Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
File: ukxoXvpqLBBFY38CejJcCux5wBU.mft (raw, json)
Hash identifier: P0eEi/LVzHAdnoGFKCa0B2Yg5iZzLjR3A5c4D97u9m4=
Subject key identifier: 06:EE:0F:51:6F:71:AE:3D:20:90:AC:C2:1B:66:D0:6D:7F:F5:A7:85
Authority key identifier: BA:4C:68:5E:FA:6A:2C:10:45:63:7F:02:7A:32:5C:0A:EC:79:C0:15
Certificate issuer: /CN=ba4c685efa6a2c1045637f027a325c0aec79c015
Certificate serial: 019A01B4F5AA503332C65BB5F6CEC7E81673
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
Manifest number: 0AAB
Signing time: Mon 20 Oct 2025 13:00:27 +0000
Manifest this update: Mon 20 Oct 2025 13:00:27 +0000
Manifest next update: Tue 21 Oct 2025 13:00:27 +0000
Files and hashes: 1: VJzfvUbstsweL94z-ivJL9s3ZVk.roa (hash: HgLrKuozmz+yIcpW2tKbtdhcaLEc8ycsnDPCev84zDI=)
2: ukxoXvpqLBBFY38CejJcCux5wBU.crl (hash: LPS9ftyD4ksCydUhox+Lu5uGsMndYyqfmHF0Wlxde+s=)
3: ztUZv3t98zDrlPZTo-laONZjQE0.roa (hash: PyD/IDN5pwT/Z2dKrNt4DPnNuO7P4KGHdjRKj7cSR1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b4:f5:aa:50:33:32:c6:5b:b5:f6:ce:c7:e8:16:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4c685efa6a2c1045637f027a325c0aec79c015
Validity
Not Before: Oct 20 13:00:27 2025 GMT
Not After : Oct 21 13:00:27 2025 GMT
Subject: CN=06ee0f516f71ae3d2090acc21b66d06d7ff5a785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3d:42:bc:ba:25:a6:a2:d5:b2:22:90:26:17:
7a:59:83:3b:07:54:3b:c7:8e:69:1a:6e:b7:08:6d:
70:42:86:84:c6:ff:3d:8f:b4:ac:2b:4e:6e:a6:62:
70:f2:81:83:f2:8e:26:4e:8d:8a:16:3e:b9:67:c4:
b1:ee:71:e0:a8:7d:53:0d:e5:68:ce:77:93:b4:3c:
41:61:82:be:de:27:4d:c9:bc:9c:9e:e7:90:d4:ca:
21:42:9e:42:5e:7a:47:c9:17:fb:c7:c5:d6:47:fb:
b1:00:38:de:db:bd:b7:9d:02:f3:d2:d3:3e:6a:3d:
52:3f:de:15:2f:81:77:27:d2:9d:ea:43:a5:60:84:
07:a9:b5:08:1f:40:15:04:79:89:ee:49:86:2d:38:
a5:d0:25:6c:62:a2:10:16:36:67:d7:2e:0b:5a:79:
46:68:ca:a8:23:21:a3:ca:86:8f:4a:62:0a:0b:db:
b6:dd:49:a3:5b:3c:d0:ba:c8:8d:4e:b0:0c:d0:71:
ce:5c:49:c0:d1:8d:7b:72:96:b3:00:a1:d4:ab:61:
c6:64:31:e9:4c:0c:82:9b:29:76:e5:74:be:d8:3c:
b9:7e:0d:a3:f2:68:54:fa:cd:62:03:c2:1b:58:24:
1d:db:51:b2:ef:19:12:58:35:10:3a:a3:4c:16:3c:
98:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:EE:0F:51:6F:71:AE:3D:20:90:AC:C2:1B:66:D0:6D:7F:F5:A7:85
X509v3 Authority Key Identifier:
keyid:BA:4C:68:5E:FA:6A:2C:10:45:63:7F:02:7A:32:5C:0A:EC:79:C0:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:be:c0:a3:a1:ab:dc:a3:05:fc:67:9e:b4:70:c9:87:76:ed:
a1:cf:84:cd:9e:d3:84:05:98:18:a3:fc:14:c7:7c:e8:c8:85:
79:d3:41:ee:be:c7:bf:95:5a:01:69:6e:37:62:ba:ac:19:bc:
66:eb:7f:de:2e:95:62:76:12:1a:3f:09:d4:b1:c6:e3:36:a0:
07:1d:c6:af:65:0c:db:6f:bf:9f:44:33:d7:91:20:36:a1:30:
b8:8f:2c:eb:78:22:71:81:db:29:fc:52:e8:4a:5c:7a:ac:55:
24:ff:f2:7c:8e:79:35:a1:56:b8:c5:7e:1c:9f:13:c0:a8:1e:
d3:d0:cc:36:bf:a9:78:cb:39:f0:52:08:78:33:c8:83:60:42:
13:8f:0b:91:b8:da:69:a9:8f:ae:d9:8d:2c:eb:ff:1a:20:11:
fd:ed:87:ff:e6:aa:f6:2a:a6:42:8a:93:fd:ef:d9:9e:9e:b6:
1d:06:20:26:ab:67:71:0b:87:b7:53:23:73:24:bc:3e:ba:52:
2a:cc:cc:fe:16:53:1e:9a:dc:0d:4d:8a:52:1c:8b:a5:58:64:
7d:2c:06:3f:a6:04:88:4d:7b:2e:da:ef:bd:a0:74:2e:35:8b:
f7:93:4d:b5:69:60:26:06:1c:1f:91:0a:a0:e8:e1:4c:2d:7b:
4e:41:7c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:57:15 2025 by rpki-client