Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.mft
File: uksi0igKF9DVTGhsm0M_C1tYAk8.mft (raw, json)
Hash identifier: 97IUTiM4DgJKk8VEjpI3PLHVqHyKgON4VQSnqUkWMRc=
Subject key identifier: 91:4E:18:CC:4C:53:8C:A2:4D:B9:44:E9:12:29:6B:5F:AD:21:E3:01
Authority key identifier: BA:4B:22:D2:28:0A:17:D0:D5:4C:68:6C:9B:43:3F:0B:5B:58:02:4F
Certificate issuer: /CN=ba4b22d2280a17d0d54c686c9b433f0b5b58024f
Certificate serial: 019A730198C22C1A7D5C236F495728CADD4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uksi0igKF9DVTGhsm0M_C1tYAk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.mft
Manifest number: 1607
Signing time: Tue 11 Nov 2025 13:01:15 +0000
Manifest this update: Tue 11 Nov 2025 13:01:15 +0000
Manifest next update: Wed 12 Nov 2025 13:01:15 +0000
Files and hashes: 1: uksi0igKF9DVTGhsm0M_C1tYAk8.crl (hash: epWk4r+rRyPHXCgQ/QzWSdUssC1AzL6ZTbmTwqpLA4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uksi0igKF9DVTGhsm0M_C1tYAk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:98:c2:2c:1a:7d:5c:23:6f:49:57:28:ca:dd:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4b22d2280a17d0d54c686c9b433f0b5b58024f
Validity
Not Before: Nov 11 13:01:15 2025 GMT
Not After : Nov 12 13:01:15 2025 GMT
Subject: CN=914e18cc4c538ca24db944e912296b5fad21e301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:68:4f:de:b1:c6:3a:3e:74:a2:07:75:df:d7:
cf:4b:67:ad:19:22:13:a7:fc:ba:f6:b5:c3:a0:29:
34:3a:8b:e6:4b:41:99:3f:b5:e8:da:5b:59:3d:8f:
42:6c:2c:7d:80:77:e7:cb:bf:57:54:bd:8c:14:8c:
23:03:1b:07:1f:2d:92:b2:9a:0d:eb:1a:ad:2d:81:
98:42:10:34:d3:0d:fc:3f:22:a6:95:15:ae:31:c3:
cb:76:88:cc:bd:47:bf:8d:74:cd:44:5c:37:d7:6f:
08:6e:5f:d9:2a:6a:ce:c5:44:ef:7b:6d:c7:9b:26:
30:70:c3:e5:d6:3a:b8:2a:45:f6:8c:88:15:6a:d9:
0e:a3:74:f7:0e:14:e7:cb:99:fa:81:57:7f:65:34:
a6:1f:65:9a:d8:aa:66:56:a1:3b:97:cc:11:54:a6:
a1:06:bd:4e:c2:77:d3:a4:98:c1:f8:98:36:a6:79:
44:bb:d7:d7:ce:f6:6c:f9:bb:be:a0:01:8b:da:98:
68:4a:53:08:7f:4b:12:60:12:a0:82:a6:32:52:f5:
91:e7:12:ee:3a:4e:c4:1b:b7:6f:86:d9:7f:42:b2:
1e:bb:c7:a4:07:a5:b6:8a:f1:a4:5b:97:ac:c0:3c:
9f:99:bc:2c:71:48:21:7a:12:5d:c8:38:6a:48:a0:
e7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:4E:18:CC:4C:53:8C:A2:4D:B9:44:E9:12:29:6B:5F:AD:21:E3:01
X509v3 Authority Key Identifier:
keyid:BA:4B:22:D2:28:0A:17:D0:D5:4C:68:6C:9B:43:3F:0B:5B:58:02:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uksi0igKF9DVTGhsm0M_C1tYAk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:57:a1:71:de:cc:d7:75:8b:f3:cb:93:f5:85:05:bd:cc:4c:
9b:c5:b1:5e:a8:96:8d:6d:e0:21:72:0f:f4:36:75:34:cf:7d:
81:7c:ed:e9:6a:8e:05:52:b6:dd:23:71:df:c4:b0:37:2a:55:
02:40:3d:9c:ca:8a:b0:fc:ee:f8:e0:c8:34:2e:1a:3d:d5:2e:
62:63:0a:2b:ba:07:8b:26:67:24:5d:e7:c8:52:74:cd:4b:9d:
fe:7c:29:fb:e9:dc:57:5f:60:cd:08:7f:b8:96:73:ef:33:20:
55:a1:ed:43:40:4d:c0:d7:5b:86:81:2e:dd:bf:a5:47:98:43:
d7:10:82:48:72:a8:0e:65:72:15:c7:54:b2:93:2c:bf:16:fd:
f2:0f:80:27:14:b7:95:ff:d4:85:ba:64:3a:7c:43:c2:8f:68:
58:ec:f6:51:35:75:40:9c:64:2f:71:ee:6b:3b:69:76:95:ed:
14:e1:89:3a:97:11:e1:0e:28:05:eb:74:30:98:94:a5:66:2f:
d0:cf:78:96:9f:8a:5f:03:cc:c3:17:64:96:54:a9:97:08:70:
de:92:2b:bc:e1:0e:a0:ad:13:5d:31:3e:c6:9f:2d:52:d5:f6:
22:45:92:b7:ff:37:ab:7d:00:a2:46:ec:07:a4:e5:4a:63:0e:
d8:a7:6a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:17:32 2025 by rpki-client