120237D570E7EBE1A0BA40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ukQzhlmFp7teJpw3lK5vFkz8Lds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/ab3219-c64b-470e-8341-3a12027400e6/1/ukQzhlmFp7teJpw3lK5vFkz8Lds.mft
Manifest number: 06FE
Signing time: Tue 11 Nov 2025 03:01:03 +0000
Manifest this update: Tue 11 Nov 2025 03:01:03 +0000
Manifest next update: Wed 12 Nov 2025 03:01:03 +0000
Files and hashes: 1: AlkZJ5y5SgK5NicIMpQu5G4y-kk.roa (hash: 6pDsa6TgLwnLkjOOWWhXhHFWrv8bvlopmayBUNqycZY=)
2: ukQzhlmFp7teJpw3lK5vFkz8Lds.crl (hash: QfdSQmpdv6H56B0ut6ZVW9TMVfsPXGb8UldcCH6OhMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/ab3219-c64b-470e-8341-3a12027400e6/1/ukQzhlmFp7teJpw3lK5vFkz8Lds.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/ab3219-c64b-470e-8341-3a12027400e6/1/ukQzhlmFp7teJpw3lK5vFkz8Lds.mft
rsync://rpki.ripe.net/repository/DEFAULT/ukQzhlmFp7teJpw3lK5vFkz8Lds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:16:2a:29:12:02:37:d5:70:e7:eb:e1:a0:ba:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4433865985a7bb5e269c3794ae6f164cfc2ddb
Validity
Not Before: Nov 11 03:01:03 2025 GMT
Not After : Nov 12 03:01:03 2025 GMT
Subject: CN=ba68a302469efa86187edd5d2f9443eba8fcde04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:35:01:e8:99:00:dc:8c:ad:e4:a3:8b:27:11:
b8:5d:25:b5:4a:d9:ca:df:89:aa:fd:7a:c4:68:02:
ca:cc:bc:d8:1e:c3:ff:ee:68:dc:87:0f:79:78:4b:
64:10:e9:72:82:ae:37:4a:c4:c6:a3:79:81:d4:f5:
c6:52:61:ad:54:e7:0d:13:77:70:8e:d6:12:45:c3:
84:05:e2:1a:ae:36:d2:85:1a:79:7a:1a:4c:3c:da:
26:53:8c:23:ef:c9:16:7e:17:ac:fc:48:12:79:62:
28:a2:f1:3b:c0:d9:25:0b:0c:72:6d:b9:b4:18:87:
ca:af:ae:ec:fa:ed:c7:f7:c7:46:29:cd:1e:c0:e3:
44:21:a5:7a:58:cc:70:0d:1d:80:97:57:7d:f8:93:
5b:f5:c8:48:71:51:01:49:9e:33:34:61:12:c0:8d:
83:c3:65:e2:16:ae:4a:1a:08:b3:d2:37:d2:ad:7f:
ba:2d:ba:00:af:c0:ed:d3:ee:4f:54:7e:85:33:fc:
be:86:84:87:88:66:89:93:d2:2f:f1:93:05:50:82:
34:a1:53:de:d5:8c:f8:0c:1c:47:4d:ec:62:81:9b:
d1:c7:24:74:9d:a0:9c:b2:b1:dc:fa:d5:87:3c:8f:
88:00:83:58:f0:44:d1:d6:56:af:9b:ce:3b:39:60:
33:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:68:A3:02:46:9E:FA:86:18:7E:DD:5D:2F:94:43:EB:A8:FC:DE:04
X509v3 Authority Key Identifier:
keyid:BA:44:33:86:59:85:A7:BB:5E:26:9C:37:94:AE:6F:16:4C:FC:2D:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukQzhlmFp7teJpw3lK5vFkz8Lds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ab3219-c64b-470e-8341-3a12027400e6/1/ukQzhlmFp7teJpw3lK5vFkz8Lds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ab3219-c64b-470e-8341-3a12027400e6/1/ukQzhlmFp7teJpw3lK5vFkz8Lds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:71:71:e6:6a:8a:33:23:81:e3:1d:98:55:eb:ef:b9:c4:3d:
d1:cb:b4:a9:cd:c0:c4:9b:f5:b9:de:90:7a:85:52:f5:f8:ef:
9d:64:96:26:98:05:65:b6:2f:f0:e1:07:85:5b:85:f8:23:26:
6e:10:34:ea:e8:cc:4b:c6:92:43:14:33:8a:c4:15:8e:eb:03:
1e:74:24:bc:00:01:25:ad:74:b2:03:75:1a:37:11:4b:bc:f1:
e5:ab:94:b5:0e:f2:ef:b0:d1:78:4f:91:5c:c3:52:5d:13:ae:
2f:10:3a:b3:32:bf:bd:4b:b8:52:f5:f5:90:d3:78:a8:c5:02:
85:c9:af:41:78:7a:18:e2:54:15:03:bf:2f:c7:1b:fc:09:2d:
c9:be:1d:e4:cf:09:67:4d:bd:c7:e1:e3:e0:87:0c:80:d4:5b:
cd:51:c5:75:e6:37:a7:db:16:9b:86:57:a6:3b:d3:39:fa:bb:
24:90:ff:00:a4:e5:51:e3:aa:c9:d0:7c:42:d7:3c:32:d5:7d:
3c:46:6e:ad:ff:e6:7d:b2:d4:2b:27:0b:3d:8a:21:e4:f3:57:
d9:b7:bf:3e:65:11:ad:a3:65:3a:79:ce:82:3d:aa:ec:29:55:
17:74:23:6f:01:7d:4c:06:64:a6:f7:8a:da:8c:24:5c:ab:53:
d3:b7:3f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:25 2025 by rpki-client