Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
File: ukxoXvpqLBBFY38CejJcCux5wBU.mft (raw, json)
Hash identifier: g+Gx6DE9FtQ0RaJgYE8uZJCSZY3iMBpB/bPl+lUzMRg=
Subject key identifier: 70:CB:D5:CD:88:46:CB:88:AE:90:7C:F8:99:C7:22:B2:C5:01:01:0A
Authority key identifier: BA:4C:68:5E:FA:6A:2C:10:45:63:7F:02:7A:32:5C:0A:EC:79:C0:15
Certificate issuer: /CN=ba4c685efa6a2c1045637f027a325c0aec79c015
Certificate serial: 0197469E787E5F5A9DF33A03D503C1DAD5F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
Manifest number: 0941
Signing time: Fri 06 Jun 2025 19:01:19 +0000
Manifest this update: Fri 06 Jun 2025 19:01:19 +0000
Manifest next update: Sat 07 Jun 2025 19:01:19 +0000
Files and hashes: 1: VJzfvUbstsweL94z-ivJL9s3ZVk.roa (hash: HgLrKuozmz+yIcpW2tKbtdhcaLEc8ycsnDPCev84zDI=)
2: ukxoXvpqLBBFY38CejJcCux5wBU.crl (hash: mhqGmFUv50riWEavn9AhkCArbwjGhf/WfCElr1xpOtY=)
3: ztUZv3t98zDrlPZTo-laONZjQE0.roa (hash: PyD/IDN5pwT/Z2dKrNt4DPnNuO7P4KGHdjRKj7cSR1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 19:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9e:78:7e:5f:5a:9d:f3:3a:03:d5:03:c1:da:d5:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4c685efa6a2c1045637f027a325c0aec79c015
Validity
Not Before: Jun 6 19:01:19 2025 GMT
Not After : Jun 7 19:01:19 2025 GMT
Subject: CN=70cbd5cd8846cb88ae907cf899c722b2c501010a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fb:1b:9a:f2:1a:71:27:b8:41:cf:51:62:11:
90:9c:a3:a1:79:38:9e:36:6b:eb:a1:13:9f:0b:4f:
ca:1a:97:e1:20:7f:fb:89:62:d7:7f:61:c7:e7:95:
5e:21:f7:da:64:16:90:fa:e3:30:f2:eb:d7:ff:fa:
87:33:0b:c2:04:0f:ad:a8:b5:87:96:c1:ab:53:a7:
c7:4d:cd:d1:56:16:08:ba:85:b6:e5:ae:33:c6:0d:
55:a3:6b:2c:32:6a:9d:84:42:d2:f3:d1:8f:1a:4b:
b0:fa:20:88:4a:5e:40:74:fc:b5:2c:9a:ec:2d:24:
95:26:3e:f8:24:73:56:eb:47:05:6f:4c:23:91:1b:
2e:26:5a:26:23:98:4a:dd:79:06:f7:d7:a5:64:08:
44:1c:3d:a4:37:1a:02:b5:9b:de:05:92:1a:dd:21:
ce:66:f3:5b:d1:d8:27:e9:35:aa:ee:86:19:2c:02:
ed:8a:7a:fb:69:0d:69:fe:aa:ca:ee:75:86:ac:19:
9f:09:96:84:71:31:74:24:b1:94:ba:67:9e:3c:cc:
6a:e5:a9:0f:44:25:7b:fe:d8:9d:c2:bd:2f:ea:04:
90:bb:3e:3b:bf:40:f2:c2:ff:e8:a1:33:45:ac:2c:
df:d0:7f:0b:ba:e8:16:57:c3:ed:99:93:e8:a0:e7:
ae:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:CB:D5:CD:88:46:CB:88:AE:90:7C:F8:99:C7:22:B2:C5:01:01:0A
X509v3 Authority Key Identifier:
keyid:BA:4C:68:5E:FA:6A:2C:10:45:63:7F:02:7A:32:5C:0A:EC:79:C0:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:66:a9:7f:5a:ba:7d:eb:cb:e0:23:61:1f:10:e7:60:5e:50:
98:13:b1:b1:5f:61:7b:9d:a4:26:c3:5c:d8:a5:f5:f5:ef:9e:
71:d6:36:39:66:0c:65:b2:b4:04:a7:26:f1:2f:01:b8:be:56:
55:73:b3:01:af:b7:dc:30:1b:9c:3a:52:9e:e9:35:f0:ab:e8:
c7:91:f3:a4:98:6e:04:de:3b:7b:f8:cc:b8:a0:94:00:d3:71:
e5:14:ea:ce:d7:0b:0e:22:c0:69:50:c1:99:31:55:5c:bc:f6:
82:69:64:fb:1d:d0:a2:bc:c4:83:8f:85:f9:3f:de:61:86:01:
be:43:6b:f3:1f:49:cc:66:92:ea:82:62:1a:be:2a:ca:c6:cf:
13:e8:3d:58:3b:98:8a:48:8d:92:82:4a:9e:c2:4b:e1:ff:69:
11:69:63:54:af:68:80:10:73:35:8e:d7:6a:93:2b:ea:f6:42:
53:ae:fc:e2:48:0b:d2:99:97:56:4f:ae:31:a3:5b:bf:92:0f:
46:69:fe:22:7f:f6:2e:d8:d5:7c:e7:83:32:33:26:b9:01:27:
56:7c:2e:5b:43:af:25:25:55:6e:c6:c7:44:a5:3d:05:87:28:
22:32:42:fe:dd:26:c6:75:6b:ec:f2:d3:80:64:62:b6:3d:19:
48:d7:a0:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:00:35 2025 by rpki-client